Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/673E7B14BCA211F19939D4AECE1D38B0.roa
File:                     673E7B14BCA211F19939D4AECE1D38B0.roa (raw, json)
Hash identifier:          45nScGC7mAPU/q8qexKejmZWpbQl6NYKRzXz2hHC+1c=
Subject key identifier:   E0:58:8F:AD:22:1C:AD:40:E0:29:6E:63:13:F3:2B:C0:98:E9:CB:8C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D998
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/673E7B14BCA211F19939D4AECE1D38B0.roa
Signing time:             Wed 30 Sep 2026 07:41:53 +0000
ROA not before:           Wed 30 Sep 2026 07:41:49 +0000
ROA not after:            Fri 06 Nov 2026 07:41:49 +0000
asID:                     48031
IP address blocks:        156.236.22.0/24 maxlen: 24
                          156.236.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121240 (0x1d998)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 30 07:41:49 2026 GMT
            Not After : Nov  6 07:41:49 2026 GMT
        Subject: CN=6abcbd41-ede0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:95:21:8c:40:a3:05:e3:25:4b:e5:16:e5:b3:
                    5c:50:0f:35:28:2d:8a:fd:f7:a9:b9:9b:02:7d:cc:
                    94:ac:10:bd:aa:84:28:a2:35:59:28:54:9d:bf:c5:
                    23:4d:15:4f:6e:27:37:dc:69:f9:8d:39:71:a2:77:
                    3b:9f:67:42:0a:a3:54:c0:0f:4d:83:da:8f:af:72:
                    5d:5c:da:b6:f2:af:e7:ce:2a:65:3e:8f:ef:b6:e5:
                    35:a0:3c:e4:61:95:36:8a:a3:63:bb:72:db:04:92:
                    a8:04:b1:2c:11:85:74:0e:f7:3e:a5:a0:22:52:c1:
                    fd:73:23:1a:5b:f7:e6:85:6f:8c:87:e6:25:48:25:
                    fa:c9:fe:ff:36:b8:3d:e3:41:5e:cd:26:51:37:c6:
                    6f:be:c4:14:b1:6e:ac:4f:11:10:60:93:4b:2e:77:
                    3c:d5:76:44:f7:7f:1e:1c:c6:df:d1:fd:f9:43:79:
                    54:d9:5a:3b:9a:97:33:65:b4:da:13:db:3b:66:5c:
                    b9:62:95:47:04:c0:f2:65:8b:ff:04:8e:24:40:c6:
                    dc:db:fb:1a:ed:9e:0c:ba:1f:ca:38:8f:06:8c:4f:
                    c8:e0:59:c1:6a:e8:94:b8:96:68:4e:75:22:a2:2b:
                    0d:17:2f:cf:87:73:e6:b5:d2:81:39:31:df:e9:68:
                    eb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:58:8F:AD:22:1C:AD:40:E0:29:6E:63:13:F3:2B:C0:98:E9:CB:8C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/673E7B14BCA211F19939D4AECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:9c:b4:58:81:9e:a5:0a:27:ac:9c:64:59:54:33:b9:cc:f9:
         4d:3d:88:2e:d6:0e:47:f8:a2:22:48:1f:88:36:5f:74:ae:1a:
         4f:00:bd:7a:97:84:7f:79:51:82:31:85:3f:ab:d5:8e:bb:8d:
         53:f5:96:7b:0d:e7:d4:b9:90:e9:e6:19:dc:50:9d:49:5b:90:
         f9:66:a2:1a:d2:bf:27:46:51:ba:4f:3a:7e:c4:04:e5:98:9c:
         38:78:c0:b1:51:1f:ec:56:22:a5:19:bd:3e:f7:bb:d7:93:11:
         25:22:0a:a0:84:44:b4:29:0e:0c:d1:5c:3e:dd:24:e6:e5:81:
         11:b5:8a:41:3f:04:97:d9:76:66:b9:0d:f3:e1:67:0d:4c:37:
         03:1b:02:a1:4e:9e:c2:05:09:a9:7b:64:98:91:cf:8d:c8:57:
         65:c7:78:d8:5f:3c:ac:8a:50:6a:fa:9b:01:8d:18:f3:da:3f:
         6a:d8:12:7f:05:19:f5:b5:45:8a:8f:f7:2f:8a:59:3b:8f:35:
         45:a4:5b:2d:a6:5e:db:cc:80:de:58:e2:88:b4:b0:05:52:26:
         e5:69:96:63:5d:28:c2:25:af:88:1b:36:2b:77:cc:76:cd:ce:
         2a:ef:54:02:78:81:f5:19:f8:1c:e7:59:48:ff:83:f9:87:39:
         db:d5:71:3d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdmYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTMwMDc0MTQ5WhcNMjYxMTA2MDc0MTQ5WjAYMRYw
FAYDVQQDEw02YWJjYmQ0MS1lZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvZUhjECjBeMlS+UW5bNcUA81KC2K/fepuZsCfcyUrBC9qoQoojVZKFSd
v8UjTRVPbic33Gn5jTlxonc7n2dCCqNUwA9Ng9qPr3JdXNq28q/nziplPo/vtuU1
oDzkYZU2iqNju3LbBJKoBLEsEYV0Dvc+paAiUsH9cyMaW/fmhW+Mh+YlSCX6yf7/
Nrg940FezSZRN8ZvvsQUsW6sTxEQYJNLLnc81XZE938eHMbf0f35Q3lU2Vo7mpcz
ZbTaE9s7Zly5YpVHBMDyZYv/BI4kQMbc2/sa7Z4Muh/KOI8GjE/I4FnBauiUuJZo
TnUioisNFy/Ph3PmtdKBOTHf6WjrhwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOBY
j60iHK1A4CluYxPzK8CY6cuMMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NzNFN0IxNEJDQTIxMUYxOTkzOUQ0QUVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOwWMA0GCSqGSIb3DQEBCwUA
A4IBAQAYnLRYgZ6lCiesnGRZVDO5zPlNPYgu1g5H+KIiSB+INl90rhpPAL16l4R/
eVGCMYU/q9WOu41T9ZZ7DefUuZDp5hncUJ1JW5D5ZqIa0r8nRlG6Tzp+xATlmJw4
eMCxUR/sViKlGb0+97vXkxElIgqghES0KQ4M0Vw+3STm5YERtYpBPwSX2XZmuQ3z
4WcNTDcDGwKhTp7CBQmpe2SYkc+NyFdlx3jYXzysilBq+psBjRjz2j9q2BJ/BRn1
tUWKj/cvilk7jzVFpFstpl7bzIDeWOKItLAFUiblaZZjXSjCJa+IGzYrd8x2zc4q
71QCeIH1Gfgc51lI/4P5hznb1XE9
-----END CERTIFICATE-----