Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E46BB2E6BB0D11F1841998DFCE1D38B0.roa
File:                     E46BB2E6BB0D11F1841998DFCE1D38B0.roa (raw, json)
Hash identifier:          0k6WpWdvIc0RL04DWY5lGYFe8GcKiN1/P3AnmlW9o74=
Subject key identifier:   B9:6A:C2:40:50:19:23:C7:C3:1A:96:EC:6A:9D:B4:BC:FA:86:B9:68
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D940
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E46BB2E6BB0D11F1841998DFCE1D38B0.roa
Signing time:             Mon 28 Sep 2026 07:26:17 +0000
ROA not before:           Mon 28 Sep 2026 07:26:13 +0000
ROA not after:            Wed 04 Nov 2026 07:26:13 +0000
asID:                     133731
IP address blocks:        156.234.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121152 (0x1d940)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 28 07:26:13 2026 GMT
            Not After : Nov  4 07:26:13 2026 GMT
        Subject: CN=6aba1699-f6f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:90:f3:a6:30:ce:80:54:60:8b:f0:c9:78:e3:
                    a9:6a:cb:7d:47:77:0c:33:7e:47:e2:f5:3b:db:0c:
                    75:cf:48:ef:3a:ac:01:ab:14:4f:78:42:06:8f:a8:
                    dd:e2:bc:f1:cd:32:97:ed:ac:c3:87:85:25:61:dd:
                    fb:0c:e8:b1:96:85:ad:5b:b6:af:c3:4a:5d:c5:f5:
                    6d:75:2d:d6:79:0c:ce:72:dc:cc:a2:91:3c:b9:cb:
                    2b:d3:e5:54:43:59:2b:ba:f5:5d:26:5c:40:53:34:
                    1e:2b:69:b0:89:f7:89:7a:e6:6d:f0:fa:0c:d2:a4:
                    01:56:d5:55:88:44:d4:70:54:22:35:5f:cb:4b:39:
                    fb:1d:f8:d0:40:90:c8:b1:9f:27:ec:74:98:58:14:
                    0a:de:8a:ea:2b:d1:74:55:b9:95:f4:34:fc:78:6f:
                    0c:da:91:4f:32:65:12:f3:81:c2:6e:0e:d4:05:8d:
                    61:82:6f:0c:be:0b:b1:a4:4e:36:af:2a:63:22:8b:
                    82:6d:3a:c8:49:cc:ba:0f:0f:5a:69:2d:5f:91:7a:
                    80:9c:d0:73:9c:81:b5:a3:a4:0d:24:36:85:5a:9a:
                    13:06:c7:14:12:15:c1:28:bd:54:3f:07:17:5c:cc:
                    cf:42:1d:69:3d:0f:51:89:fb:59:0b:15:02:2e:32:
                    99:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6A:C2:40:50:19:23:C7:C3:1A:96:EC:6A:9D:B4:BC:FA:86:B9:68
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E46BB2E6BB0D11F1841998DFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:45:d7:fa:db:0a:94:31:34:12:27:fa:68:64:9b:a0:9d:4f:
         9b:35:1a:cd:8a:68:d5:26:46:4c:67:56:51:90:8d:de:0f:4c:
         53:c0:3e:d7:43:3e:18:7e:98:ac:f8:d2:bc:97:9b:28:0b:7a:
         6b:35:a3:1d:84:53:d7:d2:fc:31:a3:4a:9d:5a:8a:72:41:5c:
         05:e9:05:54:7e:8f:c3:eb:35:e3:a7:52:7a:a5:90:37:9d:6a:
         68:97:86:56:4e:af:cf:d6:de:ed:31:a0:84:8b:85:4f:c7:e9:
         a5:3f:d5:13:9d:bf:65:7e:0a:ae:24:a0:0e:c7:15:47:53:44:
         b1:6e:b9:f7:50:6f:eb:41:36:92:2b:f4:e8:e0:22:2c:f8:c8:
         85:94:39:36:bc:27:ad:84:54:65:6e:5a:3b:65:d7:cf:1c:9e:
         a5:f8:b5:fc:ca:11:63:80:fc:1b:34:ae:f6:e2:94:ad:87:19:
         b1:f9:25:35:51:6f:ae:68:14:bc:52:61:12:7e:aa:ee:2e:be:
         15:87:e6:b5:00:af:88:d5:24:b2:9c:ff:77:d9:a2:d8:4a:71:
         6f:5f:4c:c2:2e:ca:1d:48:74:46:89:c1:c4:90:b4:30:5a:11:
         80:c3:b9:3e:30:6f:bc:73:e5:1c:fd:3b:43:91:f1:67:c8:1a:
         ce:81:37:b6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdlAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTI4MDcyNjEzWhcNMjYxMTA0MDcyNjEzWjAYMRYw
FAYDVQQDEw02YWJhMTY5OS1mNmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA35DzpjDOgFRgi/DJeOOpast9R3cMM35H4vU72wx1z0jvOqwBqxRPeEIG
j6jd4rzxzTKX7azDh4UlYd37DOixloWtW7avw0pdxfVtdS3WeQzOctzMopE8ucsr
0+VUQ1kruvVdJlxAUzQeK2mwifeJeuZt8PoM0qQBVtVViETUcFQiNV/LSzn7HfjQ
QJDIsZ8n7HSYWBQK3orqK9F0VbmV9DT8eG8M2pFPMmUS84HCbg7UBY1hgm8Mvgux
pE42rypjIouCbTrIScy6Dw9aaS1fkXqAnNBznIG1o6QNJDaFWpoTBscUEhXBKL1U
PwcXXMzPQh1pPQ9RiftZCxUCLjKZXQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLlq
wkBQGSPHwxqW7GqdtLz6hrloMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FNDZCQjJFNkJCMEQxMUYxODQxOTk4REZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOoAMA0GCSqGSIb3DQEBCwUA
A4IBAQADRdf62wqUMTQSJ/poZJugnU+bNRrNimjVJkZMZ1ZRkI3eD0xTwD7XQz4Y
fpis+NK8l5soC3prNaMdhFPX0vwxo0qdWopyQVwF6QVUfo/D6zXjp1J6pZA3nWpo
l4ZWTq/P1t7tMaCEi4VPx+mlP9UTnb9lfgquJKAOxxVHU0Sxbrn3UG/rQTaSK/To
4CIs+MiFlDk2vCethFRlblo7ZdfPHJ6l+LX8yhFjgPwbNK724pSthxmx+SU1UW+u
aBS8UmESfqruLr4Vh+a1AK+I1SSynP932aLYSnFvX0zCLsodSHRGicHEkLQwWhGA
w7k+MG+8c+Uc/TtDkfFnyBrOgTe2
-----END CERTIFICATE-----