Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA9B10D0C93411F1B77CD2CCCE1D38B0.roa
File:                     BA9B10D0C93411F1B77CD2CCCE1D38B0.roa (raw, json)
Hash identifier:          d1Ot2TbfFREuWk5XFgd98pwZSIUoP48Z720hiFmKEAk=
Subject key identifier:   B4:B9:0E:34:B4:24:26:7B:2F:70:0E:96:22:16:F4:E5:6A:A1:25:A9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DDD4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA9B10D0C93411F1B77CD2CCCE1D38B0.roa
Signing time:             Fri 16 Oct 2026 07:39:33 +0000
ROA not before:           Fri 16 Oct 2026 07:39:28 +0000
ROA not after:            Fri 20 Nov 2026 07:39:28 +0000
asID:                     400619
IP address blocks:        156.254.0.0/19 maxlen: 24
                          156.254.0.0/24 maxlen: 24
                          156.254.1.0/24 maxlen: 24
                          156.254.2.0/24 maxlen: 24
                          156.254.3.0/24 maxlen: 24
                          156.254.4.0/24 maxlen: 24
                          156.254.5.0/24 maxlen: 24
                          156.254.6.0/24 maxlen: 24
                          156.254.7.0/24 maxlen: 24
                          156.254.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 18:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122324 (0x1ddd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 16 07:39:28 2026 GMT
            Not After : Nov 20 07:39:28 2026 GMT
        Subject: CN=6ad1d4b5-0a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:86:53:dc:f1:ec:5a:fe:17:41:1a:e0:7e:e3:
                    54:3a:96:08:05:f5:1c:19:58:c3:49:2b:a6:33:d8:
                    44:89:4a:fe:9d:72:9a:ac:09:4a:63:0e:cf:a5:fa:
                    76:8f:c7:c5:8d:6a:c4:06:4a:1e:46:97:ae:d1:84:
                    32:e3:9a:e4:4d:6a:46:f7:19:13:34:6d:41:49:e0:
                    53:42:c0:54:e0:92:88:0d:fb:9b:77:72:25:2f:d8:
                    7f:80:bc:64:83:9c:11:94:59:9d:12:b0:57:8c:26:
                    d2:d0:a5:69:9a:fa:8c:5a:bb:f3:40:95:e3:96:b9:
                    46:ff:80:fc:c2:47:ec:4f:a6:8a:6a:6b:68:71:63:
                    cd:58:56:87:ee:45:3d:ce:5e:36:06:99:73:f1:39:
                    8c:d7:d0:6c:87:a0:52:c9:b3:a8:8a:c4:56:25:72:
                    c4:3a:a4:bf:ff:56:24:79:f9:7b:79:b3:05:35:72:
                    d4:8e:76:b3:22:12:22:f4:59:87:d8:5c:ab:f4:a4:
                    92:08:37:63:92:7e:71:5a:be:43:c4:a5:e0:f5:3f:
                    b1:02:0b:87:1e:c9:52:2b:83:0a:1e:fb:34:e9:0e:
                    a1:48:17:3c:a6:5a:85:0b:d3:6d:c4:71:98:68:e1:
                    f0:b6:5c:eb:e7:96:b0:5b:f3:e6:8c:9f:8b:5c:db:
                    8c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B9:0E:34:B4:24:26:7B:2F:70:0E:96:22:16:F4:E5:6A:A1:25:A9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA9B10D0C93411F1B77CD2CCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0f:84:5b:c5:43:dc:34:0c:5a:10:17:5a:18:aa:28:5a:a3:39:
         cd:fd:0b:6f:61:90:f3:b3:d6:c6:1a:e1:02:3c:af:34:32:20:
         73:77:a8:5d:5c:e4:c5:ee:63:e1:6f:d4:ff:82:10:85:57:5d:
         ea:01:93:8f:f9:23:0f:b7:ea:14:52:77:85:8e:6a:5d:3e:59:
         00:0a:be:65:8e:f3:c5:54:f4:24:4c:95:7c:bb:e4:5a:31:29:
         4f:16:ff:98:84:cd:4d:2f:a0:f9:79:39:f1:d8:e5:96:91:43:
         1e:67:84:ac:73:6b:53:53:76:b2:c2:2e:14:a1:ff:d3:02:57:
         cf:68:fd:20:66:f6:1b:4c:c4:ca:b9:e6:65:19:a9:8b:e5:1b:
         3e:a2:26:50:58:0f:3c:7f:fb:d9:54:f6:b9:f7:32:f3:41:25:
         34:2c:e9:39:cf:22:1f:bc:44:87:72:f5:27:53:37:a0:27:8f:
         8c:96:c6:d7:98:35:50:a3:8d:e2:33:a2:ef:a4:f2:dc:f4:1b:
         b7:8a:e5:ae:bc:9a:7b:d2:03:15:a6:25:e1:ee:d1:d7:06:be:
         24:14:b8:aa:7d:ff:5b:1e:9d:20:8b:3d:0a:2e:a9:9f:35:66:
         43:c5:c1:27:48:05:26:3c:e6:85:dc:20:57:49:dc:98:a9:65:
         37:a4:91:c9
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAd3UMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDE2MDczOTI4WhcNMjYxMTIwMDczOTI4WjAYMRYw
FAYDVQQDEw02YWQxZDRiNS0wYTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxoZT3PHsWv4XQRrgfuNUOpYIBfUcGVjDSSumM9hEiUr+nXKarAlKYw7P
pfp2j8fFjWrEBkoeRpeu0YQy45rkTWpG9xkTNG1BSeBTQsBU4JKIDfubd3IlL9h/
gLxkg5wRlFmdErBXjCbS0KVpmvqMWrvzQJXjlrlG/4D8wkfsT6aKamtocWPNWFaH
7kU9zl42Bplz8TmM19Bsh6BSybOoisRWJXLEOqS//1Ykefl7ebMFNXLUjnazIhIi
9FmH2Fyr9KSSCDdjkn5xWr5DxKXg9T+xAguHHslSK4MKHvs06Q6hSBc8plqFC9Nt
xHGYaOHwtlzr55awW/PmjJ+LXNuM7wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLS5
DjS0JCZ7L3AOliIW9OVqoSWpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQTlCMTBEMEM5MzQxMUYxQjc3Q0QyQ0NDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnP4AMA0GCSqGSIb3DQEBCwUA
A4IBAQAPhFvFQ9w0DFoQF1oYqihaoznN/QtvYZDzs9bGGuECPK80MiBzd6hdXOTF
7mPhb9T/ghCFV13qAZOP+SMPt+oUUneFjmpdPlkACr5ljvPFVPQkTJV8u+RaMSlP
Fv+YhM1NL6D5eTnx2OWWkUMeZ4Ssc2tTU3aywi4Uof/TAlfPaP0gZvYbTMTKueZl
GamL5Rs+oiZQWA88f/vZVPa59zLzQSU0LOk5zyIfvESHcvUnUzegJ4+MlsbXmDVQ
o43iM6LvpPLc9Bu3iuWuvJp70gMVpiXh7tHXBr4kFLiqff9bHp0giz0KLqmfNWZD
xcEnSAUmPOaF3CBXSdyYqWU3pJHJ
-----END CERTIFICATE-----