Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79E63494B9A211F19BA5B717CF1D38B0.roa
File:                     79E63494B9A211F19BA5B717CF1D38B0.roa (raw, json)
Hash identifier:          WxQOca/o1fEPgP/vaAaod1Ty/3Mgxa51F7k5WU2UrRk=
Subject key identifier:   F4:1D:A3:69:C3:EE:0B:62:AA:98:46:68:C8:BB:7A:3B:77:5B:BD:93
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D90E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79E63494B9A211F19BA5B717CF1D38B0.roa
Signing time:             Sat 26 Sep 2026 12:04:51 +0000
ROA not before:           Sat 26 Sep 2026 12:04:47 +0000
ROA not after:            Sun 25 Oct 2026 12:04:47 +0000
asID:                     271355
IP address blocks:        156.236.215.0/24 maxlen: 24
                          156.236.239.0/24 maxlen: 24
                          156.236.240.0/24 maxlen: 24
                          156.236.241.0/24 maxlen: 24
                          156.236.243.0/24 maxlen: 24
                          156.236.244.0/24 maxlen: 24
                          156.236.245.0/24 maxlen: 24
                          156.236.246.0/24 maxlen: 24
                          156.236.247.0/24 maxlen: 24
                          156.236.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121102 (0x1d90e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 26 12:04:47 2026 GMT
            Not After : Oct 25 12:04:47 2026 GMT
        Subject: CN=6ab7b4e3-96fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5a:66:a3:2d:b4:c3:f9:c2:35:ee:95:2c:32:
                    90:69:3c:80:77:1b:5b:86:3b:c6:e9:4a:f1:51:d0:
                    3a:35:8b:93:53:08:db:47:b9:da:94:5d:0c:e1:89:
                    3d:ab:0a:8e:5b:a6:f0:23:0b:af:5e:50:e9:c9:0f:
                    8a:6c:63:71:99:96:d3:6e:4e:67:c8:05:b1:1f:29:
                    39:fe:03:f0:c4:de:d7:9f:e2:03:db:0e:9f:bd:a9:
                    66:62:00:14:07:ad:d5:3c:1c:b6:c1:e0:f8:0a:e6:
                    0f:51:e0:05:15:b9:e7:85:36:a0:db:df:27:67:6d:
                    9f:6f:09:52:0c:9d:4f:67:4b:ce:ee:36:1f:42:df:
                    49:7b:9b:60:70:7c:ce:40:d2:77:c3:49:65:c9:57:
                    de:20:8b:3a:f7:9a:3f:0c:43:91:bd:62:e1:3c:0f:
                    04:8f:bb:70:67:3e:26:aa:68:ed:9a:37:12:7b:98:
                    e4:93:56:89:85:d6:76:78:75:3f:e2:77:82:a5:71:
                    94:a3:9e:4f:4e:d8:76:7f:f2:19:58:8b:22:6f:8d:
                    a7:57:01:3a:f8:ba:ee:6b:e7:1c:49:8c:cd:cc:e9:
                    c8:4f:ed:96:4f:d8:af:a0:ed:d9:cd:ba:e1:f1:f6:
                    25:eb:bf:fb:f0:65:95:5a:fb:1a:b2:e4:1b:0b:05:
                    cb:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1D:A3:69:C3:EE:0B:62:AA:98:46:68:C8:BB:7A:3B:77:5B:BD:93
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/79E63494B9A211F19BA5B717CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.215.0/24
                  156.236.239.0-156.236.241.255
                  156.236.243.0-156.236.248.255

    Signature Algorithm: sha256WithRSAEncryption
         54:9a:36:98:df:3c:5c:cb:7c:3b:14:45:cb:5a:bb:1e:be:8b:
         9a:9b:f2:fe:0e:04:31:fd:4d:ab:fc:8a:c5:08:c7:c5:0b:eb:
         a4:2e:05:28:e7:68:01:48:8b:20:9e:7d:2f:df:35:46:9e:22:
         e9:04:99:61:8b:22:89:37:ce:4b:8d:6b:b9:84:b8:b2:30:1e:
         d3:0a:c8:4c:3a:cb:16:e9:57:00:68:a5:5e:c8:c6:54:28:64:
         84:f2:16:e6:54:e3:25:8f:19:3d:a7:10:89:5a:bd:47:1b:f5:
         1a:de:74:25:c2:96:15:54:fd:87:fb:71:f0:ec:c1:bd:0a:0d:
         88:3b:fb:33:23:27:3d:2a:30:7b:56:e3:1f:79:04:5b:44:a0:
         c0:7c:97:fe:e8:8d:11:6c:f3:21:6d:fd:b7:6e:db:09:33:e0:
         1e:35:09:9d:de:47:f7:b6:90:a8:4f:4e:15:b2:2d:ba:8e:5b:
         07:c4:5f:b0:a4:54:9e:0f:13:30:84:fa:cc:67:37:ca:79:9c:
         f6:32:10:b0:0f:9f:52:44:e4:a7:44:cc:5c:e1:1a:f6:27:85:
         44:08:fd:3b:71:1e:60:cf:58:9f:d7:c7:dd:a0:41:c1:05:fa:
         47:92:2d:7c:8f:ff:1e:6a:c2:21:ed:99:5b:08:08:58:98:07:
         18:08:39:4e
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIDAdkOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTI2MTIwNDQ3WhcNMjYxMDI1MTIwNDQ3WjAYMRYw
FAYDVQQDEw02YWI3YjRlMy05NmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA31pmoy20w/nCNe6VLDKQaTyAdxtbhjvG6UrxUdA6NYuTUwjbR7nalF0M
4Yk9qwqOW6bwIwuvXlDpyQ+KbGNxmZbTbk5nyAWxHyk5/gPwxN7Xn+ID2w6fvalm
YgAUB63VPBy2weD4CuYPUeAFFbnnhTag298nZ22fbwlSDJ1PZ0vO7jYfQt9Je5tg
cHzOQNJ3w0llyVfeIIs695o/DEORvWLhPA8Ej7twZz4mqmjtmjcSe5jkk1aJhdZ2
eHU/4neCpXGUo55PTth2f/IZWIsib42nVwE6+Lrua+ccSYzNzOnIT+2WT9ivoO3Z
zbrh8fYl67/78GWVWvsasuQbCwXLBQIDAQABo4ICvjCCArowHQYDVR0OBBYEFPQd
o2nD7gtiqphGaMi7ejt3W72TMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83OUU2MzQ5NEI5QTIxMUYxOUJBNUI3MTdDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiAwQAnOzXMAwDBACc7O8DBAGc7PAw
DAMEAJzs8wMEAJzs+DANBgkqhkiG9w0BAQsFAAOCAQEAVJo2mN88XMt8OxRFy1q7
Hr6Lmpvy/g4EMf1Nq/yKxQjHxQvrpC4FKOdoAUiLIJ59L981Rp4i6QSZYYsiiTfO
S41ruYS4sjAe0wrITDrLFulXAGilXsjGVChkhPIW5lTjJY8ZPacQiVq9Rxv1Gt50
JcKWFVT9h/tx8OzBvQoNiDv7MyMnPSowe1bjH3kEW0SgwHyX/uiNEWzzIW39t27b
CTPgHjUJnd5H97aQqE9OFbItuo5bB8RfsKRUng8TMIT6zGc3ynmc9jIQsA+fUkTk
p0TMXOEa9ieFRAj9O3EeYM9Yn9fH3aBBwQX6R5ItfI//HmrCIe2ZWwgIWJgHGAg5
Tg==
-----END CERTIFICATE-----