Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9443C6E0B9A111F1A4843D13CF1D38B0.roa
File:                     9443C6E0B9A111F1A4843D13CF1D38B0.roa (raw, json)
Hash identifier:          Cf93bOn8EzQR4Zrz5aw1kBsy+QbCAwT5EoZbnD+Z0jk=
Subject key identifier:   33:90:05:CA:2D:01:18:E4:EC:0B:88:60:75:D2:1D:B3:C5:C4:1B:43
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D90C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9443C6E0B9A111F1A4843D13CF1D38B0.roa
Signing time:             Sat 26 Sep 2026 11:58:26 +0000
ROA not before:           Sat 26 Sep 2026 11:58:22 +0000
ROA not after:            Sun 25 Oct 2026 11:58:22 +0000
asID:                     271355
IP address blocks:        156.236.192.0/19 maxlen: 24
                          156.236.192.0/24 maxlen: 24
                          156.236.193.0/24 maxlen: 24
                          156.236.249.0/24 maxlen: 24
                          156.236.250.0/24 maxlen: 24
                          156.236.251.0/24 maxlen: 24
                          156.236.252.0/24 maxlen: 24
                          156.236.253.0/24 maxlen: 24
                          156.236.254.0/24 maxlen: 24
                          156.236.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121100 (0x1d90c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 26 11:58:22 2026 GMT
            Not After : Oct 25 11:58:22 2026 GMT
        Subject: CN=6ab7b362-edec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:38:cc:b6:4e:0a:e0:6c:42:08:1f:d3:99:e0:
                    d9:55:ff:47:70:c5:77:94:27:cd:c0:25:d9:c8:0f:
                    18:e2:ff:67:93:78:54:3c:b9:b9:cb:af:de:06:82:
                    9f:3d:97:6b:83:68:e4:63:fb:33:c2:7d:d5:4b:c0:
                    21:bf:d2:08:94:2f:81:6f:0a:16:f8:a7:47:f5:f8:
                    a7:be:eb:b3:70:e8:b6:00:d1:3c:40:3a:e4:db:53:
                    24:7b:37:46:a0:6c:cd:f4:d3:69:9a:b3:3c:de:48:
                    96:a1:94:55:fa:7e:16:38:8d:c6:02:6b:e5:8a:4a:
                    1b:06:df:53:7f:81:36:c5:02:e6:bc:49:86:1d:85:
                    67:52:7e:44:76:de:29:c1:ac:c1:52:13:75:c5:05:
                    98:13:bc:be:89:bb:e0:88:8d:ae:c3:61:5b:fd:db:
                    98:b6:86:8a:80:61:ef:65:d0:43:e4:a4:97:8b:f9:
                    2c:90:ce:fb:9c:66:cf:e8:27:28:ff:50:a9:fb:0f:
                    39:be:2e:aa:0e:95:6f:af:76:62:e2:f7:d3:33:03:
                    17:79:d3:11:8c:01:5e:af:cd:19:c3:a6:33:f4:dc:
                    a2:ed:0e:16:ab:d9:31:42:ea:02:2e:c9:65:de:b8:
                    bf:97:84:f7:aa:a3:e6:84:4f:9a:63:24:9c:5c:86:
                    5c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:90:05:CA:2D:01:18:E4:EC:0B:88:60:75:D2:1D:B3:C5:C4:1B:43
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9443C6E0B9A111F1A4843D13CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.192.0/19
                  156.236.249.0-156.236.255.255

    Signature Algorithm: sha256WithRSAEncryption
         53:14:9e:58:4a:20:01:97:b9:89:ea:73:a6:5f:26:06:e1:24:
         5c:79:59:f0:15:6c:9b:00:71:35:16:0f:98:5d:3d:ef:8b:07:
         16:c1:07:37:e6:4e:7a:16:85:0d:58:df:2a:5b:fb:a9:e2:be:
         f4:c4:cf:de:33:ec:06:0e:2d:17:c3:7a:2c:63:6a:dc:03:1e:
         24:80:e1:37:7f:1d:a5:26:90:80:fb:f7:d5:0f:2d:d6:3d:f0:
         8b:48:65:d7:4f:af:4e:c9:69:81:58:e1:76:83:f9:09:4c:74:
         97:ec:dc:c5:70:b2:62:3a:f8:eb:8d:a8:94:79:87:7f:40:50:
         b3:4d:a3:70:76:7f:73:2f:01:ba:ae:71:7e:9c:9b:70:12:6d:
         91:1c:23:2a:0a:94:fc:ea:0a:ab:a7:be:15:bc:ec:41:7e:28:
         e4:a2:88:6f:d2:26:9d:a6:c1:b3:0f:ee:bd:4e:e0:6f:98:e3:
         ed:28:34:17:cc:65:7a:12:01:36:ca:b2:5a:1a:4e:b1:48:54:
         5f:94:81:38:01:8c:73:da:97:e4:e4:53:e2:2d:ab:a4:82:9a:
         15:4f:e4:0f:24:70:fd:a0:54:6e:00:a2:12:b0:72:30:8d:36:
         02:4a:e2:ad:f3:1b:60:bc:d9:5f:cf:40:d5:39:52:4c:68:4f:
         b9:61:1f:19
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIDAdkMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTI2MTE1ODIyWhcNMjYxMDI1MTE1ODIyWjAYMRYw
FAYDVQQDEw02YWI3YjM2Mi1lZGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApTjMtk4K4GxCCB/TmeDZVf9HcMV3lCfNwCXZyA8Y4v9nk3hUPLm5y6/e
BoKfPZdrg2jkY/szwn3VS8Ahv9IIlC+BbwoW+KdH9finvuuzcOi2ANE8QDrk21Mk
ezdGoGzN9NNpmrM83kiWoZRV+n4WOI3GAmvlikobBt9Tf4E2xQLmvEmGHYVnUn5E
dt4pwazBUhN1xQWYE7y+ibvgiI2uw2Fb/duYtoaKgGHvZdBD5KSXi/kskM77nGbP
6Cco/1Cp+w85vi6qDpVvr3Zi4vfTMwMXedMRjAFer80Zw6Yz9Nyi7Q4Wq9kxQuoC
Lsll3ri/l4T3qqPmhE+aYyScXIZc1wIDAQABo4ICrzCCAqswHQYDVR0OBBYEFDOQ
BcotARjk7AuIYHXSHbPFxBtDMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NDQzQzZFMEI5QTExMUYxQTQ4NDNEMTNDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATAwQFnOzAMAsDBACc7PkDAwCc7DAN
BgkqhkiG9w0BAQsFAAOCAQEAUxSeWEogAZe5iepzpl8mBuEkXHlZ8BVsmwBxNRYP
mF0974sHFsEHN+ZOehaFDVjfKlv7qeK+9MTP3jPsBg4tF8N6LGNq3AMeJIDhN38d
pSaQgPv31Q8t1j3wi0hl10+vTslpgVjhdoP5CUx0l+zcxXCyYjr4642olHmHf0BQ
s02jcHZ/cy8Buq5xfpybcBJtkRwjKgqU/OoKq6e+FbzsQX4o5KKIb9ImnabBsw/u
vU7gb5jj7Sg0F8xlehIBNsqyWhpOsUhUX5SBOAGMc9qX5ORT4i2rpIKaFU/kDyRw
/aBUbgCiErByMI02AkrirfMbYLzZX89A1TlSTGhPuWEfGQ==
-----END CERTIFICATE-----