Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF4FAE7CC15C11F19DEB7608CF1D38B0.roa
File:                     BF4FAE7CC15C11F19DEB7608CF1D38B0.roa (raw, json)
Hash identifier:          MMaZFROF77sbN46ycp6G7XTC9jASayZHGCv41LTpPak=
Subject key identifier:   F8:85:B7:62:E6:2C:E9:D0:08:0B:16:B5:E1:F9:21:18:5E:71:27:CB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DB62
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF4FAE7CC15C11F19DEB7608CF1D38B0.roa
Signing time:             Tue 06 Oct 2026 08:05:52 +0000
ROA not before:           Tue 06 Oct 2026 08:05:48 +0000
ROA not after:            Mon 09 Nov 2026 08:05:48 +0000
asID:                     131471
IP address blocks:        156.238.69.0/24 maxlen: 24
                          156.238.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121698 (0x1db62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  6 08:05:48 2026 GMT
            Not After : Nov  9 08:05:48 2026 GMT
        Subject: CN=6ac4abe0-7e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:38:f4:b2:b5:d5:6d:01:0d:11:a3:40:3b:9a:
                    0a:f9:32:6b:34:a2:e6:9f:f5:42:8e:cb:cc:02:76:
                    c0:ea:ed:9a:13:f1:5f:2c:38:e5:cc:06:0f:3b:b4:
                    4b:6d:0e:08:d1:e4:15:df:ce:92:9c:7a:dc:51:4e:
                    c1:ee:80:d3:66:53:60:15:52:95:7c:5c:3a:b7:5b:
                    62:1a:21:ef:2a:8b:a2:fd:84:5f:5a:e6:a6:60:ec:
                    71:43:f8:08:32:71:88:ce:d7:cb:ee:9f:67:85:de:
                    21:d6:7e:b9:36:40:f7:7e:0b:d4:06:6c:04:0f:d3:
                    66:4d:e8:e0:50:81:a7:36:ac:d5:00:99:24:63:26:
                    bd:ea:af:08:4b:3a:cc:7b:63:83:9c:24:54:01:6a:
                    5a:f2:35:6c:9e:2f:3f:12:79:e6:9f:7b:6d:43:b7:
                    f4:6f:d6:3a:74:87:cc:c8:ad:35:19:c1:fb:87:ca:
                    47:ef:3d:40:86:8d:22:dd:09:4b:15:15:bc:93:ab:
                    cc:96:80:14:bd:e8:3b:af:c0:b1:82:28:42:c4:51:
                    fc:ab:7c:3e:2c:0d:fd:d0:b1:db:a2:fb:ec:94:bf:
                    18:64:7e:55:9d:76:78:01:3e:8b:93:19:59:c5:0b:
                    83:10:ae:18:0f:5d:f0:b2:41:25:95:0d:1b:41:65:
                    95:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:85:B7:62:E6:2C:E9:D0:08:0B:16:B5:E1:F9:21:18:5E:71:27:CB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF4FAE7CC15C11F19DEB7608CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.69.0/24
                  156.238.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:8f:60:f0:3f:6f:58:b8:a4:ad:41:f0:9e:a4:dc:3d:b0:b3:
         50:7e:22:bb:38:5e:42:1a:3e:e8:35:5a:2e:51:f9:dd:fd:4c:
         20:77:f8:45:c0:b1:4a:de:c9:03:8f:f0:c4:9d:f0:c3:2f:19:
         8d:81:88:d6:b7:3b:38:9f:56:21:27:03:37:c8:a7:cb:a2:b7:
         67:2a:6b:49:7b:7c:a0:b4:95:af:4c:45:fb:dc:c7:99:e0:25:
         84:68:f5:39:28:d6:41:ae:b9:63:49:b6:05:ce:33:64:d6:4f:
         61:d1:bb:4c:19:a2:4d:09:aa:2d:b8:f9:69:3f:0e:dd:7b:c0:
         46:9e:c2:1f:c3:0c:a3:00:00:9d:fe:3b:31:83:4e:28:ee:44:
         cc:d6:c2:f4:69:2f:ab:d9:ba:4b:d2:cf:b7:df:7a:55:1e:aa:
         e5:dc:99:c0:ce:21:fb:20:32:d9:98:12:32:4b:f7:59:a2:58:
         03:1f:40:dd:8b:3a:6d:fe:48:ea:30:38:d9:c1:88:db:76:72:
         7c:23:8e:ac:ff:cf:cb:f6:33:a0:3b:7d:dd:1d:17:0b:47:21:
         e2:f4:6f:05:6e:97:68:62:72:ee:43:0d:01:34:7f:5a:a9:5e:
         c9:d2:06:b3:de:07:01:e8:a5:41:82:ab:e1:f4:c1:39:8e:64:
         b8:4b:db:81
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAdtiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDA2MDgwNTQ4WhcNMjYxMTA5MDgwNTQ4WjAYMRYw
FAYDVQQDEw02YWM0YWJlMC03ZTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4jj0srXVbQENEaNAO5oK+TJrNKLmn/VCjsvMAnbA6u2aE/FfLDjlzAYP
O7RLbQ4I0eQV386SnHrcUU7B7oDTZlNgFVKVfFw6t1tiGiHvKoui/YRfWuamYOxx
Q/gIMnGIztfL7p9nhd4h1n65NkD3fgvUBmwED9NmTejgUIGnNqzVAJkkYya96q8I
SzrMe2ODnCRUAWpa8jVsni8/Ennmn3ttQ7f0b9Y6dIfMyK01GcH7h8pH7z1Aho0i
3QlLFRW8k6vMloAUveg7r8CxgihCxFH8q3w+LA390LHbovvslL8YZH5VnXZ4AT6L
kxlZxQuDEK4YD13wskEllQ0bQWWVQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPiF
t2LmLOnQCAsWteH5IRhecSfLMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CRjRGQUU3Q0MxNUMxMUYxOURFQjc2MDhDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnO5FAwQAnO5HMA0GCSqGSIb3
DQEBCwUAA4IBAQBBj2DwP29YuKStQfCepNw9sLNQfiK7OF5CGj7oNVouUfnd/Uwg
d/hFwLFK3skDj/DEnfDDLxmNgYjWtzs4n1YhJwM3yKfLordnKmtJe3ygtJWvTEX7
3MeZ4CWEaPU5KNZBrrljSbYFzjNk1k9h0btMGaJNCaotuPlpPw7de8BGnsIfwwyj
AACd/jsxg04o7kTM1sL0aS+r2bpL0s+333pVHqrl3JnAziH7IDLZmBIyS/dZolgD
H0Ddizpt/kjqMDjZwYjbdnJ8I46s/8/L9jOgO33dHRcLRyHi9G8FbpdoYnLuQw0B
NH9aqV7J0gaz3gcB6KVBgqvh9ME5jmS4S9uB
-----END CERTIFICATE-----