Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9AFDD8EBE3611F1AFB2C6FDCE1D38B0.roa
File:                     C9AFDD8EBE3611F1AFB2C6FDCE1D38B0.roa (raw, json)
Hash identifier:          qGSBVJVMjPB2MnK8ADiJxSAQubWzAApwTG67bH5cpjQ=
Subject key identifier:   4B:FA:7A:36:41:DB:24:06:C3:76:78:F2:92:BF:49:07:5F:F4:94:23
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA08
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9AFDD8EBE3611F1AFB2C6FDCE1D38B0.roa
Signing time:             Fri 02 Oct 2026 07:56:35 +0000
ROA not before:           Fri 02 Oct 2026 07:56:31 +0000
ROA not after:            Mon 09 Nov 2026 07:56:31 +0000
asID:                     401650
IP address blocks:        156.252.98.0/24 maxlen: 24
                          156.252.99.0/24 maxlen: 24
                          156.252.100.0/24 maxlen: 24
                          156.252.101.0/24 maxlen: 24
                          156.252.102.0/24 maxlen: 24
                          156.252.120.0/24 maxlen: 24
                          156.252.121.0/24 maxlen: 24
                          156.252.122.0/24 maxlen: 24
                          156.252.123.0/24 maxlen: 24
                          156.252.124.0/24 maxlen: 24
                          156.252.125.0/24 maxlen: 24
                          156.252.126.0/24 maxlen: 24
                          156.252.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121352 (0x1da08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  2 07:56:31 2026 GMT
            Not After : Nov  9 07:56:31 2026 GMT
        Subject: CN=6abf63b3-d098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a0:0e:65:26:8b:18:69:36:0d:37:1d:37:45:
                    1a:b0:58:54:4d:fd:a7:57:82:90:9d:cf:de:97:f7:
                    98:8c:0b:e2:f4:8e:45:9f:6f:57:2b:88:ae:df:f8:
                    2c:9a:2c:38:13:83:5f:3d:33:0a:63:57:db:67:a9:
                    21:c7:ed:fe:a9:aa:17:19:d2:4f:64:62:42:87:50:
                    51:c6:05:67:7a:d1:08:8c:1f:49:b7:0b:c8:79:11:
                    f4:91:86:01:cf:cc:8d:25:3e:12:04:0a:64:83:e6:
                    be:11:38:ce:af:02:6e:d4:a4:99:3c:37:f1:30:9d:
                    0f:7c:45:43:2a:e0:e5:ee:ca:d8:a0:ec:7d:28:a8:
                    6f:d5:11:11:53:a0:0b:81:6c:eb:07:64:44:db:e2:
                    81:90:9e:03:11:b5:9c:b9:3b:e3:c0:55:eb:42:c6:
                    ea:35:a1:22:fa:d7:59:30:99:35:d3:47:39:e4:6b:
                    2d:e0:82:d8:c4:eb:6c:27:9c:64:e0:56:e6:5d:ab:
                    af:8a:89:d5:95:c7:b5:b2:97:b3:18:3e:f5:9e:46:
                    72:a7:a7:4c:b9:7c:76:75:aa:ea:b8:56:62:2f:7a:
                    d7:bf:59:1d:2e:ff:e5:43:ef:57:22:09:d0:7e:09:
                    7e:1f:24:d8:60:c4:2c:87:64:30:e6:72:0b:fe:3b:
                    28:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:FA:7A:36:41:DB:24:06:C3:76:78:F2:92:BF:49:07:5F:F4:94:23
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9AFDD8EBE3611F1AFB2C6FDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.252.98.0-156.252.102.255
                  156.252.120.0-156.252.126.255
                  156.252.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:65:39:31:de:29:90:bc:ef:ca:91:9b:12:d9:3b:43:b7:a8:
         e0:a5:f4:e3:47:b6:06:9b:8f:df:bf:08:fe:3a:fc:e6:2b:78:
         a2:86:7b:a1:0b:ec:73:87:8a:2f:7f:d9:a7:20:38:2b:46:ff:
         ca:bf:c6:68:f1:17:1a:86:1a:52:f6:7f:fc:cb:fb:8b:65:f2:
         86:69:48:a7:a2:7e:00:a3:8a:86:6a:ea:18:f4:cc:65:04:be:
         53:75:2c:80:05:7c:2f:04:ef:84:d4:b9:e0:a4:ee:18:08:2b:
         b3:ca:40:ee:1e:d8:b1:ab:7a:45:f8:f8:38:e6:74:fa:87:d0:
         de:ef:4d:c4:36:58:38:6a:cb:c8:2b:a4:bf:57:13:1e:2a:7e:
         bf:fe:d3:9f:3e:ae:ad:21:2d:f3:0a:dc:6d:cc:3a:71:75:6d:
         ea:27:6b:21:dd:ea:f5:96:3b:46:63:a1:81:4c:e6:f8:7d:85:
         95:ec:c7:78:f1:b4:80:5b:59:42:19:ac:46:64:d4:61:0b:6f:
         4a:48:77:b1:4d:9a:05:bd:a0:a2:d7:e6:43:11:fa:d9:d5:5d:
         98:c4:6c:61:5b:af:8a:5a:e7:19:b7:50:3b:85:d4:7e:f7:d4:
         de:11:30:c9:34:7a:16:9c:0b:bf:df:87:5b:1e:6a:02:f5:cd:
         3b:07:8c:55
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIDAdoIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDAyMDc1NjMxWhcNMjYxMTA5MDc1NjMxWjAYMRYw
FAYDVQQDEw02YWJmNjNiMy1kMDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtqAOZSaLGGk2DTcdN0UasFhUTf2nV4KQnc/el/eYjAvi9I5Fn29XK4iu
3/gsmiw4E4NfPTMKY1fbZ6khx+3+qaoXGdJPZGJCh1BRxgVnetEIjB9JtwvIeRH0
kYYBz8yNJT4SBApkg+a+ETjOrwJu1KSZPDfxMJ0PfEVDKuDl7srYoOx9KKhv1RER
U6ALgWzrB2RE2+KBkJ4DEbWcuTvjwFXrQsbqNaEi+tdZMJk100c55Gst4ILYxOts
J5xk4FbmXauvionVlce1spezGD71nkZyp6dMuXx2darquFZiL3rXv1kdLv/lQ+9X
IgnQfgl+HyTYYMQsh2Qw5nIL/jso4QIDAQABo4ICvjCCArowHQYDVR0OBBYEFEv6
ejZB2yQGw3Z48pK/SQdf9JQjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DOUFGREQ4RUJFMzYxMUYxQUZCMkM2RkRDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAGc/GIDBACc/GYwDAMEA5z8
eAMEAJz8fgMEAJz8rzANBgkqhkiG9w0BAQsFAAOCAQEAS2U5Md4pkLzvypGbEtk7
Q7eo4KX040e2BpuP378I/jr85it4ooZ7oQvsc4eKL3/ZpyA4K0b/yr/GaPEXGoYa
UvZ//Mv7i2XyhmlIp6J+AKOKhmrqGPTMZQS+U3UsgAV8LwTvhNS54KTuGAgrs8pA
7h7Ysat6Rfj4OOZ0+ofQ3u9NxDZYOGrLyCukv1cTHip+v/7Tnz6urSEt8wrcbcw6
cXVt6idrId3q9ZY7RmOhgUzm+H2FlezHePG0gFtZQhmsRmTUYQtvSkh3sU2aBb2g
otfmQxH62dVdmMRsYVuvilrnGbdQO4XUfvfU3hEwyTR6FpwLv9+HWx5qAvXNOweM
VQ==
-----END CERTIFICATE-----