Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/619F5C6296FC11F1A8F73FE1CE1D38B0.roa
File:                     619F5C6296FC11F1A8F73FE1CE1D38B0.roa (raw, json)
Hash identifier:          JQOcetv9s5nzj9QHN7qnGoiZKnomdjopAfeP6uXN5rE=
Subject key identifier:   58:62:86:59:B9:8D:83:09:C0:15:FB:D4:37:4C:BB:80:BB:0C:71:BD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC8C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/619F5C6296FC11F1A8F73FE1CE1D38B0.roa
Signing time:             Thu 13 Aug 2026 09:50:16 +0000
ROA not before:           Thu 13 Aug 2026 09:50:09 +0000
ROA not after:            Mon 21 Sep 2026 09:50:09 +0000
asID:                     2914
IP address blocks:        156.225.8.0/22 maxlen: 24
                          156.225.8.0/24 maxlen: 24
                          156.225.9.0/24 maxlen: 24
                          156.225.10.0/24 maxlen: 24
                          156.225.11.0/24 maxlen: 24
                          156.229.26.0/24 maxlen: 24
                          156.229.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 23 Aug 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117900 (0x1cc8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 13 09:50:09 2026 GMT
            Not After : Sep 21 09:50:09 2026 GMT
        Subject: CN=6a7d9358-482b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:10:81:dc:f4:d7:2c:45:4a:c5:77:bf:44:
                    7c:f7:ed:89:c5:47:21:ed:ec:09:c0:f6:02:68:87:
                    d7:3a:9a:52:8e:b1:34:81:92:8d:6e:df:f8:ae:af:
                    48:ab:2a:7e:67:ea:a7:cf:c3:f8:9b:b3:a8:56:aa:
                    eb:13:16:4d:ae:3b:c5:c8:3a:c3:0b:06:e5:65:67:
                    17:a2:93:cb:74:2e:6b:b8:11:c8:85:73:0b:59:c2:
                    07:12:fb:37:ba:f6:77:bd:3b:19:67:05:80:ed:54:
                    d6:1d:b2:8d:fb:93:25:bd:76:a3:00:f8:d3:51:dd:
                    37:a2:81:3c:c0:41:81:9a:ce:02:fc:c9:b6:24:fd:
                    22:5a:9c:da:c4:08:eb:a5:69:e0:d6:d2:c5:27:58:
                    cc:89:72:84:0c:50:32:c0:3c:90:b7:ab:8b:d5:4d:
                    fe:73:69:59:92:d9:3d:6f:68:7e:51:ec:1e:76:93:
                    f8:d0:eb:06:19:ad:52:a8:ad:cb:09:de:41:4e:80:
                    4e:e5:87:58:cb:2a:3c:d6:b4:f5:e3:95:84:4e:e7:
                    08:9b:cd:4a:29:3f:4d:14:57:d7:d7:a0:0d:a3:94:
                    57:0b:65:96:78:a6:82:a5:26:e9:7e:7e:52:f8:75:
                    53:18:cf:a5:96:8e:26:d8:2e:c8:7a:42:a5:c5:11:
                    8c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:62:86:59:B9:8D:83:09:C0:15:FB:D4:37:4C:BB:80:BB:0C:71:BD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/619F5C6296FC11F1A8F73FE1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.8.0/22
                  156.229.26.0/24
                  156.229.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:f4:8c:e7:27:e8:d5:43:2c:f0:07:2d:a8:9c:b4:a3:3f:3c:
         31:fe:ff:a0:0a:20:f7:02:28:94:45:06:97:42:26:37:9a:de:
         9a:5a:fe:3c:df:ed:07:7f:57:86:d1:e2:41:e7:97:ec:94:2d:
         3a:74:3c:9a:21:b6:40:dc:ed:9f:51:73:a0:e8:0c:91:91:8e:
         42:9a:9c:45:c7:0f:7d:13:92:9f:21:2d:4c:1a:e4:dc:e3:da:
         72:c6:8f:f2:0b:9c:5d:a9:ab:7b:f4:ef:43:65:86:30:2b:7e:
         90:1c:ac:ba:8c:e4:ea:20:be:c5:bc:62:4c:27:94:76:7a:6e:
         ac:91:f9:f6:39:5f:5b:8f:67:71:8d:ab:a6:4a:02:97:f8:92:
         f7:cc:35:a5:59:5d:f7:64:69:ab:9d:ca:1e:de:61:8c:88:61:
         dd:0f:f9:06:25:91:c4:e1:f6:97:e8:f6:f6:38:7f:95:68:d9:
         99:64:86:4a:05:37:cb:8c:7c:74:54:48:29:a4:4e:94:4c:89:
         8e:5a:bd:35:7d:59:dc:16:2f:a8:e7:29:3b:64:60:72:c1:11:
         0f:32:f2:24:5d:15:68:7a:d4:04:9b:77:7b:74:79:a8:a8:f3:
         30:f8:29:78:7f:db:2b:a5:46:04:5b:fe:f7:ab:c8:5d:57:4d:
         27:eb:f5:d4
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAcyMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODEzMDk1MDA5WhcNMjYwOTIxMDk1MDA5WjAYMRYw
FAYDVQQDEw02YTdkOTM1OC00ODJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvD0Qgdz01yxFSsV3v0R89+2JxUch7ewJwPYCaIfXOppSjrE0gZKNbt/4
rq9Iqyp+Z+qnz8P4m7OoVqrrExZNrjvFyDrDCwblZWcXopPLdC5ruBHIhXMLWcIH
Evs3uvZ3vTsZZwWA7VTWHbKN+5MlvXajAPjTUd03ooE8wEGBms4C/Mm2JP0iWpza
xAjrpWng1tLFJ1jMiXKEDFAywDyQt6uL1U3+c2lZktk9b2h+UewedpP40OsGGa1S
qK3LCd5BToBO5YdYyyo81rT145WETucIm81KKT9NFFfX16ANo5RXC2WWeKaCpSbp
fn5S+HVTGM+llo4m2C7IekKlxRGMdwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFFhi
hlm5jYMJwBX71DdMu4C7DHG9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82MTlGNUM2Mjk2RkMxMUYxQThGNzNGRTFDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCnOEIAwQAnOUaAwQBnOX6MA0G
CSqGSIb3DQEBCwUAA4IBAQBz9IznJ+jVQyzwBy2onLSjPzwx/v+gCiD3AiiURQaX
QiY3mt6aWv483+0Hf1eG0eJB55fslC06dDyaIbZA3O2fUXOg6AyRkY5CmpxFxw99
E5KfIS1MGuTc49pyxo/yC5xdqat79O9DZYYwK36QHKy6jOTqIL7FvGJMJ5R2em6s
kfn2OV9bj2dxjaumSgKX+JL3zDWlWV33ZGmrncoe3mGMiGHdD/kGJZHE4faX6Pb2
OH+VaNmZZIZKBTfLjHx0VEgppE6UTImOWr01fVncFi+o5yk7ZGBywREPMvIkXRVo
etQEm3d7dHmoqPMw+Cl4f9srpUYEW/73q8hdV00n6/XU
-----END CERTIFICATE-----