Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5DDF3BCBB0E11F1A154D1E5CE1D38B0.roa
File:                     A5DDF3BCBB0E11F1A154D1E5CE1D38B0.roa (raw, json)
Hash identifier:          nQRe7jbzSN8EVnvIcaRPX2cgpQnN7AnaWj1irjzN75o=
Subject key identifier:   64:30:B0:61:71:33:9F:B9:42:AF:A7:B9:0C:91:9A:3A:26:42:26:F6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D942
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5DDF3BCBB0E11F1A154D1E5CE1D38B0.roa
Signing time:             Mon 28 Sep 2026 07:31:42 +0000
ROA not before:           Mon 28 Sep 2026 07:31:37 +0000
ROA not after:            Wed 04 Nov 2026 07:31:37 +0000
asID:                     18013
IP address blocks:        156.234.0.0/24 maxlen: 24
                          156.234.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121154 (0x1d942)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 28 07:31:37 2026 GMT
            Not After : Nov  4 07:31:37 2026 GMT
        Subject: CN=6aba17dd-ce9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:57:a0:e0:2f:ae:c8:14:22:2b:7e:98:b3:
                    67:96:85:bc:d3:fb:47:bd:ff:69:ce:d5:74:bb:fd:
                    af:4a:2c:5f:9c:70:a1:2e:03:d8:8b:c1:11:66:3d:
                    1d:77:60:f2:ef:35:7e:be:a6:e8:d1:c7:8c:30:bf:
                    10:ec:2b:89:15:b9:89:6f:c4:d0:bb:2f:0a:2b:c8:
                    1e:bf:f9:d4:4f:aa:37:34:d4:41:01:8e:99:fb:63:
                    f9:82:84:0c:3c:d6:f6:32:38:93:ba:23:ec:a2:6a:
                    4a:47:f5:fc:30:43:b4:f1:57:98:50:bc:c9:37:94:
                    3e:29:cb:2c:b8:c5:d7:83:25:8c:7a:04:ef:df:25:
                    db:70:6a:8d:2f:65:ed:f0:75:3b:60:2c:c1:2b:21:
                    78:89:b5:ca:32:6a:c0:93:7f:de:48:b2:df:97:fa:
                    3d:64:82:2b:55:b7:6b:9a:bf:b3:fc:31:e2:ee:b2:
                    9c:78:85:78:33:f2:b7:a7:fe:5a:17:6f:04:7e:c9:
                    c0:63:29:82:57:37:e2:18:c9:e3:62:af:18:9d:28:
                    ce:01:df:49:2d:a9:4f:21:0b:de:44:78:b0:97:20:
                    55:d8:57:bd:d2:a3:0a:a2:e4:b7:2c:94:44:95:fa:
                    95:fa:69:0d:ee:9a:ec:c0:d8:0e:67:5d:e9:4f:5f:
                    c7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:30:B0:61:71:33:9F:B9:42:AF:A7:B9:0C:91:9A:3A:26:42:26:F6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5DDF3BCBB0E11F1A154D1E5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.0.0/24
                  156.234.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:45:c0:42:24:71:26:ff:6b:dc:4c:97:c2:08:95:6b:f9:0a:
         4e:2c:f1:c8:b1:01:de:36:b0:ef:2e:e2:11:fa:bb:ea:0a:60:
         a9:cb:20:61:f3:30:77:6b:b1:38:ab:5e:b2:1c:2d:55:3b:a0:
         1a:f0:d7:aa:70:12:5f:ae:1f:80:ff:5c:bb:de:4a:25:9d:5d:
         17:4c:36:bf:8e:9f:02:be:d8:c1:cb:92:c0:2f:82:05:2b:21:
         c7:af:fd:d1:02:a8:28:b8:b7:7e:ac:da:25:03:5b:d1:56:75:
         06:4e:bb:e8:31:f2:e8:bb:b7:8e:cc:1b:b2:e4:e4:15:c6:65:
         2a:ac:b2:9d:7f:8e:fa:3d:3d:c8:61:b4:b1:6b:54:16:a6:46:
         bf:46:23:84:bf:79:4d:b6:0a:0e:8d:cb:dd:d4:5c:48:ad:cc:
         f2:a7:18:f0:92:a0:5d:6f:15:cc:79:4f:40:23:13:a2:0a:83:
         2e:15:f9:6c:ef:5c:0a:43:cf:b2:9a:5a:b9:7b:54:e9:bb:a2:
         1d:31:36:c9:9e:5f:f0:bc:48:97:fd:f7:a6:0d:c1:6a:e0:a9:
         c1:54:24:ed:2f:ea:00:7c:af:87:92:a7:40:96:7b:91:d4:c0:
         31:18:f3:5e:27:80:a8:1e:50:12:53:f8:ec:84:e6:c5:ac:db:
         bc:10:02:ed
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAdlCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTI4MDczMTM3WhcNMjYxMTA0MDczMTM3WjAYMRYw
FAYDVQQDEw02YWJhMTdkZC1jZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArdVXoOAvrsgUIit+mLNnloW80/tHvf9pztV0u/2vSixfnHChLgPYi8ER
Zj0dd2Dy7zV+vqbo0ceMML8Q7CuJFbmJb8TQuy8KK8gev/nUT6o3NNRBAY6Z+2P5
goQMPNb2MjiTuiPsompKR/X8MEO08VeYULzJN5Q+KcssuMXXgyWMegTv3yXbcGqN
L2Xt8HU7YCzBKyF4ibXKMmrAk3/eSLLfl/o9ZIIrVbdrmr+z/DHi7rKceIV4M/K3
p/5aF28EfsnAYymCVzfiGMnjYq8YnSjOAd9JLalPIQveRHiwlyBV2Fe90qMKouS3
LJRElfqV+mkN7prswNgOZ13pT1/H4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQw
sGFxM5+5Qq+nuQyRmjomQib2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNURERjNCQ0JCMEUxMUYxQTE1NEQxRTVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOoAAwQAnOoHMA0GCSqGSIb3
DQEBCwUAA4IBAQCiRcBCJHEm/2vcTJfCCJVr+QpOLPHIsQHeNrDvLuIR+rvqCmCp
yyBh8zB3a7E4q16yHC1VO6Aa8NeqcBJfrh+A/1y73kolnV0XTDa/jp8CvtjBy5LA
L4IFKyHHr/3RAqgouLd+rNolA1vRVnUGTrvoMfLou7eOzBuy5OQVxmUqrLKdf476
PT3IYbSxa1QWpka/RiOEv3lNtgoOjcvd1FxIrczypxjwkqBdbxXMeU9AIxOiCoMu
Ffls71wKQ8+ymlq5e1Tpu6IdMTbJnl/wvEiX/femDcFq4KnBVCTtL+oAfK+HkqdA
lnuR1MAxGPNeJ4CoHlASU/jshObFrNu8EALt
-----END CERTIFICATE-----