Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBF0E330C57B11F18A0C9DFBCE1D38B0.roa
File:                     CBF0E330C57B11F18A0C9DFBCE1D38B0.roa (raw, json)
Hash identifier:          kfAEeh0FnDFuMmHwu1bMSX5e0kGN6QnglSwnucedbWw=
Subject key identifier:   F6:0F:94:CE:E7:B7:B7:CA:B4:D0:7F:26:96:AA:DC:CF:4A:B9:2F:E0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DCD3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBF0E330C57B11F18A0C9DFBCE1D38B0.roa
Signing time:             Sun 11 Oct 2026 13:58:12 +0000
ROA not before:           Sun 11 Oct 2026 13:58:07 +0000
ROA not after:            Fri 20 Nov 2026 13:58:07 +0000
asID:                     214413
IP address blocks:        156.226.131.0/24 maxlen: 24
                          156.226.132.0/24 maxlen: 24
                          156.226.218.0/23 maxlen: 24
                          156.226.243.0/24 maxlen: 24
                          156.226.244.0/24 maxlen: 24
                          156.243.113.0/24 maxlen: 24
                          156.243.114.0/24 maxlen: 24
                          156.252.30.0/23 maxlen: 24
                          156.255.59.0/24 maxlen: 24
                          156.255.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122067 (0x1dcd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 11 13:58:07 2026 GMT
            Not After : Nov 20 13:58:07 2026 GMT
        Subject: CN=6acb95f4-39a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:36:70:05:cf:27:d7:3c:2a:01:3f:1e:24:8a:
                    b0:aa:a4:df:51:86:e2:d6:4c:37:ce:1f:7a:6a:aa:
                    97:e1:35:c9:d2:e6:b6:fd:32:6e:55:7a:06:80:5e:
                    0b:89:db:2c:3c:42:0f:75:c5:93:52:f4:64:0a:fa:
                    6b:a0:c3:9a:2f:d6:06:d7:a6:d6:12:72:63:b5:4c:
                    77:93:61:d3:ac:ca:58:79:fd:4c:c0:fb:7d:a5:09:
                    22:97:90:78:02:83:6c:98:97:26:b2:e2:f8:be:d7:
                    06:b8:e0:19:8e:0a:51:01:25:5e:f5:40:de:82:f7:
                    28:bc:c8:52:13:10:60:66:05:de:9d:6b:fa:67:1c:
                    92:e6:a3:1a:ab:4b:c1:72:9e:a5:2d:79:49:e3:e9:
                    b7:d3:66:b4:ad:31:4e:e6:9b:33:73:d8:8f:9b:45:
                    80:c5:5e:dd:ec:8e:ff:11:ed:16:53:97:fc:b4:a7:
                    95:39:14:8d:cc:30:4d:d2:c5:f9:fe:c5:f4:ee:5b:
                    bb:e5:10:ae:d7:c3:90:1a:69:04:6c:b5:e8:59:35:
                    ca:04:c4:72:94:b8:1d:fb:93:78:c2:85:e9:1c:39:
                    d0:e5:bb:1b:59:5c:0d:bf:98:ab:1e:e3:07:b8:f9:
                    13:57:73:85:a8:16:00:c5:4d:4e:de:d3:cd:d5:4e:
