Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/675C9EB49B9B11F1BEE4C2E6CE1D38B0.roa
File:                     675C9EB49B9B11F1BEE4C2E6CE1D38B0.roa (raw, json)
Hash identifier:          9fAyLqgiD1gIMxRdNfhsi4CEuJSGvLGpjpjor+KlEEE=
Subject key identifier:   6B:72:79:A6:52:8F:8A:1C:CD:D4:67:E0:C4:24:74:12:16:6D:58:C2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE12
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/675C9EB49B9B11F1BEE4C2E6CE1D38B0.roa
Signing time:             Wed 19 Aug 2026 06:58:39 +0000
ROA not before:           Wed 19 Aug 2026 06:58:34 +0000
ROA not after:            Sun 08 Nov 2026 06:58:34 +0000
asID:                     150706
IP address blocks:        156.236.96.0/22 maxlen: 24
                          156.236.108.0/22 maxlen: 24
                          156.236.112.0/21 maxlen: 24
                          156.236.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118290 (0x1ce12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 19 06:58:34 2026 GMT
            Not After : Nov  8 06:58:34 2026 GMT
        Subject: CN=6a85541e-68c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:42:d8:95:6d:8f:65:c1:03:ea:66:c4:24:f7:
                    07:4c:2a:d4:fe:4e:4e:47:9e:b2:3d:d9:14:b9:4e:
                    30:84:5d:2e:8a:b7:3a:40:fe:01:4d:76:ad:20:21:
                    82:07:63:37:79:36:cd:41:3f:45:6e:17:e7:76:16:
                    03:ab:1e:d5:d3:37:7b:e6:48:21:cc:a0:a5:7a:e8:
                    65:35:f9:d2:be:93:c4:aa:ea:6a:4e:72:ea:93:d5:
                    b4:51:73:a5:bc:01:ed:f4:4d:de:4b:41:af:08:2f:
                    62:00:e0:0b:2c:0b:42:8a:0b:e5:2f:83:60:35:ed:
                    1b:51:84:52:3f:34:f1:f9:44:27:9c:d1:79:b4:e4:
                    e8:38:ea:02:e2:f6:2e:9e:fc:df:59:02:48:ae:06:
                    b5:fe:ef:d5:ea:84:6c:0d:92:66:3f:87:81:e4:ef:
                    6e:b0:70:a9:66:67:c5:fa:1c:a0:70:96:f7:91:b7:
                    5d:ef:b7:4a:d8:82:28:45:3b:29:62:0b:9b:94:e0:
                    6e:f9:6e:de:d4:5d:ec:47:07:02:f3:74:24:0e:50:
                    94:59:bb:c9:21:0f:ba:a4:b6:d4:ba:84:e9:bf:4e:
                    cc:d6:9e:d1:72:06:2e:df:ee:4a:48:61:62:76:d6:
                    fb:3f:be:d5:8e:d6:e5:d1:a4:67:2a:7d:c2:86:cb:
                    05:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:72:79:A6:52:8F:8A:1C:CD:D4:67:E0:C4:24:74:12:16:6D:58:C2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/675C9EB49B9B11F1BEE4C2E6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.96.0/22
                  156.236.108.0-156.236.119.255
                  156.236.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:a4:49:d8:a9:95:55:c5:c8:ae:38:f0:8d:34:18:54:fa:4e:
         8a:fc:4a:ae:a7:e6:22:7f:84:59:eb:74:f0:f0:00:1d:79:7f:
         41:36:04:7f:f3:cf:30:1b:79:0d:b4:cd:41:f8:a2:bc:b2:c8:
         fe:54:fa:8e:f4:5e:08:f5:c2:26:47:1d:74:42:11:fc:fa:14:
         aa:b1:ac:8d:82:07:2d:a6:df:aa:34:a2:c2:38:24:6c:6a:c0:
         12:ef:6d:f1:33:7b:5b:1e:56:a7:3f:83:46:1e:98:4f:01:6e:
         09:f6:53:ba:43:0e:8b:25:f8:f3:5a:c3:42:8b:fe:a2:22:a8:
         4e:5e:71:19:cf:01:9e:fa:57:69:9c:20:4a:6a:fa:6b:c3:22:
         b2:76:45:b4:9c:77:36:ba:75:28:e2:45:07:e1:6b:96:d8:88:
         6d:97:d0:0b:f9:00:cc:9b:a8:4d:29:5d:e6:64:66:70:82:f3:
         04:cb:ae:6a:49:59:be:9c:1c:51:58:f8:dd:6d:98:20:ea:37:
         bb:da:54:57:ab:b0:5b:f6:8b:d4:9b:09:f7:6a:fa:b4:8b:b1:
         4a:a7:5b:5d:af:79:00:90:86:7c:cc:93:d5:8a:6c:6a:ce:b0:
         f7:ca:08:99:4b:30:8e:06:79:c9:ca:6a:a7:a5:4a:fb:61:86:
         66:cf:6e:09
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAc4SMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODE5MDY1ODM0WhcNMjYxMTA4MDY1ODM0WjAYMRYw
FAYDVQQDEw02YTg1NTQxZS02OGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsULYlW2PZcED6mbEJPcHTCrU/k5OR56yPdkUuU4whF0uirc6QP4BTXat
ICGCB2M3eTbNQT9FbhfndhYDqx7V0zd75kghzKCleuhlNfnSvpPEqupqTnLqk9W0
UXOlvAHt9E3eS0GvCC9iAOALLAtCigvlL4NgNe0bUYRSPzTx+UQnnNF5tOToOOoC
4vYunvzfWQJIrga1/u/V6oRsDZJmP4eB5O9usHCpZmfF+hygcJb3kbdd77dK2IIo
RTspYgublOBu+W7e1F3sRwcC83QkDlCUWbvJIQ+6pLbUuoTpv07M1p7RcgYu3+5K
SGFidtb7P77Vjtbl0aRnKn3ChssFmQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFGty
eaZSj4oczdRn4MQkdBIWbVjCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NzVDOUVCNDlCOUIxMUYxQkVFNEMyRTZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCnOxgMAwDBAKc7GwDBAOc7HAD
BAKc7HwwDQYJKoZIhvcNAQELBQADggEBAIukSdiplVXFyK448I00GFT6Tor8Sq6n
5iJ/hFnrdPDwAB15f0E2BH/zzzAbeQ20zUH4oryyyP5U+o70Xgj1wiZHHXRCEfz6
FKqxrI2CBy2m36o0osI4JGxqwBLvbfEze1seVqc/g0YemE8Bbgn2U7pDDosl+PNa
w0KL/qIiqE5ecRnPAZ76V2mcIEpq+mvDIrJ2RbScdza6dSjiRQfha5bYiG2X0Av5
AMybqE0pXeZkZnCC8wTLrmpJWb6cHFFY+N1tmCDqN7vaVFersFv2i9SbCfdq+rSL
sUqnW12veQCQhnzMk9WKbGrOsPfKCJlLMI4GecnKaqelSvthhmbPbgk=
-----END CERTIFICATE-----