Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6065715C9C7D11F1B46A46BCCE1D38B0.roa
File:                     6065715C9C7D11F1B46A46BCCE1D38B0.roa (raw, json)
Hash identifier:          038ReQ/AiW+l/jRkftsCSdiFX9x/cMb33GoenoQFEtg=
Subject key identifier:   AA:D8:C6:FC:57:A2:3F:C1:1D:2C:2A:B2:19:46:12:50:BA:E1:9A:AE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CEB8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6065715C9C7D11F1B46A46BCCE1D38B0.roa
Signing time:             Thu 20 Aug 2026 09:56:13 +0000
ROA not before:           Thu 20 Aug 2026 09:56:09 +0000
ROA not after:            Sat 10 Oct 2026 09:56:09 +0000
asID:                     401783
IP address blocks:        156.254.116.0/24 maxlen: 24
                          156.254.117.0/24 maxlen: 24
                          156.254.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118456 (0x1ceb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 09:56:09 2026 GMT
            Not After : Oct 10 09:56:09 2026 GMT
        Subject: CN=6a86cf3d-4f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:07:ce:0c:b3:07:40:f6:27:71:00:7b:13:6c:
                    f6:6c:1e:52:d5:ed:9b:6d:52:30:1d:7c:eb:74:1b:
                    3a:26:88:cd:f5:58:df:90:d4:60:6a:02:be:6e:ed:
                    74:28:84:58:d2:33:4d:34:c7:02:00:d9:07:fd:b2:
                    78:a5:40:f2:f1:ec:dc:57:f2:e4:a0:76:24:50:01:
                    36:fc:05:f4:32:93:da:6d:f9:e9:49:60:67:e7:37:
                    41:46:4d:11:16:74:95:c0:1b:ec:64:ce:8d:f0:56:
                    66:aa:7a:05:cb:ad:a0:61:67:2b:d3:4a:9f:49:2b:
                    ab:f4:95:08:5e:6f:16:53:bf:c1:72:ce:ba:48:01:
                    30:b3:a2:9f:0d:fe:43:83:33:02:2b:d0:61:76:7d:
                    2a:3a:bb:30:bb:b6:22:0b:e7:0d:0d:58:2e:5a:a8:
                    d9:e4:04:bb:74:33:53:60:49:74:84:92:b8:57:c6:
                    22:c5:1a:94:45:de:1e:26:fb:ce:0e:2a:f8:b3:fe:
                    f6:b9:c3:5d:3e:e8:96:d6:14:23:02:2e:e6:ca:5a:
                    d7:83:cc:28:10:ac:ba:7b:a2:6b:69:47:02:db:20:
                    45:a8:88:4f:9b:7a:e8:8b:6f:c3:21:24:27:17:c3:
                    61:85:86:45:c8:5c:83:97:a7:29:90:10:31:d6:bd:
                    13:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D8:C6:FC:57:A2:3F:C1:1D:2C:2A:B2:19:46:12:50:BA:E1:9A:AE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6065715C9C7D11F1B46A46BCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:d5:65:8a:a6:ea:3b:45:3e:7b:ff:f7:6e:11:12:71:39:80:
         7a:a5:8a:58:30:d6:3a:e6:20:e6:87:ef:c7:a5:47:8b:15:43:
         e6:4a:99:f1:c4:5c:d5:b6:9a:56:5c:3e:09:3c:98:ed:10:a6:
         28:62:4d:39:0c:f4:28:f9:19:59:46:7b:26:44:c2:21:4b:2a:
         4a:b5:4e:14:48:c5:45:bc:7a:ff:92:b0:1e:e4:35:07:c8:05:
         1b:09:75:c2:83:e9:60:fd:2b:22:cd:88:80:bb:cc:79:33:6b:
         7b:31:f1:d1:3f:97:af:3b:21:76:8a:57:c4:fd:ad:ce:ad:08:
         dd:e4:21:8b:9c:75:4d:bc:10:87:6b:89:06:d5:42:a3:6b:5d:
         a4:7f:e1:64:5c:68:15:e0:1a:67:bf:ac:2d:45:ab:38:25:07:
         0a:75:2e:76:0a:3b:3c:8b:9c:6a:4a:08:39:69:21:30:be:35:
         bb:56:20:6a:63:7f:25:f8:bf:df:9f:b7:24:b8:eb:f8:f2:0d:
         59:1c:c2:6f:81:2a:c2:20:f9:d7:1b:12:7b:6f:3f:32:fa:6e:
         89:fe:df:90:22:9c:5d:54:61:e4:0f:e8:8f:bc:51:20:45:82:
         78:c9:23:8a:fe:b6:20:4f:5d:dd:79:b8:fc:6c:a0:27:b0:eb:
         38:61:94:44
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAc64MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODIwMDk1NjA5WhcNMjYxMDEwMDk1NjA5WjAYMRYw
FAYDVQQDEw02YTg2Y2YzZC00ZjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0AfODLMHQPYncQB7E2z2bB5S1e2bbVIwHXzrdBs6JojN9VjfkNRgagK+
bu10KIRY0jNNNMcCANkH/bJ4pUDy8ezcV/LkoHYkUAE2/AX0MpPabfnpSWBn5zdB
Rk0RFnSVwBvsZM6N8FZmqnoFy62gYWcr00qfSSur9JUIXm8WU7/Bcs66SAEws6Kf
Df5DgzMCK9Bhdn0qOrswu7YiC+cNDVguWqjZ5AS7dDNTYEl0hJK4V8YixRqURd4e
JvvODir4s/72ucNdPuiW1hQjAi7mylrXg8woEKy6e6JraUcC2yBFqIhPm3roi2/D
ISQnF8NhhYZFyFyDl6cpkBAx1r0TvwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKrY
xvxXoj/BHSwqshlGElC64ZquMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82MDY1NzE1QzlDN0QxMUYxQjQ2QTQ2QkNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnP50MA0GCSqGSIb3DQEBCwUA
A4IBAQCk1WWKpuo7RT57//duERJxOYB6pYpYMNY65iDmh+/HpUeLFUPmSpnxxFzV
tppWXD4JPJjtEKYoYk05DPQo+RlZRnsmRMIhSypKtU4USMVFvHr/krAe5DUHyAUb
CXXCg+lg/SsizYiAu8x5M2t7MfHRP5evOyF2ilfE/a3OrQjd5CGLnHVNvBCHa4kG
1UKja12kf+FkXGgV4Bpnv6wtRas4JQcKdS52Cjs8i5xqSgg5aSEwvjW7ViBqY38l
+L/fn7ckuOv48g1ZHMJvgSrCIPnXGxJ7bz8y+m6J/t+QIpxdVGHkD+iPvFEgRYJ4
ySOK/rYgT13debj8bKAnsOs4YZRE
-----END CERTIFICATE-----