                    f4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0F:94:CE:E7:B7:B7:CA:B4:D0:7F:26:96:AA:DC:CF:4A:B9:2F:E0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBF0E330C57B11F18A0C9DFBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.131.0-156.226.132.255
                  156.226.218.0/23
                  156.226.243.0-156.226.244.255
                  156.243.113.0-156.243.114.255
                  156.252.30.0/23
                  156.255.59.0-156.255.60.255

    Signature Algorithm: sha256WithRSAEncryption
         53:8d:23:81:b8:ed:1b:9c:2e:3b:94:05:14:a7:6e:8c:71:24:
         93:de:e0:4a:38:48:dd:40:a9:5d:84:88:4d:a1:d6:e4:8e:b7:
         7c:89:b5:e0:61:ee:c2:fb:ed:68:2b:df:80:ff:1b:55:2e:ee:
         30:87:cf:90:fb:11:0d:5c:4c:76:5f:6a:33:ee:30:6e:97:c5:
         50:ac:1d:d2:6c:04:a9:b7:ea:6c:3a:30:37:48:f9:77:d5:44:
         76:4c:0d:54:d6:89:bc:47:18:6d:96:8a:ca:27:8c:68:bc:88:
         fd:73:8d:ae:35:9a:62:06:27:7d:e7:93:aa:48:18:53:3d:2a:
         c1:cb:82:57:5c:bc:c9:39:78:f6:7a:16:27:80:52:00:df:4c:
         ac:86:86:e0:53:e3:28:71:42:32:26:6b:38:1a:06:c8:fe:46:
         f1:d6:8c:fb:f8:50:38:6f:18:78:a2:66:8c:cd:5f:72:5f:b7:
         65:3f:62:36:a2:db:0e:f7:d3:0a:40:ea:ff:e9:72:5c:85:98:
         42:f4:99:b7:93:ca:9e:95:97:0e:e4:26:ad:46:89:f2:ae:b6:
         4e:36:cd:c3:74:82:32:50:c8:ad:77:e5:d1:e0:5b:4e:10:76:
         8a:82:c1:1f:d4:c4:99:ed:e7:20:34:54:d8:67:da:1f:72:3c:
         42:ba:36:18
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIDAdzTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDExMTM1ODA3WhcNMjYxMTIwMTM1ODA3WjAYMRYw
FAYDVQQDEw02YWNiOTVmNC0zOWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnzZwBc8n1zwqAT8eJIqwqqTfUYbi1kw3zh96aqqX4TXJ0ua2/TJuVXoG
gF4LidssPEIPdcWTUvRkCvproMOaL9YG16bWEnJjtUx3k2HTrMpYef1MwPt9pQki
l5B4AoNsmJcmsuL4vtcGuOAZjgpRASVe9UDegvcovMhSExBgZgXenWv6ZxyS5qMa
q0vBcp6lLXlJ4+m302a0rTFO5pszc9iPm0WAxV7d7I7/Ee0WU5f8tKeVORSNzDBN
0sX5/sX07lu75RCu18OQGmkEbLXoWTXKBMRylLgd+5N4woXpHDnQ5bsbWVwNv5ir
HuMHuPkTV3OFqBYAxU1O3tPN1U70HQIDAQABo4IC4DCCAtwwHQYDVR0OBBYEFPYP
lM7nt7fKtNB/Jpaq3M9KuS/gMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DQkYwRTMzMEM1N0IxMUYxOEEwQzlERkJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEMAwDBACc4oMDBACc4oQDBAGc4tow
DAMEAJzi8wMEAJzi9DAMAwQAnPNxAwQAnPNyAwQBnPweMAwDBACc/zsDBACc/zww
DQYJKoZIhvcNAQELBQADggEBAFONI4G47RucLjuUBRSnboxxJJPe4Eo4SN1AqV2E
iE2h1uSOt3yJteBh7sL77Wgr34D/G1Uu7jCHz5D7EQ1cTHZfajPuMG6XxVCsHdJs
BKm36mw6MDdI+XfVRHZMDVTWibxHGG2WisonjGi8iP1zja41mmIGJ33nk6pIGFM9
KsHLgldcvMk5ePZ6FieAUgDfTKyGhuBT4yhxQjImazgaBsj+RvHWjPv4UDhvGHii
ZozNX3Jft2U/Yjai2w730wpA6v/pclyFmEL0mbeTyp6Vlw7kJq1GifKutk42zcN0
gjJQyK135dHgW04QdoqCwR/UxJnt5yA0VNhn2h9yPEK6Nhg=
-----END CERTIFICATE-----