Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFEED7A8BEF611F198931FE3CE1D38B0.roa
File:                     BFEED7A8BEF611F198931FE3CE1D38B0.roa (raw, json)
Hash identifier:          bVwvSF9Ka/t3uXNaFNSZwB4l3Z7z2MztykPzkIeXlNU=
Subject key identifier:   B1:16:A7:F0:00:1B:9F:EC:81:04:E2:41:AB:F8:80:FC:B2:01:DC:F1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA31
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFEED7A8BEF611F198931FE3CE1D38B0.roa
Signing time:             Sat 03 Oct 2026 06:50:42 +0000
ROA not before:           Sat 03 Oct 2026 06:50:38 +0000
ROA not after:            Tue 10 Nov 2026 06:50:38 +0000
asID:                     138915
IP address blocks:        156.244.0.0/24 maxlen: 24
                          156.244.1.0/24 maxlen: 24
                          156.244.2.0/24 maxlen: 24
                          156.244.3.0/24 maxlen: 24
                          156.244.4.0/24 maxlen: 24
                          156.244.5.0/24 maxlen: 24
                          156.244.6.0/24 maxlen: 24
                          156.244.7.0/24 maxlen: 24
                          156.244.8.0/24 maxlen: 24
                          156.244.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121393 (0x1da31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  3 06:50:38 2026 GMT
            Not After : Nov 10 06:50:38 2026 GMT
        Subject: CN=6ac0a5c2-84b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d1:f8:3c:fe:bc:d4:22:13:be:e1:e0:7d:2a:
                    58:ea:10:0b:40:08:5f:ca:2e:ca:20:10:33:85:49:
                    cb:56:76:b3:1a:18:dc:fa:28:94:bd:1e:aa:f5:37:
                    34:09:b4:4c:5e:69:ff:a7:f3:2f:ab:66:a5:30:a0:
                    7a:48:c9:cc:94:a4:f8:94:6a:6b:56:cd:ab:50:bd:
                    89:7f:ac:1d:2e:b8:b3:b0:1e:d6:7b:58:94:34:31:
                    52:a9:da:09:1e:9c:a0:3a:8c:ad:dc:38:ac:65:47:
                    0e:33:7f:72:fa:b6:e1:b6:fb:12:9a:d4:7f:aa:1e:
                    08:2b:7c:92:bf:2e:da:2a:0d:e0:cb:4c:61:42:b1:
                    36:24:06:5d:f5:8b:82:fd:da:bf:02:a5:8c:c3:98:
                    76:5d:e9:8a:d2:06:ae:3a:73:22:36:9a:73:25:bf:
                    71:99:dd:c5:09:05:ff:8e:7f:23:97:4d:83:11:53:
                    06:af:7d:c5:67:44:f1:4b:c7:b2:55:64:ef:b5:8e:
                    d6:3f:f2:3b:53:f4:8b:c7:f8:25:ba:55:8b:27:59:
                    55:bb:35:f9:9f:94:36:92:e7:c1:b0:b9:6e:e7:b3:
                    4e:11:81:bd:92:b5:6a:79:79:f3:cd:5f:f1:f2:b5:
                    e2:91:9b:b2:f8:12:ea:1c:c1:08:74:0e:b7:2f:3a:
                    a8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:16:A7:F0:00:1B:9F:EC:81:04:E2:41:AB:F8:80:FC:B2:01:DC:F1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFEED7A8BEF611F198931FE3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.0.0-156.244.8.255
                  156.244.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:f3:49:31:0b:ec:af:bc:6d:2b:0a:86:b3:fe:02:b4:d3:3b:
         da:e7:b8:a1:7d:f4:76:01:7a:e2:41:14:d2:5c:09:41:9b:f9:
         df:9d:fa:e9:f7:34:04:8b:7d:f2:9a:6e:50:7b:92:37:9c:3d:
         42:71:4d:94:12:14:d6:a0:8a:ab:28:27:c7:b0:32:59:58:2d:
         c8:32:ac:40:1b:55:29:36:e4:4d:42:ac:1b:ba:04:eb:45:44:
         dd:d2:30:0e:18:75:bf:fa:5c:58:2e:c4:b7:23:2b:94:e1:fe:
         2c:f5:95:12:65:fb:9b:cb:e0:b8:33:98:43:d5:f2:09:48:12:
         45:69:b3:f3:82:18:c2:d1:b0:ae:dd:05:53:89:2d:26:42:f1:
         b9:6a:87:ee:65:fc:6b:73:06:02:6d:d8:b9:d3:5f:1f:53:9f:
         6e:d4:62:5e:e6:b4:97:fb:39:53:5d:8b:5a:b6:a6:9b:c9:a7:
         5c:15:29:59:ed:2a:f6:b8:80:51:d5:07:bc:f2:f4:fd:3a:8e:
         0a:ce:ef:00:91:ed:1b:07:ae:f5:11:fd:43:0e:03:86:38:4a:
         c9:c0:e8:8b:01:b0:0a:4f:d7:2a:2f:25:46:4b:11:b5:ae:60:
         c6:45:25:ea:91:cd:e3:9a:59:38:21:84:87:95:23:31:0a:dd:
         12:92:8b:1e
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIDAdoxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDAzMDY1MDM4WhcNMjYxMTEwMDY1MDM4WjAYMRYw
FAYDVQQDEw02YWMwYTVjMi04NGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt9H4PP681CITvuHgfSpY6hALQAhfyi7KIBAzhUnLVnazGhjc+iiUvR6q
9Tc0CbRMXmn/p/Mvq2alMKB6SMnMlKT4lGprVs2rUL2Jf6wdLrizsB7We1iUNDFS
qdoJHpygOoyt3DisZUcOM39y+rbhtvsSmtR/qh4IK3ySvy7aKg3gy0xhQrE2JAZd
9YuC/dq/AqWMw5h2XemK0gauOnMiNppzJb9xmd3FCQX/jn8jl02DEVMGr33FZ0Tx
S8eyVWTvtY7WP/I7U/SLx/glulWLJ1lVuzX5n5Q2kufBsLlu57NOEYG9krVqeXnz
zV/x8rXikZuy+BLqHMEIdA63LzqoiQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFLEW
p/AAG5/sgQTiQav4gPyyAdzxMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CRkVFRDdBOEJFRjYxMUYxOTg5MzFGRTNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAATATMAsDAwKc9AMEAJz0CAMEAJz0KjAN
BgkqhkiG9w0BAQsFAAOCAQEAXvNJMQvsr7xtKwqGs/4CtNM72ue4oX30dgF64kEU
0lwJQZv535366fc0BIt98ppuUHuSN5w9QnFNlBIU1qCKqygnx7AyWVgtyDKsQBtV
KTbkTUKsG7oE60VE3dIwDhh1v/pcWC7EtyMrlOH+LPWVEmX7m8vguDOYQ9XyCUgS
RWmz84IYwtGwrt0FU4ktJkLxuWqH7mX8a3MGAm3YudNfH1OfbtRiXua0l/s5U12L
Wramm8mnXBUpWe0q9riAUdUHvPL0/TqOCs7vAJHtGweu9RH9Qw4DhjhKycDoiwGw
Ck/XKi8lRksRta5gxkUl6pHN45pZOCGEh5UjMQrdEpKLHg==
-----END CERTIFICATE-----