Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91463EE6993F11F1BD1C561ECF1D38B0.roa
File:                     91463EE6993F11F1BD1C561ECF1D38B0.roa (raw, json)
Hash identifier:          ySejlVDlFrpTh0GPIORvCLsUMTJhxvEQM3JrkaAwf3U=
Subject key identifier:   6A:D5:DA:F0:D9:1A:11:43:A8:A0:1D:8E:07:18:7E:01:77:EC:F4:0B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CD07
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91463EE6993F11F1BD1C561ECF1D38B0.roa
Signing time:             Sun 16 Aug 2026 06:56:13 +0000
ROA not before:           Sun 16 Aug 2026 06:56:09 +0000
ROA not after:            Tue 22 Sep 2026 06:56:09 +0000
asID:                     11404
IP address blocks:        156.237.96.0/21 maxlen: 24
                          156.237.108.0/22 maxlen: 24
                          156.237.112.0/20 maxlen: 24
                          156.239.196.0/22 maxlen: 24
                          156.239.200.0/21 maxlen: 24
                          156.239.208.0/20 maxlen: 24
                          156.242.32.0/20 maxlen: 24
                          156.245.20.0/22 maxlen: 24
                          156.245.24.0/22 maxlen: 24
                          156.245.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118023 (0x1cd07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 16 06:56:09 2026 GMT
            Not After : Sep 22 06:56:09 2026 GMT
        Subject: CN=6a815f0d-00c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:dc:2b:65:b4:40:8e:48:9f:0c:47:da:be:
                    fa:da:58:73:27:85:3d:c9:a6:79:ba:cd:64:9a:b0:
                    95:55:c3:43:7b:93:8a:e6:52:8f:d6:09:ed:f5:36:
                    df:0c:79:28:28:f9:09:c5:e9:32:33:45:d4:90:46:
                    68:70:b9:ae:11:87:5f:0c:5b:5c:2e:a7:08:99:ed:
                    9c:75:bc:60:fe:18:50:c7:8a:68:ec:35:ad:d1:1d:
                    a5:f0:6d:2b:0e:e1:cd:c2:29:26:34:c1:7e:a0:ab:
                    6c:eb:0e:0d:a0:1c:98:6a:b1:89:ff:96:c1:b5:ab:
                    06:ed:86:2d:29:9d:72:91:9b:f0:d4:45:2d:91:cd:
                    41:3a:87:a1:92:33:45:da:d9:b7:42:5d:62:9d:74:
                    10:e4:f7:38:42:ca:2a:00:4e:07:71:b8:a2:0f:98:
                    19:24:7e:75:74:39:e2:98:a0:2c:1d:c5:ec:72:22:
                    15:a5:19:2a:35:1f:93:5b:03:f5:99:7a:c1:8e:d4:
                    d6:ba:e6:fd:39:49:46:a6:33:74:da:f5:d8:25:00:
                    22:bc:ce:42:35:df:69:70:e4:85:f4:a9:82:7e:70:
                    77:a6:79:7b:db:26:83:57:3c:b3:3c:4c:cb:cc:ac:
                    18:47:fc:69:d8:61:19:0d:34:ce:34:87:c5:cc:67:
                    f5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D5:DA:F0:D9:1A:11:43:A8:A0:1D:8E:07:18:7E:01:77:EC:F4:0B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91463EE6993F11F1BD1C561ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.237.96.0/21
                  156.237.108.0-156.237.127.255
                  156.239.196.0-156.239.223.255
                  156.242.32.0/20
                  156.245.20.0-156.245.27.255
                  156.245.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         24:6a:d7:ad:2a:e2:25:46:a1:ca:4a:83:19:84:a3:05:2e:06:
         eb:03:6d:9f:03:2c:a9:8b:9a:2e:da:54:16:4b:a1:68:13:c9:
         34:73:be:9c:5f:93:49:95:1b:d6:b7:4c:a8:46:b6:46:3e:9c:
         73:5e:96:34:4a:ad:a7:70:b0:f9:8d:f4:6d:e2:51:a6:bc:53:
         d1:b4:e3:46:6a:63:de:82:a9:57:30:ad:27:e6:a5:98:00:02:
         4b:5e:93:53:bd:1f:be:bd:48:26:74:14:8a:0d:7a:0d:b6:95:
         20:72:69:08:53:3e:ff:5c:5e:a9:74:cc:74:72:6a:73:f5:95:
         7a:41:91:a3:0e:2a:1a:db:e9:a7:bb:27:a7:ba:df:ce:60:cb:
         58:7a:2f:93:57:53:55:5e:61:be:9f:fe:64:fc:71:e1:ea:4f:
         e4:50:ea:9a:1c:59:ce:a8:5a:c8:be:ad:11:ec:21:86:d5:75:
         61:a7:c0:3c:c2:6d:a4:4e:22:e0:20:cf:0c:77:83:e4:e4:c3:
         97:03:4e:af:fc:2f:c5:90:a0:f9:9a:04:57:b6:46:b9:37:e2:
         2c:53:59:ea:a1:f5:47:61:9a:87:f4:4f:20:93:ad:5b:a8:6d:
         36:40:48:e0:17:54:74:bc:93:3b:de:f4:f0:37:40:80:cc:9e:
         6a:3d:4a:e0
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIDAc0HMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODE2MDY1NjA5WhcNMjYwOTIyMDY1NjA5WjAYMRYw
FAYDVQQDEw02YTgxNWYwZC0wMGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuJ7cK2W0QI5InwxH2r762lhzJ4U9yaZ5us1kmrCVVcNDe5OK5lKP1gnt
9TbfDHkoKPkJxekyM0XUkEZocLmuEYdfDFtcLqcIme2cdbxg/hhQx4po7DWt0R2l
8G0rDuHNwikmNMF+oKts6w4NoByYarGJ/5bBtasG7YYtKZ1ykZvw1EUtkc1BOoeh
kjNF2tm3Ql1inXQQ5Pc4QsoqAE4HcbiiD5gZJH51dDnimKAsHcXsciIVpRkqNR+T
WwP1mXrBjtTWuub9OUlGpjN02vXYJQAivM5CNd9pcOSF9KmCfnB3pnl72yaDVzyz
PEzLzKwYR/xp2GEZDTTONIfFzGf1cQIDAQABo4IC2DCCAtQwHQYDVR0OBBYEFGrV
2vDZGhFDqKAdjgcYfgF37PQLMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MTQ2M0VFNjk5M0YxMUYxQkQxQzU2MUVDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQDnO1gMAwDBAKc7WwDBAec7QAw
DAMEApzvxAMEBZzvwAMEBJzyIDAMAwQCnPUUAwQCnPUYAwQDnPWAMA0GCSqGSIb3
DQEBCwUAA4IBAQAkatetKuIlRqHKSoMZhKMFLgbrA22fAyypi5ou2lQWS6FoE8k0
c76cX5NJlRvWt0yoRrZGPpxzXpY0Sq2ncLD5jfRt4lGmvFPRtONGamPegqlXMK0n
5qWYAAJLXpNTvR++vUgmdBSKDXoNtpUgcmkIUz7/XF6pdMx0cmpz9ZV6QZGjDioa
2+mnuyenut/OYMtYei+TV1NVXmG+n/5k/HHh6k/kUOqaHFnOqFrIvq0R7CGG1XVh
p8A8wm2kTiLgIM8Md4Pk5MOXA06v/C/FkKD5mgRXtka5N+IsU1nqofVHYZqH9E8g
k61bqG02QEjgF1R0vJM73vTwN0CAzJ5qPUrg
-----END CERTIFICATE-----