Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7F8BBAEA2E511F197009DD2CE1D38B0.roa
File:                     B7F8BBAEA2E511F197009DD2CE1D38B0.roa (raw, json)
Hash identifier:          ncU+Rc/wpk9YOPvomNbP+PzlYhFM1tfO9c0581TwOsM=
Subject key identifier:   1D:C1:65:FD:21:A8:AF:BF:4A:06:1A:92:3C:70:B4:2A:E8:83:82:99
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D195
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7F8BBAEA2E511F197009DD2CE1D38B0.roa
Signing time:             Fri 28 Aug 2026 13:38:15 +0000
ROA not before:           Fri 28 Aug 2026 13:38:10 +0000
ROA not after:            Wed 02 Sep 2026 13:38:10 +0000
asID:                     17497
IP address blocks:        156.225.14.0/24 maxlen: 24
                          156.233.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119189 (0x1d195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 28 13:38:10 2026 GMT
            Not After : Sep  2 13:38:10 2026 GMT
        Subject: CN=6a918f46-d8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:45:cc:7d:10:a1:58:2e:61:b7:81:70:c4:70:
                    e2:15:28:c0:d8:ff:96:02:54:23:1a:7f:be:08:29:
                    d2:7b:fe:f3:2c:a6:b9:f1:21:df:46:1e:ed:62:61:
                    78:9a:3e:a1:af:8b:c7:d7:25:8e:40:92:33:36:6a:
                    b0:02:78:13:d6:98:6d:41:13:af:79:e7:d2:36:59:
                    54:e5:9b:24:35:e2:d1:45:fa:a4:23:33:bf:d5:f7:
                    21:ab:d9:a0:52:96:c7:17:89:48:10:13:bf:af:93:
                    56:4e:8f:36:5e:40:65:9c:b1:2d:ee:7d:64:bb:f6:
                    a9:67:df:42:85:a3:9a:a5:ad:aa:95:2f:59:7d:7c:
                    7b:05:47:73:50:f7:2e:06:bb:fe:31:aa:e4:67:1b:
                    78:d3:c0:0b:37:fb:8e:e4:4c:02:a4:30:05:5f:28:
                    4e:43:ce:1c:9c:0e:37:63:5f:c8:23:d6:fc:98:fe:
                    8d:dc:01:9a:fa:7b:97:78:35:46:f7:23:17:97:b2:
                    f4:15:03:f6:dd:ef:6b:32:d8:99:4f:ea:2a:7d:43:
                    5d:42:ab:e9:35:7e:eb:b9:b9:1a:0b:b2:81:06:8b:
                    1f:a4:a8:4c:2b:28:ce:dc:9f:b7:9a:b2:42:30:87:
                    4d:ac:f0:a2:2f:3e:b4:5b:dc:2d:63:a8:89:8f:80:
                    77:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C1:65:FD:21:A8:AF:BF:4A:06:1A:92:3C:70:B4:2A:E8:83:82:99
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7F8BBAEA2E511F197009DD2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.14.0/24
                  156.233.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:64:f6:e5:f9:56:2c:55:aa:7d:74:ce:62:69:3d:fb:55:bb:
         f0:e7:03:cb:78:9b:e1:ba:dd:f6:ef:ac:11:17:08:56:af:6a:
         74:d4:31:a5:ea:d6:1d:84:76:d3:2d:b6:8a:f4:b3:ea:53:07:
         1a:75:82:de:d5:f8:34:0c:18:0b:84:f6:24:63:33:24:eb:8a:
         09:1c:93:62:e2:1a:58:8c:25:31:02:93:8c:31:e4:22:b4:7b:
         35:36:f2:92:ab:65:aa:8b:19:f0:44:9e:42:63:3c:85:a4:2a:
         1b:a0:89:0f:ae:a9:d3:25:24:f8:91:95:82:3d:75:fe:41:7c:
         77:a2:f9:35:02:29:cf:c1:c9:7d:9a:4b:3f:d9:44:00:5e:3a:
         c2:f8:d2:32:bf:ac:4a:c9:71:5f:10:6a:62:5e:f8:ac:2f:5e:
         cd:99:ba:e8:1f:8e:3b:6f:b0:a9:8a:90:40:ea:a7:08:94:61:
         66:b2:6d:f1:74:eb:ac:89:7f:8e:f3:4b:9f:56:73:02:08:35:
         e0:bc:ad:53:60:9e:01:49:d4:dc:7a:76:43:f9:9b:3a:7e:d7:
         e1:36:82:5c:6d:c7:3c:24:c6:2a:3e:2a:68:e8:6c:9a:32:98:
         32:e8:74:2e:61:df:81:e6:c2:bf:37:15:96:1a:65:e4:fe:fd:
         86:ea:bf:b0
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAdGVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODI4MTMzODEwWhcNMjYwOTAyMTMzODEwWjAYMRYw
FAYDVQQDEw02YTkxOGY0Ni1kOGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxUXMfRChWC5ht4FwxHDiFSjA2P+WAlQjGn++CCnSe/7zLKa58SHfRh7t
YmF4mj6hr4vH1yWOQJIzNmqwAngT1phtQROveefSNllU5ZskNeLRRfqkIzO/1fch
q9mgUpbHF4lIEBO/r5NWTo82XkBlnLEt7n1ku/apZ99ChaOapa2qlS9ZfXx7BUdz
UPcuBrv+MarkZxt408ALN/uO5EwCpDAFXyhOQ84cnA43Y1/II9b8mP6N3AGa+nuX
eDVG9yMXl7L0FQP23e9rMtiZT+oqfUNdQqvpNX7rubkaC7KBBosfpKhMKyjO3J+3
mrJCMIdNrPCiLz60W9wtY6iJj4B3ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3B
Zf0hqK+/SgYakjxwtCrog4KZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CN0Y4QkJBRUEyRTUxMUYxOTcwMDlERDJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOEOAwQAnOkDMA0GCSqGSIb3
DQEBCwUAA4IBAQCXZPbl+VYsVap9dM5iaT37Vbvw5wPLeJvhut3276wRFwhWr2p0
1DGl6tYdhHbTLbaK9LPqUwcadYLe1fg0DBgLhPYkYzMk64oJHJNi4hpYjCUxApOM
MeQitHs1NvKSq2WqixnwRJ5CYzyFpCoboIkPrqnTJST4kZWCPXX+QXx3ovk1AinP
wcl9mks/2UQAXjrC+NIyv6xKyXFfEGpiXvisL17NmbroH447b7CpipBA6qcIlGFm
sm3xdOusiX+O80ufVnMCCDXgvK1TYJ4BSdTcenZD+Zs6ftfhNoJcbcc8JMYqPipo
6GyaMpgy6HQuYd+B5sK/NxWWGmXk/v2G6r+w
-----END CERTIFICATE-----