Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DA928BAAC1811F1AF372004CF1D38B0.roa
File:                     9DA928BAAC1811F1AF372004CF1D38B0.roa (raw, json)
Hash identifier:          J647H12AtvvjFTCpGN+Vb5PwmJ2R3myWsF9ExFbanx0=
Subject key identifier:   F3:B8:1B:26:98:7A:39:E0:9B:67:5F:53:48:29:E8:9D:DB:03:7D:00
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D42C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DA928BAAC1811F1AF372004CF1D38B0.roa
Signing time:             Wed 09 Sep 2026 06:35:15 +0000
ROA not before:           Wed 09 Sep 2026 06:35:11 +0000
ROA not after:            Fri 09 Oct 2026 06:35:11 +0000
asID:                     206283
IP address blocks:        156.238.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119852 (0x1d42c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  9 06:35:11 2026 GMT
            Not After : Oct  9 06:35:11 2026 GMT
        Subject: CN=6aa0fe23-a167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:31:22:dc:39:ab:b2:a3:de:9b:dd:e3:1f:40:
                    3f:98:32:71:f8:d2:dd:ef:4f:5c:23:1c:b6:0a:4b:
                    8e:63:bd:c3:32:67:7a:04:d6:36:13:6a:38:00:6e:
                    64:fb:22:90:0d:06:b0:27:f5:72:aa:ac:0f:58:3f:
                    9c:e8:00:c7:7e:5f:7c:59:b4:d8:a3:54:7d:91:57:
                    0e:2b:01:d0:72:43:51:ab:9f:fe:3a:31:f6:b8:ff:
                    a6:97:fe:0c:54:2f:58:c6:91:09:a5:80:08:8d:37:
                    4c:56:c5:d6:d9:48:9f:00:b1:f2:1b:0e:9b:35:24:
                    a8:ab:7d:52:8e:f7:5b:0b:5d:83:8f:1c:5f:70:ca:
                    df:d8:88:e7:8f:0b:12:e5:be:c9:c5:1f:98:62:b8:
                    19:11:f4:44:aa:af:38:eb:da:81:c6:31:9c:88:9e:
                    1b:7b:b3:70:2e:dd:04:d0:8b:79:08:b4:0f:76:71:
                    bd:c1:f8:46:ef:48:99:ff:ba:74:64:11:b0:7e:a9:
                    c6:05:db:67:6c:7f:4e:09:b2:7b:0d:0f:02:7c:6e:
                    9b:d2:2a:d3:c5:c4:e9:f0:34:48:c4:20:f4:41:7c:
                    cc:11:10:6d:2a:07:7a:d5:8e:2b:9d:8d:3b:f7:9a:
                    d9:23:f1:44:33:fc:27:67:b9:57:e3:c5:66:df:8e:
                    e1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B8:1B:26:98:7A:39:E0:9B:67:5F:53:48:29:E8:9D:DB:03:7D:00
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DA928BAAC1811F1AF372004CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:61:d3:2e:d2:10:4e:e4:21:13:a6:1e:16:c4:e5:90:97:3d:
         06:d7:df:09:cb:a8:4c:b9:fe:bf:ad:86:d6:e9:f3:23:4f:bd:
         6c:1f:42:4d:b7:ca:c6:8d:58:88:82:10:b7:be:33:33:26:b2:
         16:a1:16:db:ae:cb:8b:0a:c4:72:d8:0b:2a:07:6d:02:50:7e:
         6c:60:88:4f:bb:cd:73:da:69:70:76:11:f8:bf:71:c4:d6:36:
         8f:7a:56:4d:0f:ed:12:c3:65:4a:95:68:b7:c8:23:9a:ab:23:
         4c:80:8b:72:e9:56:b9:5d:73:81:80:af:18:47:4a:cc:70:70:
         c4:85:00:4a:e2:cd:57:58:af:9c:9c:c7:8d:b7:2f:dc:7d:b1:
         76:1f:0a:03:d0:47:e9:78:33:38:58:ac:d5:61:75:15:13:6d:
         21:9e:2b:10:cb:2d:3f:56:4b:be:64:03:2f:b4:cd:23:17:7a:
         ad:36:79:75:16:8c:de:8e:73:20:cf:11:c1:a9:72:c7:68:8a:
         3c:6b:f4:0c:ea:10:94:db:e8:35:69:cc:60:e7:b7:9c:87:91:
         22:d7:71:8c:29:5e:ec:5d:fc:d5:ef:5d:4c:76:55:85:f8:67:
         74:57:01:12:21:a9:88:5e:2b:ac:53:f3:d9:07:e0:9e:c2:46:
         f4:f3:e6:9f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdQsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTA5MDYzNTExWhcNMjYxMDA5MDYzNTExWjAYMRYw
FAYDVQQDEw02YWEwZmUyMy1hMTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuzEi3DmrsqPem93jH0A/mDJx+NLd709cIxy2CkuOY73DMmd6BNY2E2o4
AG5k+yKQDQawJ/VyqqwPWD+c6ADHfl98WbTYo1R9kVcOKwHQckNRq5/+OjH2uP+m
l/4MVC9YxpEJpYAIjTdMVsXW2UifALHyGw6bNSSoq31SjvdbC12DjxxfcMrf2Ijn
jwsS5b7JxR+YYrgZEfREqq8469qBxjGciJ4be7NwLt0E0It5CLQPdnG9wfhG70iZ
/7p0ZBGwfqnGBdtnbH9OCbJ7DQ8CfG6b0irTxcTp8DRIxCD0QXzMERBtKgd61Y4r
nY0795rZI/FEM/wnZ7lX48Vm347hrQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPO4
GyaYejngm2dfU0gp6J3bA30AMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85REE5MjhCQUFDMTgxMUYxQUYzNzIwMDRDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO5VMA0GCSqGSIb3DQEBCwUA
A4IBAQBoYdMu0hBO5CETph4WxOWQlz0G198Jy6hMuf6/rYbW6fMjT71sH0JNt8rG
jViIghC3vjMzJrIWoRbbrsuLCsRy2AsqB20CUH5sYIhPu81z2mlwdhH4v3HE1jaP
elZND+0Sw2VKlWi3yCOaqyNMgIty6Va5XXOBgK8YR0rMcHDEhQBK4s1XWK+cnMeN
ty/cfbF2HwoD0EfpeDM4WKzVYXUVE20hnisQyy0/Vku+ZAMvtM0jF3qtNnl1Foze
jnMgzxHBqXLHaIo8a/QM6hCU2+g1acxg57ech5Ei13GMKV7sXfzV711MdlWF+Gd0
VwESIamIXiusU/PZB+Cewkb08+af
-----END CERTIFICATE-----