Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8853181CA2FA11F18DDEA4CECE1D38B0.roa
File:                     8853181CA2FA11F18DDEA4CECE1D38B0.roa (raw, json)
Hash identifier:          l1ZyldJFXV2OAIX5g3/Cwj59FQjHpKCBh3GjojfbQ38=
Subject key identifier:   07:29:EB:50:6B:EC:DA:78:33:15:C7:CD:DC:15:11:8A:5B:9F:CE:4F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D1AB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8853181CA2FA11F18DDEA4CECE1D38B0.roa
Signing time:             Fri 28 Aug 2026 16:07:14 +0000
ROA not before:           Fri 28 Aug 2026 16:07:10 +0000
ROA not after:            Mon 05 Oct 2026 16:07:10 +0000
asID:                     64013
IP address blocks:        156.234.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119211 (0x1d1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 28 16:07:10 2026 GMT
            Not After : Oct  5 16:07:10 2026 GMT
        Subject: CN=6a91b232-6c58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e4:21:62:ee:31:ce:a5:b0:ff:aa:9b:68:86:
                    7e:ab:a4:58:91:f5:96:2f:fc:b3:1d:b3:a6:87:5c:
                    72:91:a4:58:3f:2c:e2:b9:a6:0a:8f:79:ed:e2:6a:
                    92:70:7e:44:4d:85:27:97:39:84:b1:ff:34:91:34:
                    96:ad:68:65:22:8a:77:11:87:ed:e0:65:ff:c1:aa:
                    42:af:ae:ed:89:2f:65:02:39:fa:93:86:49:6e:b1:
                    e2:b1:a0:4c:94:55:53:c7:32:34:84:f7:a5:3c:a9:
                    f3:4e:b9:91:67:2b:26:0e:fa:25:be:6b:6e:74:51:
                    21:54:23:d9:a3:a1:15:76:84:20:f2:4d:26:ea:9b:
                    32:48:f7:bc:7b:93:46:bf:d6:7a:77:8e:9a:b0:b2:
                    b3:f1:bc:8d:f7:3c:55:73:a6:54:4a:03:ad:65:f4:
                    a5:24:42:7b:05:ff:ce:e3:d1:42:5f:f7:0c:02:e1:
                    b3:54:2b:5d:d9:23:6e:05:60:9b:f3:6b:8f:4d:0f:
                    bd:e1:a2:27:25:1f:7a:57:54:52:96:cf:24:c8:7b:
                    6e:57:da:9c:b0:2e:f3:a1:1f:03:68:04:e4:7d:b6:
                    a3:83:d5:fc:2f:1e:68:f8:4d:e5:b3:72:83:4f:9c:
                    bb:9f:40:85:c3:cf:c7:3b:e3:8f:25:a4:ac:cc:4f:
                    29:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:29:EB:50:6B:EC:DA:78:33:15:C7:CD:DC:15:11:8A:5B:9F:CE:4F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8853181CA2FA11F18DDEA4CECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:b6:2e:8e:63:bc:41:a4:e3:ff:61:a2:f6:c2:66:b2:c0:28:
         0d:77:27:d6:f9:23:c5:e0:07:76:3a:15:c5:e2:b1:89:cc:44:
         f2:1c:cf:98:88:cd:8c:86:21:99:e7:49:ff:09:ad:1e:be:15:
         4d:fd:e5:94:c3:b0:65:5f:7a:03:94:a7:15:a4:91:96:00:69:
         b9:7b:b9:35:95:a4:0c:c0:3e:17:e9:bc:74:27:3c:6d:e1:cc:
         5b:ff:69:17:3f:6c:1b:5c:ce:59:84:a4:44:41:35:3c:54:81:
         b4:e2:56:85:cd:58:20:f1:95:1b:b6:1f:37:f9:0a:3f:4f:13:
         d2:a6:a1:b8:81:79:d9:e3:5b:3e:42:72:8b:85:5d:bb:3d:9e:
         1e:bb:55:a7:c3:85:33:69:e4:0e:cb:18:e3:cf:f5:25:4f:df:
         17:3c:8d:18:77:51:43:a9:65:16:ef:28:4a:68:5e:00:45:73:
         9b:1a:b1:47:a4:60:f5:82:c8:28:b0:60:a8:fa:7c:b1:01:af:
         e4:35:2a:62:35:ea:cc:d7:ee:40:bf:a0:7b:fa:a2:3f:ba:d3:
         31:eb:6b:38:b6:58:f3:34:ae:ab:fc:a8:ad:29:df:95:d1:4b:
         1f:84:63:1e:5d:2c:31:a3:b5:c6:51:ab:23:7f:3e:44:61:3b:
         b3:5b:5e:ff
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgIDAdGrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODI4MTYwNzEwWhcNMjYxMDA1MTYwNzEwWjAYMRYw
FAYDVQQDEw02YTkxYjIzMi02YzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAueQhYu4xzqWw/6qbaIZ+q6RYkfWWL/yzHbOmh1xykaRYPyziuaYKj3nt
4mqScH5ETYUnlzmEsf80kTSWrWhlIop3EYft4GX/wapCr67tiS9lAjn6k4ZJbrHi
saBMlFVTxzI0hPelPKnzTrmRZysmDvolvmtudFEhVCPZo6EVdoQg8k0m6psySPe8
e5NGv9Z6d46asLKz8byN9zxVc6ZUSgOtZfSlJEJ7Bf/O49FCX/cMAuGzVCtd2SNu
BWCb82uPTQ+94aInJR96V1RSls8kyHtuV9qcsC7zoR8DaATkfbajg9X8Lx5o+E3l
s3KDT5y7n0CFw8/HO+OPJaSszE8pwQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFAcp
61Br7Np4MxXHzdwVEYpbn85PMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84ODUzMTgxQ0EyRkExMUYxOERERUE0Q0VDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnOowDQYJKoZIhvcNAQELBQAD
ggEBAHy2Lo5jvEGk4/9hovbCZrLAKA13J9b5I8XgB3Y6FcXisYnMRPIcz5iIzYyG
IZnnSf8JrR6+FU395ZTDsGVfegOUpxWkkZYAabl7uTWVpAzAPhfpvHQnPG3hzFv/
aRc/bBtczlmEpERBNTxUgbTiVoXNWCDxlRu2Hzf5Cj9PE9KmobiBednjWz5CcouF
Xbs9nh67VafDhTNp5A7LGOPP9SVP3xc8jRh3UUOpZRbvKEpoXgBFc5sasUekYPWC
yCiwYKj6fLEBr+Q1KmI16szX7kC/oHv6oj+60zHrazi2WPM0rqv8qK0p35XRSx+E
Yx5dLDGjtcZRqyN/PkRhO7NbXv8=
-----END CERTIFICATE-----