Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A672605EC20411F187FDB6CDCE1D38B0.roa
File:                     A672605EC20411F187FDB6CDCE1D38B0.roa (raw, json)
Hash identifier:          KsmdEJK2CMM1Qdl3Fww7iAqKglNbGD9WuebJZz/UnQM=
Subject key identifier:   FF:3A:81:5F:A9:BA:07:3B:96:0B:66:07:0E:5F:49:ED:CF:21:62:AF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DB93
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A672605EC20411F187FDB6CDCE1D38B0.roa
Signing time:             Wed 07 Oct 2026 04:07:46 +0000
ROA not before:           Wed 07 Oct 2026 04:07:42 +0000
ROA not after:            Sun 15 Nov 2026 04:07:42 +0000
asID:                     401650
IP address blocks:        156.236.77.0/24 maxlen: 24
                          156.236.85.0/24 maxlen: 24
                          156.236.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121747 (0x1db93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  7 04:07:42 2026 GMT
            Not After : Nov 15 04:07:42 2026 GMT
        Subject: CN=6ac5c591-d125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:97:61:d0:93:2b:a8:fe:00:ce:ad:4b:83:5f:
                    5a:b2:0f:60:ac:73:62:eb:41:e3:26:4e:01:8c:0f:
                    93:19:a3:78:6a:cd:3e:a2:ca:4e:1e:96:75:9e:46:
                    65:1a:7c:ab:26:25:85:32:da:03:3d:74:a2:2a:46:
                    e7:3b:9e:e9:be:65:05:7d:82:cc:2f:5c:34:b7:91:
                    7d:c8:43:25:13:2b:65:47:b2:ec:97:b8:6b:a3:f9:
                    17:6d:4c:c5:e0:08:a9:f2:ff:7c:f3:a3:c8:38:11:
                    f6:87:e3:79:6c:5f:c7:7b:b6:ed:1e:20:ce:6f:9e:
                    74:56:67:1a:de:da:0e:3d:8a:45:8d:78:52:c7:15:
                    ec:e2:76:da:01:c1:4e:93:0b:40:39:c6:85:fc:fb:
                    37:06:e0:e4:06:b8:c3:04:28:ab:56:d6:5c:d9:fc:
                    86:79:15:c6:f8:f1:63:0c:95:07:fa:5a:70:a1:23:
                    68:4d:1f:02:43:30:5c:ec:10:e8:c8:00:5e:62:dd:
                    17:78:e1:c7:c5:46:ed:ad:4f:93:1a:92:f3:b7:f7:
                    a7:7b:99:8e:f7:de:08:c5:6c:78:72:8e:0e:34:81:
                    5d:ed:1d:d7:69:9a:f5:f8:a5:08:77:7a:32:8d:ef:
                    3e:4a:5b:9e:b1:e2:48:2c:8d:2c:2f:f6:ee:31:09:
                    2e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3A:81:5F:A9:BA:07:3B:96:0B:66:07:0E:5F:49:ED:CF:21:62:AF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A672605EC20411F187FDB6CDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.77.0/24
                  156.236.85.0/24
                  156.236.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:e6:27:d0:45:e4:41:5f:30:56:b9:59:d1:9e:1c:c4:e7:c3:
         a2:8d:70:e5:d7:65:db:07:b4:f1:3b:12:95:7d:de:cc:93:59:
         66:f9:22:7f:85:8b:eb:10:c4:40:7d:ba:28:8a:1f:f7:ed:e4:
         07:92:f9:de:c5:43:24:f5:aa:74:93:b0:67:ee:98:98:06:5f:
         e3:c0:40:2f:8e:0f:e9:4b:02:d4:5e:bc:a3:d2:d8:4c:57:0f:
         43:95:28:79:b0:5f:57:5a:ab:4f:4c:bf:71:98:28:54:77:55:
         89:11:bd:d6:6d:a3:71:a3:71:28:d7:01:36:c7:78:aa:50:55:
         5d:80:47:30:86:42:c2:f2:e0:2a:ba:ed:f5:28:bd:6f:9f:34:
         f2:b2:c0:28:b8:1b:3b:b0:cc:3f:55:b0:cc:4f:ca:3d:74:5f:
         94:99:fc:62:79:f0:67:00:f4:5c:c7:f5:67:91:b0:06:63:8b:
         38:1f:d3:17:a8:bd:e4:6e:a2:ef:8a:35:82:19:72:21:10:5c:
         23:ff:69:ff:4b:ff:0e:d2:fd:c2:20:35:e2:7e:42:c0:bd:5f:
         a5:5b:e7:ad:8f:f4:76:88:13:a3:79:4e:b4:14:66:53:78:68:
         44:f0:2d:e0:7d:b4:bf:65:de:b8:69:5e:fd:ec:00:9e:f1:5a:
         fe:42:94:89
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAduTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDA3MDQwNzQyWhcNMjYxMTE1MDQwNzQyWjAYMRYw
FAYDVQQDEw02YWM1YzU5MS1kMTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAo5dh0JMrqP4Azq1Lg19asg9grHNi60HjJk4BjA+TGaN4as0+ospOHpZ1
nkZlGnyrJiWFMtoDPXSiKkbnO57pvmUFfYLML1w0t5F9yEMlEytlR7Lsl7hro/kX
bUzF4Aip8v9886PIOBH2h+N5bF/He7btHiDOb550Vmca3toOPYpFjXhSxxXs4nba
AcFOkwtAOcaF/Ps3BuDkBrjDBCirVtZc2fyGeRXG+PFjDJUH+lpwoSNoTR8CQzBc
7BDoyABeYt0XeOHHxUbtrU+TGpLzt/ene5mO994IxWx4co4ONIFd7R3XaZr1+KUI
d3oyje8+SlueseJILI0sL/buMQkuEwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFP86
gV+pugc7lgtmBw5fSe3PIWKvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNjcyNjA1RUMyMDQxMUYxODdGREI2Q0RDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAnOxNAwQAnOxVAwQAnOxoMA0G
CSqGSIb3DQEBCwUAA4IBAQBm5ifQReRBXzBWuVnRnhzE58OijXDl12XbB7TxOxKV
fd7Mk1lm+SJ/hYvrEMRAfbooih/37eQHkvnexUMk9ap0k7Bn7piYBl/jwEAvjg/p
SwLUXryj0thMVw9DlSh5sF9XWqtPTL9xmChUd1WJEb3WbaNxo3Eo1wE2x3iqUFVd
gEcwhkLC8uAquu31KL1vnzTyssAouBs7sMw/VbDMT8o9dF+UmfxiefBnAPRcx/Vn
kbAGY4s4H9MXqL3kbqLvijWCGXIhEFwj/2n/S/8O0v3CIDXifkLAvV+lW+etj/R2
iBOjeU60FGZTeGhE8C3gfbS/Zd64aV797ACe8Vr+QpSJ
-----END CERTIFICATE-----