Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EE28174B9A311F1A40E7B1CCF1D38B0.roa
File:                     5EE28174B9A311F1A40E7B1CCF1D38B0.roa (raw, json)
Hash identifier:          GtWtqvA+jPhsQJUCcWUP15XhTeCqUMKgmA2eomY/pF4=
Subject key identifier:   22:CC:62:6A:5D:81:DD:1A:70:EE:BC:F6:40:82:73:24:B5:E2:F1:D1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D910
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EE28174B9A311F1A40E7B1CCF1D38B0.roa
Signing time:             Sat 26 Sep 2026 12:11:15 +0000
ROA not before:           Sat 26 Sep 2026 12:11:11 +0000
ROA not after:            Sun 25 Oct 2026 12:11:11 +0000
asID:                     271355
IP address blocks:        156.236.224.0/24 maxlen: 24
                          156.236.230.0/24 maxlen: 24
                          156.236.231.0/24 maxlen: 24
                          156.236.232.0/24 maxlen: 24
                          156.236.233.0/24 maxlen: 24
                          156.236.234.0/24 maxlen: 24
                          156.236.235.0/24 maxlen: 24
                          156.236.236.0/24 maxlen: 24
                          156.236.237.0/24 maxlen: 24
                          156.236.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121104 (0x1d910)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 26 12:11:11 2026 GMT
            Not After : Oct 25 12:11:11 2026 GMT
        Subject: CN=6ab7b663-2cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f3:69:4e:23:99:36:2f:8d:39:51:95:0e:06:
                    17:06:d3:fa:fd:15:8a:37:cd:d2:45:4b:6c:25:1c:
                    0b:22:55:d0:2e:1f:5d:9a:c7:29:12:3a:1b:9b:df:
                    1c:0f:f5:7a:12:5e:66:01:39:99:57:70:20:bc:c9:
                    fc:a9:19:1e:1c:e6:b7:67:17:78:b5:47:a3:9b:82:
                    bb:07:62:cf:a6:9b:03:f1:5c:f4:a4:d7:50:99:0a:
                    3a:63:5b:8a:fb:cb:81:da:e8:53:aa:14:71:55:9f:
                    ad:c6:4c:1f:88:49:fc:27:e0:82:a3:1c:a5:18:17:
                    b2:0d:7d:6e:26:ad:59:af:42:c8:02:cb:ff:5c:78:
                    12:a4:a9:28:2e:85:ec:88:12:e3:d3:d8:52:72:01:
                    2b:23:d7:bf:3e:b0:48:17:85:c7:55:0b:81:49:b3:
                    b7:fd:42:8b:b4:48:35:da:e1:17:5a:c8:ec:8b:47:
                    6e:80:f8:32:1c:57:6f:5f:e3:57:60:ba:b1:47:c2:
                    65:e5:57:35:7a:2b:39:12:2c:53:07:b8:8d:8c:01:
                    fc:84:4d:0d:3c:7e:26:05:c3:c6:8a:81:3c:87:0c:
                    83:66:52:4c:cc:fe:12:6a:7c:42:0c:7a:12:35:06:
                    c1:3a:1a:c8:4b:db:3f:eb:70:43:f1:97:dd:a6:9b:
                    be:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CC:62:6A:5D:81:DD:1A:70:EE:BC:F6:40:82:73:24:B5:E2:F1:D1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EE28174B9A311F1A40E7B1CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.224.0/24
                  156.236.230.0-156.236.238.255

    Signature Algorithm: sha256WithRSAEncryption
         1e:40:87:f6:54:29:9a:2e:52:13:d0:cf:fd:41:f8:3b:26:24:
         d4:8e:95:f2:89:47:81:32:eb:98:62:78:a0:e0:c1:a1:cf:23:
         ef:20:f5:cf:da:fe:29:cc:00:c2:cd:e8:c8:6d:9d:5e:af:89:
         7b:b9:51:ac:c8:15:76:40:92:b2:de:13:01:25:42:94:5a:46:
         87:fd:f8:32:81:99:9d:2f:af:4b:7a:cc:19:10:62:60:4a:53:
         38:ce:3d:29:d2:f1:7a:a1:56:50:5d:09:cd:ec:48:5e:dc:ed:
         8e:92:c4:e0:3f:df:56:54:de:e4:a2:d0:8e:96:cf:f2:b0:1d:
         5f:a6:3c:73:b6:cc:90:72:3a:58:e4:87:73:d6:3d:7d:86:80:
         56:dc:1c:68:92:a5:9a:5e:55:9d:47:87:ba:39:ee:01:a8:ee:
         ce:83:67:c2:e6:77:2b:94:1b:df:11:47:23:1a:0d:5f:96:48:
         ba:e5:3c:c1:0a:4a:5e:55:39:cc:74:16:77:27:33:e4:27:d3:
         ae:fa:e0:92:cb:c4:c4:26:59:7b:20:d4:d7:8e:96:fd:85:43:
         56:83:61:96:62:d6:55:06:0b:3e:c5:00:6d:d4:08:02:43:87:
         12:6d:e8:d0:3a:79:1d:6c:6a:7a:99:4c:47:52:22:ae:41:b4:
         be:7f:de:ce
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAdkQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTI2MTIxMTExWhcNMjYxMDI1MTIxMTExWjAYMRYw
FAYDVQQDEw02YWI3YjY2My0yY2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwPNpTiOZNi+NOVGVDgYXBtP6/RWKN83SRUtsJRwLIlXQLh9dmscpEjob
m98cD/V6El5mATmZV3AgvMn8qRkeHOa3Zxd4tUejm4K7B2LPppsD8Vz0pNdQmQo6
Y1uK+8uB2uhTqhRxVZ+txkwfiEn8J+CCoxylGBeyDX1uJq1Zr0LIAsv/XHgSpKko
LoXsiBLj09hScgErI9e/PrBIF4XHVQuBSbO3/UKLtEg12uEXWsjsi0dugPgyHFdv
X+NXYLqxR8Jl5Vc1eis5EixTB7iNjAH8hE0NPH4mBcPGioE8hwyDZlJMzP4SanxC
DHoSNQbBOhrIS9s/63BD8Zfdppu+3wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFCLM
Ympdgd0acO689kCCcyS14vHRMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81RUUyODE3NEI5QTMxMUYxQTQwRTdCMUNDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAnOzgMAwDBAGc7OYDBACc7O4w
DQYJKoZIhvcNAQELBQADggEBAB5Ah/ZUKZouUhPQz/1B+DsmJNSOlfKJR4Ey65hi
eKDgwaHPI+8g9c/a/inMAMLN6MhtnV6viXu5UazIFXZAkrLeEwElQpRaRof9+DKB
mZ0vr0t6zBkQYmBKUzjOPSnS8XqhVlBdCc3sSF7c7Y6SxOA/31ZU3uSi0I6Wz/Kw
HV+mPHO2zJByOljkh3PWPX2GgFbcHGiSpZpeVZ1Hh7o57gGo7s6DZ8LmdyuUG98R
RyMaDV+WSLrlPMEKSl5VOcx0FncnM+Qn06764JLLxMQmWXsg1NeOlv2FQ1aDYZZi
1lUGCz7FAG3UCAJDhxJt6NA6eR1sanqZTEdSIq5BtL5/3s4=
-----END CERTIFICATE-----