Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB8C5C0CA22911F1932717DFCE1D38B0.roa
File:                     AB8C5C0CA22911F1932717DFCE1D38B0.roa (raw, json)
Hash identifier:          0chbsYwh5Q6m9iaxPz17GtjHfX285mQgX6UJYL/Or9I=
Subject key identifier:   11:E2:6D:05:E2:BE:A0:F7:BF:13:A3:A7:AC:96:8D:C3:17:B4:45:A4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D186
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB8C5C0CA22911F1932717DFCE1D38B0.roa
Signing time:             Thu 27 Aug 2026 15:12:08 +0000
ROA not before:           Thu 27 Aug 2026 15:12:04 +0000
ROA not after:            Fri 04 Sep 2026 15:12:04 +0000
asID:                     9294
IP address blocks:        156.236.32.0/19 maxlen: 24
                          156.239.64.0/18 maxlen: 24
                          156.244.160.0/19 maxlen: 24
                          156.244.224.0/19 maxlen: 24
                          156.247.64.0/18 maxlen: 24
                          156.250.32.0/19 maxlen: 24
                          156.252.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119174 (0x1d186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 27 15:12:04 2026 GMT
            Not After : Sep  4 15:12:04 2026 GMT
        Subject: CN=6a9053c8-2d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b0:ec:0c:2c:48:38:c5:3f:ac:38:59:86:1a:
                    f8:a4:4d:63:f6:bd:eb:0c:2b:0a:96:8c:0e:b5:ea:
                    62:35:dc:0a:81:c7:63:94:74:25:f9:6f:a3:e1:7a:
                    e6:ee:99:28:f9:75:b5:a1:84:a3:14:50:ee:2d:ab:
                    12:b7:1b:37:72:f7:cb:67:cd:1d:aa:8e:50:c8:83:
                    b2:2d:b2:32:2c:12:60:61:35:d6:b3:67:be:cd:6d:
                    b4:b0:c4:5b:d2:26:f8:9c:ba:1e:1c:42:40:9a:0b:
                    34:0a:14:37:8c:1c:10:68:31:c2:1d:9d:10:bd:44:
                    f5:da:5e:0a:6d:f9:c3:8d:cc:bf:77:3e:47:5c:ad:
                    91:55:71:69:fc:b4:6a:46:f4:fd:8f:b7:74:c3:68:
                    0c:ab:12:bd:fe:9e:64:cd:0c:db:ef:7f:fe:45:34:
                    b0:ac:5f:48:9d:49:c7:a1:c9:dc:69:52:ff:12:0b:
                    68:ad:aa:9e:8e:9e:9b:f8:30:02:10:c5:07:48:0c:
                    92:9d:7a:47:8a:e3:ee:56:ba:9f:46:d2:89:d5:23:
                    78:2b:3d:cd:6b:93:62:86:38:84:23:d3:3c:de:36:
                    0b:89:99:d6:73:64:18:bc:95:71:d3:ba:06:02:f1:
                    9d:b5:64:37:28:c0:93:16:8f:0b:8d:fd:49:e3:cf:
                    80:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E2:6D:05:E2:BE:A0:F7:BF:13:A3:A7:AC:96:8D:C3:17:B4:45:A4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB8C5C0CA22911F1932717DFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.32.0/19
                  156.239.64.0/18
                  156.244.160.0/19
                  156.244.224.0/19
                  156.247.64.0/18
                  156.250.32.0/19
                  156.252.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         92:42:10:c9:e6:b2:ee:8d:5d:6d:de:a3:da:06:70:8f:fe:c5:
         af:23:72:de:31:ec:5f:0d:33:14:85:66:7a:ae:42:05:1c:88:
         99:74:32:f6:17:46:ea:44:57:c0:a3:c3:0a:5c:bc:e1:e8:37:
         ab:5a:78:e0:49:cc:35:b7:ed:1e:66:74:0c:56:42:98:02:64:
         00:5d:32:53:81:57:8b:f0:5c:b6:df:6c:1c:f5:8a:8e:1d:ac:
         f7:5e:c0:c1:47:04:e8:cc:0a:a7:eb:fd:f6:c6:4e:5e:35:5a:
         93:b9:e8:44:d4:c0:93:24:a3:27:a0:38:e5:46:f1:a2:17:bc:
         18:d6:f1:18:0e:49:17:f7:b7:af:77:da:7a:4a:b5:34:4f:98:
         19:9d:a9:09:bf:cf:b3:b7:bb:88:5b:b0:00:e8:44:08:c3:d3:
         1d:14:59:78:d0:81:80:8e:5f:5b:3b:8f:fa:26:50:a7:e2:5f:
         9b:ac:a4:9d:9d:bc:42:e8:46:1c:ab:4b:64:5c:b8:0d:dd:93:
         ba:2d:95:6d:5d:1e:ec:b9:28:e9:44:b2:ee:03:8c:b7:4d:9e:
         79:24:94:ec:0b:c4:ed:7c:2f:8c:80:55:5c:28:51:51:30:25:
         ab:07:5a:82:fd:af:27:cf:12:00:81:45:be:e3:46:16:96:0e:
         77:7c:ec:be
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgIDAdGGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODI3MTUxMjA0WhcNMjYwOTA0MTUxMjA0WjAYMRYw
FAYDVQQDEw02YTkwNTNjOC0yZDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoLDsDCxIOMU/rDhZhhr4pE1j9r3rDCsKlowOtepiNdwKgcdjlHQl+W+j
4Xrm7pko+XW1oYSjFFDuLasStxs3cvfLZ80dqo5QyIOyLbIyLBJgYTXWs2e+zW20
sMRb0ib4nLoeHEJAmgs0ChQ3jBwQaDHCHZ0QvUT12l4KbfnDjcy/dz5HXK2RVXFp
/LRqRvT9j7d0w2gMqxK9/p5kzQzb73/+RTSwrF9InUnHocncaVL/Egtoraqejp6b
+DACEMUHSAySnXpHiuPuVrqfRtKJ1SN4Kz3Na5NihjiEI9M83jYLiZnWc2QYvJVx
07oGAvGdtWQ3KMCTFo8Ljf1J48+AkwIDAQABo4ICxjCCAsIwHQYDVR0OBBYEFBHi
bQXivqD3vxOjp6yWjcMXtEWkMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BQjhDNUMwQ0EyMjkxMUYxOTMyNzE3REZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQFnOwgAwQGnO9AAwQFnPSgAwQF
nPTgAwQGnPdAAwQFnPogAwQFnPwgMA0GCSqGSIb3DQEBCwUAA4IBAQCSQhDJ5rLu
jV1t3qPaBnCP/sWvI3LeMexfDTMUhWZ6rkIFHIiZdDL2F0bqRFfAo8MKXLzh6Der
WnjgScw1t+0eZnQMVkKYAmQAXTJTgVeL8Fy232wc9YqOHaz3XsDBRwTozAqn6/32
xk5eNVqTuehE1MCTJKMnoDjlRvGiF7wY1vEYDkkX97evd9p6SrU0T5gZnakJv8+z
t7uIW7AA6EQIw9MdFFl40IGAjl9bO4/6JlCn4l+brKSdnbxC6EYcq0tkXLgN3ZO6
LZVtXR7suSjpRLLuA4y3TZ55JJTsC8TtfC+MgFVcKFFRMCWrB1qC/a8nzxIAgUW+
40YWlg53fOy+
-----END CERTIFICATE-----