Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A89FA2B49F9611F1962FF4C3CE1D38B0.roa
File:                     A89FA2B49F9611F1962FF4C3CE1D38B0.roa (raw, json)
Hash identifier:          yq8z1GR4yf/U4Z1dQEan8hX3110GoTx41BNjVQHOcVI=
Subject key identifier:   02:7A:2A:F5:AA:74:B6:F0:25:02:9E:D8:A6:8D:86:07:85:EA:0D:F0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D05C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A89FA2B49F9611F1962FF4C3CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 08:34:45 +0000
ROA not before:           Mon 24 Aug 2026 08:34:41 +0000
ROA not after:            Tue 22 Sep 2026 08:34:41 +0000
asID:                     142032
IP address blocks:        156.233.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118876 (0x1d05c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 24 08:34:41 2026 GMT
            Not After : Sep 22 08:34:41 2026 GMT
        Subject: CN=6a8c0225-09ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:eb:d6:78:42:c9:9a:ac:d2:99:9b:40:10:4c:
                    ed:cf:7d:4d:67:71:0e:a3:d9:92:60:07:45:d7:58:
                    d6:43:b4:ba:3a:45:6d:ec:41:20:d0:16:3f:59:ec:
                    b6:e0:fd:72:c3:56:c3:11:c5:69:d3:f0:16:11:d4:
                    1f:f6:67:84:02:22:17:f0:51:68:a1:0c:e8:ed:36:
                    8b:4c:2f:20:0c:b7:17:d9:77:23:8e:7c:0f:ff:ed:
                    e8:67:c6:fe:65:ee:94:15:60:cd:6b:0e:fe:73:66:
                    4d:9b:f6:a5:61:92:4d:26:83:f0:5c:32:a9:1f:61:
                    b4:90:ad:4b:3b:ec:90:9e:da:54:24:1b:10:44:7b:
                    2a:ac:46:5f:cc:5d:a2:7e:41:2f:bb:c7:0f:4b:55:
                    70:13:11:b4:a5:22:e0:8c:05:05:2b:0b:a1:63:72:
                    63:95:f0:63:b5:60:76:c7:22:7e:2b:cf:fd:6e:f4:
                    ba:36:aa:92:db:92:a3:8d:90:66:2d:cf:75:db:24:
                    e6:7d:4d:f7:5c:44:40:1e:fa:41:64:16:c7:f0:4d:
                    da:41:98:9b:62:93:1a:64:9c:37:ca:10:44:19:db:
                    ae:12:13:e4:25:98:be:87:f4:56:b9:08:b9:85:82:
                    f9:63:5e:d2:af:94:8d:e8:30:13:3c:f0:63:70:b8:
                    a4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7A:2A:F5:AA:74:B6:F0:25:02:9E:D8:A6:8D:86:07:85:EA:0D:F0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A89FA2B49F9611F1962FF4C3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         75:1c:86:68:27:ed:f8:b8:8b:f8:b3:83:f2:a6:ec:d1:b7:80:
         64:16:d9:43:99:2a:b7:d1:24:e3:33:61:72:2d:83:04:46:d9:
         3c:e0:d5:f5:93:e6:7e:72:1b:23:64:73:cf:87:18:28:bc:d5:
         a0:ab:c5:96:fd:d4:3f:4c:55:03:4c:22:92:2e:51:87:ac:84:
         c8:a9:08:a5:91:6c:7e:12:34:8a:76:9b:da:d0:13:62:3e:9e:
         6a:39:2b:b8:45:60:bc:3c:da:91:db:41:84:3e:b0:6d:23:b9:
         e5:dc:b7:9a:30:ff:17:dc:f1:7e:3a:e1:dc:a0:d9:93:79:a7:
         2a:3d:e6:73:ee:d1:a3:07:28:8f:77:37:de:27:5e:47:c1:b8:
         c9:3d:c1:c4:8e:f6:a6:13:37:ad:db:68:59:73:46:f9:48:b6:
         b5:33:cc:6b:db:64:84:56:22:69:35:a7:72:df:4c:6d:45:e2:
         08:90:11:bb:c9:51:7e:8e:75:09:e7:f7:b1:bf:34:da:57:62:
         9c:d5:be:6d:59:56:1f:40:a3:62:3a:9f:b4:34:95:a5:c1:df:
         98:ca:02:17:70:f2:a9:11:88:05:1c:6d:35:5d:37:af:12:5c:
         44:42:6a:54:bf:dd:42:88:41:84:ec:09:cf:97:8d:3b:47:70:
         8e:11:5a:b5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdBcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODI0MDgzNDQxWhcNMjYwOTIyMDgzNDQxWjAYMRYw
FAYDVQQDEw02YThjMDIyNS0wOWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3+vWeELJmqzSmZtAEEztz31NZ3EOo9mSYAdF11jWQ7S6OkVt7EEg0BY/
Wey24P1yw1bDEcVp0/AWEdQf9meEAiIX8FFooQzo7TaLTC8gDLcX2XcjjnwP/+3o
Z8b+Ze6UFWDNaw7+c2ZNm/alYZJNJoPwXDKpH2G0kK1LO+yQntpUJBsQRHsqrEZf
zF2ifkEvu8cPS1VwExG0pSLgjAUFKwuhY3JjlfBjtWB2xyJ+K8/9bvS6NqqS25Kj
jZBmLc912yTmfU33XERAHvpBZBbH8E3aQZibYpMaZJw3yhBEGduuEhPkJZi+h/RW
uQi5hYL5Y17Sr5SN6DATPPBjcLikJwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAJ6
KvWqdLbwJQKe2KaNhgeF6g3wMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BODlGQTJCNDlGOTYxMUYxOTYyRkY0QzNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEnOngMA0GCSqGSIb3DQEBCwUA
A4IBAQB1HIZoJ+34uIv4s4PypuzRt4BkFtlDmSq30STjM2FyLYMERtk84NX1k+Z+
chsjZHPPhxgovNWgq8WW/dQ/TFUDTCKSLlGHrITIqQilkWx+EjSKdpva0BNiPp5q
OSu4RWC8PNqR20GEPrBtI7nl3LeaMP8X3PF+OuHcoNmTeacqPeZz7tGjByiPdzfe
J15HwbjJPcHEjvamEzet22hZc0b5SLa1M8xr22SEViJpNady30xtReIIkBG7yVF+
jnUJ5/exvzTaV2Kc1b5tWVYfQKNiOp+0NJWlwd+YygIXcPKpEYgFHG01XTevElxE
QmpUv91CiEGE7AnPl407R3COEVq1
-----END CERTIFICATE-----