Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2611A568F0D11F1AFBCBCCCCE1D38B0.roa
File:                     B2611A568F0D11F1AFBCBCCCCE1D38B0.roa (raw, json)
Hash identifier:          ghQ2UOwZI5DPY8kpgcyjMrNF140apwwVoih6IgT5J9E=
Subject key identifier:   72:ED:FE:B5:02:54:36:D8:A7:79:8C:42:5B:07:39:9C:A6:5A:1F:B1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C958
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2611A568F0D11F1AFBCBCCCCE1D38B0.roa
Signing time:             Mon 03 Aug 2026 07:34:02 +0000
ROA not before:           Mon 03 Aug 2026 07:33:58 +0000
ROA not after:            Wed 09 Sep 2026 07:33:58 +0000
asID:                     48031
IP address blocks:        156.238.38.0/24 maxlen: 24
                          156.238.39.0/24 maxlen: 24
                          156.254.97.0/24 maxlen: 24
                          156.254.98.0/24 maxlen: 24
                          156.254.99.0/24 maxlen: 24
                          156.254.100.0/24 maxlen: 24
                          156.254.101.0/24 maxlen: 24
                          156.254.102.0/24 maxlen: 24
                          156.254.103.0/24 maxlen: 24
                          156.254.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117080 (0x1c958)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  3 07:33:58 2026 GMT
            Not After : Sep  9 07:33:58 2026 GMT
        Subject: CN=6a70446a-3aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3b:8d:a5:19:31:37:7c:fc:26:2a:0b:4a:73:
                    c2:48:b6:ee:27:d7:31:8a:af:80:a3:a8:49:bb:3d:
                    62:5f:72:c5:06:ad:92:e2:e2:cc:76:95:9b:a2:da:
                    35:b6:74:82:ca:48:ef:32:66:e3:16:99:56:13:74:
                    fa:d9:7c:11:86:84:3e:90:94:72:fd:f4:fb:05:fb:
                    8a:f6:94:3b:84:a5:9e:95:2f:ca:56:f3:b1:dd:83:
                    04:aa:87:21:cc:4f:60:d8:e8:0a:3c:6c:bf:0f:9d:
                    7c:ac:0e:b8:3e:92:80:90:bc:1f:84:34:66:22:9c:
                    7d:6c:07:a8:f2:43:dd:c1:07:d7:cc:6e:ec:4d:9e:
                    56:56:ea:24:fe:84:cc:0c:de:7a:8a:bf:60:66:22:
                    f4:d6:9d:33:04:43:4b:f3:5a:a1:95:13:7b:5c:75:
                    ac:8f:91:7e:f7:8a:9e:d8:1d:38:0c:bd:3d:a5:e2:
                    7d:7e:90:c8:43:54:bc:00:4e:dd:37:49:85:eb:6f:
                    6e:88:ed:42:24:6c:bd:2f:35:5e:50:9b:6e:11:c9:
                    ba:00:94:67:22:86:ee:eb:b7:55:0a:28:dd:14:81:
                    c7:cd:d1:cf:be:07:c1:36:41:6a:ab:a4:b2:d5:fb:
                    e2:74:b4:a4:71:77:19:1f:ab:51:b4:88:4f:54:e3:
                    72:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:ED:FE:B5:02:54:36:D8:A7:79:8C:42:5B:07:39:9C:A6:5A:1F:B1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2611A568F0D11F1AFBCBCCCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.38.0/23
                  156.254.97.0-156.254.104.255

    Signature Algorithm: sha256WithRSAEncryption
         2f:c0:7d:e2:75:82:8c:40:55:61:41:83:46:cf:cd:ee:c6:a9:
         a5:17:e1:b3:6a:c0:a1:8d:9e:e5:c7:f8:ca:59:08:91:3b:71:
         b9:84:60:c5:98:be:f4:09:9e:d7:bb:15:a9:60:55:04:23:55:
         de:4d:32:14:8e:60:9e:de:2b:42:fa:bb:5e:b9:fd:0a:5a:33:
         8c:ad:cb:4d:b6:d5:38:be:cb:dd:91:b9:23:f8:71:31:a0:ec:
         eb:8d:01:6f:de:4d:19:6f:3a:8e:fb:6a:10:95:d6:dd:d1:35:
         77:b4:cb:75:98:e9:43:a9:22:1b:58:9d:08:d4:2d:99:d5:ae:
         9a:52:90:23:e9:17:61:ff:ce:95:34:23:65:d5:4a:c6:39:b4:
         ef:64:ae:4b:57:f6:eb:9c:29:4b:2c:61:88:fd:27:ff:26:cf:
         01:ff:e2:9c:34:d3:9e:f5:9e:2a:77:3c:17:cd:e2:35:9f:e9:
         e9:dc:00:1d:da:41:62:33:40:9f:9a:3b:74:a4:32:4b:d2:6d:
         3a:7d:7f:cb:e6:f4:15:d1:ac:95:66:b8:f3:29:e6:ae:5f:02:
         8f:9a:fb:a7:7b:b2:c2:e5:f6:2c:8f:ec:e2:86:a2:f2:8e:26:
         31:45:8e:78:ce:30:ac:3b:44:86:e3:af:0b:b5:a4:85:93:3b:
         af:2d:52:1c
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAclYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODAzMDczMzU4WhcNMjYwOTA5MDczMzU4WjAYMRYw
FAYDVQQDEw02YTcwNDQ2YS0zYWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwTuNpRkxN3z8JioLSnPCSLbuJ9cxiq+Ao6hJuz1iX3LFBq2S4uLMdpWb
oto1tnSCykjvMmbjFplWE3T62XwRhoQ+kJRy/fT7BfuK9pQ7hKWelS/KVvOx3YME
qochzE9g2OgKPGy/D518rA64PpKAkLwfhDRmIpx9bAeo8kPdwQfXzG7sTZ5WVuok
/oTMDN56ir9gZiL01p0zBENL81qhlRN7XHWsj5F+94qe2B04DL09peJ9fpDIQ1S8
AE7dN0mF629uiO1CJGy9LzVeUJtuEcm6AJRnIobu67dVCijdFIHHzdHPvgfBNkFq
q6Sy1fvidLSkcXcZH6tRtIhPVONyvQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFHLt
/rUCVDbYp3mMQlsHOZymWh+xMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMjYxMUE1NjhGMEQxMUYxQUZCQ0JDQ0NDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBnO4mMAwDBACc/mEDBACc/mgw
DQYJKoZIhvcNAQELBQADggEBAC/AfeJ1goxAVWFBg0bPze7GqaUX4bNqwKGNnuXH
+MpZCJE7cbmEYMWYvvQJnte7FalgVQQjVd5NMhSOYJ7eK0L6u165/QpaM4yty022
1Ti+y92RuSP4cTGg7OuNAW/eTRlvOo77ahCV1t3RNXe0y3WY6UOpIhtYnQjULZnV
rppSkCPpF2H/zpU0I2XVSsY5tO9krktX9uucKUssYYj9J/8mzwH/4pw00571nip3
PBfN4jWf6encAB3aQWIzQJ+aO3SkMkvSbTp9f8vm9BXRrJVmuPMp5q5fAo+a+6d7
ssLl9iyP7OKGovKOJjFFjnjOMKw7RIbjrwu1pIWTO68tUhw=
-----END CERTIFICATE-----