Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCA4A6769B9611F1964B5ECBCE1D38B0.roa
File:                     DCA4A6769B9611F1964B5ECBCE1D38B0.roa (raw, json)
Hash identifier:          GEsCiOMslMWmRPG2kUNBYfQcIlSGl8lTATNWSvQUhBQ=
Subject key identifier:   A2:17:0F:00:ED:83:E5:89:06:6E:DE:B4:B5:4D:E1:E6:A9:B5:AA:CA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE00
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCA4A6769B9611F1964B5ECBCE1D38B0.roa
Signing time:             Wed 19 Aug 2026 06:26:08 +0000
ROA not before:           Wed 19 Aug 2026 06:26:04 +0000
ROA not after:            Mon 14 Sep 2026 06:26:04 +0000
asID:                     269070
IP address blocks:        156.249.64.0/24 maxlen: 24
                          156.249.65.0/24 maxlen: 24
                          156.249.66.0/24 maxlen: 24
                          156.249.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118272 (0x1ce00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 19 06:26:04 2026 GMT
            Not After : Sep 14 06:26:04 2026 GMT
        Subject: CN=6a854c80-a0b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:23:e9:48:e2:a5:9a:7a:54:6f:20:e6:13:75:
                    bc:ab:3c:7c:ef:86:f6:4d:09:55:78:fd:17:7d:9f:
                    dc:7e:70:65:03:ba:9a:3a:7f:aa:18:9d:23:20:2e:
                    7a:ae:39:5f:1a:48:c8:59:d1:0b:28:73:5a:c4:91:
                    8a:a8:5a:7f:2f:2d:b3:00:56:4e:79:d6:39:82:fa:
                    47:d8:68:c9:7c:ec:26:94:45:c4:84:7c:45:66:50:
                    4f:df:cc:31:51:58:4a:4b:5d:e0:59:22:ab:c2:73:
                    d7:52:68:d0:90:31:64:1a:72:79:03:38:ab:07:b9:
                    fd:bf:e3:03:81:23:92:44:bb:93:74:83:aa:60:39:
                    b9:4c:97:68:8e:f9:b4:d1:a6:5a:06:f1:b2:14:9a:
                    d9:be:48:26:00:8a:9b:5f:2d:74:c8:a8:07:f5:3a:
                    a0:30:ba:d0:50:b6:41:f1:87:a8:b5:b7:37:b7:e6:
                    15:5e:29:31:7d:fc:cd:67:dc:be:bd:53:6f:79:ef:
                    44:95:85:dd:47:8a:25:f8:48:76:8e:35:cd:aa:60:
                    e0:b7:3c:fe:87:d4:72:40:96:43:01:62:2c:4f:42:
                    b4:44:88:4b:de:33:72:67:82:68:56:19:69:27:8c:
                    43:ef:4f:63:ad:7d:36:7f:fc:54:ad:fc:c5:72:cc:
                    7c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:17:0F:00:ED:83:E5:89:06:6E:DE:B4:B5:4D:E1:E6:A9:B5:AA:CA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCA4A6769B9611F1964B5ECBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.249.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:ed:9f:ae:b1:7c:cc:02:aa:e6:ce:82:3a:29:35:98:96:dd:
         c3:72:60:66:f6:48:bb:d2:0d:dc:4e:a2:b5:53:22:a4:9b:c1:
         b3:b2:62:94:5d:a4:ae:0a:7e:8b:19:02:e5:25:9c:b7:5d:86:
         6c:b5:14:bd:33:eb:03:4b:8a:ed:27:ca:16:b7:92:2d:19:c7:
         9e:f8:06:8a:22:d5:0d:dc:ec:64:d9:a2:db:fa:ca:4d:53:cb:
         ec:73:89:e9:12:b4:5c:4b:49:bf:9f:33:11:6a:65:9a:04:74:
         e9:72:58:df:90:9c:d4:28:ed:c5:45:04:d2:52:52:27:a6:9f:
         fe:b9:aa:26:0c:35:52:37:9d:5a:5e:d3:c2:e7:bd:f2:b5:70:
         f6:15:f1:65:b3:c4:db:10:d8:ce:e4:06:2e:40:76:91:58:c0:
         19:67:93:26:c8:a4:7f:e6:0d:33:4d:a7:59:82:01:5b:ef:78:
         db:c3:a0:e8:9f:55:96:6d:b1:bc:f9:b1:b1:91:40:c5:1f:41:
         ad:20:ce:74:fc:80:14:9a:8f:4d:e8:6d:89:94:18:c6:fe:bb:
         2a:3e:fe:50:d5:d8:09:bd:79:4e:06:75:f0:ab:5a:e1:e3:c6:
         95:31:9a:1c:fa:0c:c8:ac:55:a9:d5:09:4e:91:e6:21:d5:77:
         de:e4:33:ab
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAc4AMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODE5MDYyNjA0WhcNMjYwOTE0MDYyNjA0WjAYMRYw
FAYDVQQDEw02YTg1NGM4MC1hMGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwSPpSOKlmnpUbyDmE3W8qzx874b2TQlVeP0XfZ/cfnBlA7qaOn+qGJ0j
IC56rjlfGkjIWdELKHNaxJGKqFp/Ly2zAFZOedY5gvpH2GjJfOwmlEXEhHxFZlBP
38wxUVhKS13gWSKrwnPXUmjQkDFkGnJ5AzirB7n9v+MDgSOSRLuTdIOqYDm5TJdo
jvm00aZaBvGyFJrZvkgmAIqbXy10yKgH9TqgMLrQULZB8Yeotbc3t+YVXikxffzN
Z9y+vVNvee9ElYXdR4ol+Eh2jjXNqmDgtzz+h9RyQJZDAWIsT0K0RIhL3jNyZ4Jo
VhlpJ4xD709jrX02f/xUrfzFcsx8aQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKIX
DwDtg+WJBm7etLVN4eaptarKMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQ0E0QTY3NjlCOTYxMUYxOTY0QjVFQ0JDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPlAMA0GCSqGSIb3DQEBCwUA
A4IBAQBw7Z+usXzMAqrmzoI6KTWYlt3DcmBm9ki70g3cTqK1UyKkm8GzsmKUXaSu
Cn6LGQLlJZy3XYZstRS9M+sDS4rtJ8oWt5ItGcee+AaKItUN3Oxk2aLb+spNU8vs
c4npErRcS0m/nzMRamWaBHTpcljfkJzUKO3FRQTSUlInpp/+uaomDDVSN51aXtPC
573ytXD2FfFls8TbENjO5AYuQHaRWMAZZ5MmyKR/5g0zTadZggFb73jbw6Don1WW
bbG8+bGxkUDFH0GtIM50/IAUmo9N6G2JlBjG/rsqPv5Q1dgJvXlOBnXwq1rh48aV
MZoc+gzIrFWp1QlOkeYh1Xfe5DOr
-----END CERTIFICATE-----