Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91FC7C50965C11F1BFCD4510CF1D38B0.roa
File:                     91FC7C50965C11F1BFCD4510CF1D38B0.roa (raw, json)
Hash identifier:          8dto+4Dd4wRIhaiYTfZpBUtWJeyVRVF06p85EAE3gAo=
Subject key identifier:   EB:23:F5:1F:2E:0E:50:C3:5D:C8:21:5F:FF:8E:8E:A3:C8:B8:4D:96
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC24
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91FC7C50965C11F1BFCD4510CF1D38B0.roa
Signing time:             Wed 12 Aug 2026 14:46:16 +0000
ROA not before:           Wed 12 Aug 2026 14:46:12 +0000
ROA not after:            Sun 12 Aug 2029 14:46:12 +0000
asID:                     17561
IP address blocks:        156.235.36.0/24 maxlen: 24
                          156.235.37.0/24 maxlen: 24
                          156.235.38.0/24 maxlen: 24
                          156.235.39.0/24 maxlen: 24
                          156.235.40.0/24 maxlen: 24
                          156.235.41.0/24 maxlen: 24
                          156.235.42.0/24 maxlen: 24
                          156.235.43.0/24 maxlen: 24
                          156.235.44.0/24 maxlen: 24
                          156.235.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117796 (0x1cc24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 14:46:12 2026 GMT
            Not After : Aug 12 14:46:12 2029 GMT
        Subject: CN=6a7c8738-0920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bd:42:29:21:f0:ed:d9:da:9c:0e:d2:f2:b8:
                    6a:a9:20:1a:03:a7:f9:99:97:cc:d2:f5:d9:7e:70:
                    6f:40:b0:03:1e:c4:c1:7c:f1:1f:2a:56:1a:6e:17:
                    7c:55:d5:61:fc:06:ff:48:ec:e5:d4:d9:13:07:60:
                    ba:ff:8d:0d:42:39:72:7a:53:58:8b:5f:d9:54:6e:
                    b3:4c:0a:91:3d:6e:94:37:00:aa:c7:7a:13:ac:b9:
                    b0:01:41:d9:cc:b4:a6:1a:12:de:63:19:5a:38:45:
                    31:58:3d:3e:f3:76:b2:2d:15:be:3a:e7:85:1c:17:
                    11:fa:55:81:2b:41:17:99:de:aa:97:3f:48:ae:9f:
                    fd:df:ec:58:2c:d7:84:b2:13:67:73:24:c3:98:1a:
                    f5:e2:18:81:0b:d4:74:41:bc:91:05:56:29:64:bc:
                    6c:10:90:35:ac:ca:71:f0:9b:19:71:3c:6c:16:ca:
                    0f:56:e9:4d:e3:e0:ef:77:9d:93:5b:98:75:e8:25:
                    da:62:cd:84:b4:c3:fb:ee:08:10:b6:18:38:9d:10:
                    07:c5:e7:83:7b:75:31:b4:62:ac:6d:88:1e:8d:74:
                    ef:ec:85:63:fd:cf:9f:7d:59:d0:d7:8d:95:c3:84:
                    c7:3b:2d:18:8b:c0:a1:7a:a9:bf:1a:38:87:a5:c4:
                    21:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:23:F5:1F:2E:0E:50:C3:5D:C8:21:5F:FF:8E:8E:A3:C8:B8:4D:96
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91FC7C50965C11F1BFCD4510CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.36.0-156.235.45.255

    Signature Algorithm: sha256WithRSAEncryption
         7c:a9:c4:36:3d:f0:31:47:99:83:96:67:35:76:cb:5a:00:7e:
         bc:b6:89:a9:87:2d:f5:c3:53:c9:07:49:21:67:bc:47:16:31:
         b9:27:bc:6d:d4:05:e2:83:60:ee:a7:f3:48:e2:79:d7:4e:55:
         eb:2c:3c:d9:97:6a:20:90:f8:df:49:c0:05:d7:58:cc:be:0b:
         ca:bc:55:0e:ee:66:47:88:ea:f1:b1:15:49:2e:11:7f:f1:d4:
         51:68:e5:f2:97:b4:08:e4:00:85:74:ce:d8:ed:ae:61:03:17:
         ed:a1:e2:0f:bf:b1:96:8f:60:b5:4b:ad:74:03:f5:e7:f6:1e:
         c2:19:a6:00:5f:de:4c:e1:5d:f5:3b:e1:74:31:5d:2d:e2:61:
         2c:ab:19:bd:1c:92:2e:a9:ad:b0:44:18:08:41:8e:c0:f0:1e:
         0a:0d:4c:e8:40:b7:c4:cf:b6:74:15:f0:99:aa:4e:1c:f5:6a:
         06:55:8a:59:2b:fb:57:3e:40:52:12:c1:7d:53:c2:00:9f:ae:
         ae:e6:3c:33:00:1d:18:b4:41:31:9a:9c:b8:6b:87:8f:d4:5d:
         04:f0:21:26:89:61:81:25:d8:0f:54:ba:28:44:31:bd:b6:0d:
         c7:57:99:5e:cb:39:c2:d7:d5:f6:bf:a3:a1:17:30:b3:0d:66:
         a1:bd:73:84
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAcwkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODEyMTQ0NjEyWhcNMjkwODEyMTQ0NjEyWjAYMRYw
FAYDVQQDEw02YTdjODczOC0wOTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt71CKSHw7dnanA7S8rhqqSAaA6f5mZfM0vXZfnBvQLADHsTBfPEfKlYa
bhd8VdVh/Ab/SOzl1NkTB2C6/40NQjlyelNYi1/ZVG6zTAqRPW6UNwCqx3oTrLmw
AUHZzLSmGhLeYxlaOEUxWD0+83ayLRW+OueFHBcR+lWBK0EXmd6qlz9Irp/93+xY
LNeEshNncyTDmBr14hiBC9R0QbyRBVYpZLxsEJA1rMpx8JsZcTxsFsoPVulN4+Dv
d52TW5h16CXaYs2EtMP77ggQthg4nRAHxeeDe3UxtGKsbYgejXTv7IVj/c+ffVnQ
142Vw4THOy0Yi8Cheqm/GjiHpcQhUQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFOsj
9R8uDlDDXcghX/+OjqPIuE2WMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MUZDN0M1MDk2NUMxMUYxQkZDRDQ1MTBDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKc6yQDBAGc6ywwDQYJKoZI
hvcNAQELBQADggEBAHypxDY98DFHmYOWZzV2y1oAfry2iamHLfXDU8kHSSFnvEcW
MbknvG3UBeKDYO6n80jieddOVessPNmXaiCQ+N9JwAXXWMy+C8q8VQ7uZkeI6vGx
FUkuEX/x1FFo5fKXtAjkAIV0ztjtrmEDF+2h4g+/sZaPYLVLrXQD9ef2HsIZpgBf
3kzhXfU74XQxXS3iYSyrGb0cki6prbBEGAhBjsDwHgoNTOhAt8TPtnQV8JmqThz1
agZVilkr+1c+QFISwX1TwgCfrq7mPDMAHRi0QTGanLhrh4/UXQTwISaJYYEl2A9U
uihEMb22DcdXmV7LOcLX1fa/o6EXMLMNZqG9c4Q=
-----END CERTIFICATE-----