Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA7E227CC58A11F1A478DBDDCE1D38B0.roa
File:                     EA7E227CC58A11F1A478DBDDCE1D38B0.roa (raw, json)
Hash identifier:          /7ronnTIChE2LUpZRLB0lK9XvHCiH7xIO7VcTnF/kzs=
Subject key identifier:   F5:61:E3:DE:2F:BD:E9:85:4D:40:B7:A9:97:54:86:B5:6F:4C:44:63
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DCDD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA7E227CC58A11F1A478DBDDCE1D38B0.roa
Signing time:             Sun 11 Oct 2026 15:46:26 +0000
ROA not before:           Sun 11 Oct 2026 15:46:20 +0000
ROA not after:            Wed 18 Nov 2026 15:46:20 +0000
asID:                     22773
IP address blocks:        156.233.44.0/23 maxlen: 24
                          156.233.47.0/24 maxlen: 24
                          156.233.56.0/24 maxlen: 24
                          156.233.58.0/24 maxlen: 24
                          156.233.60.0/23 maxlen: 24
                          156.239.148.0/24 maxlen: 24
                          156.248.0.0/24 maxlen: 24
                          156.248.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122077 (0x1dcdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 11 15:46:20 2026 GMT
            Not After : Nov 18 15:46:20 2026 GMT
        Subject: CN=6acbaf52-47e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4d:cf:ce:39:e9:ce:24:ff:1d:83:4f:fd:c9:
                    73:05:16:b1:d9:08:00:96:5a:0c:14:f0:33:46:3b:
                    0d:2c:9b:63:58:ad:7a:40:b0:f3:8f:11:eb:5e:22:
                    9e:bb:14:19:fc:d8:e9:57:c8:3a:0a:f8:aa:48:a8:
                    6f:6c:ce:4a:bd:99:0c:90:37:75:3c:ba:8e:d4:d7:
                    37:82:7c:55:e6:6a:01:8f:1c:af:04:da:2d:5e:aa:
                    fc:67:c0:a4:7b:e1:2c:ff:2e:75:97:7f:11:f9:a2:
                    37:7d:b6:56:d9:fc:55:2d:ad:f5:30:bc:21:4f:f2:
                    5c:0b:34:7c:42:d9:ca:5b:00:b0:b7:71:26:bd:e7:
                    b2:ac:06:18:6e:31:cd:1a:6c:05:c0:22:a1:a6:28:
                    ce:c2:0e:97:5f:e0:02:41:be:db:4f:26:96:2a:0e:
                    8f:f5:72:d2:d1:36:c5:85:8c:f0:fa:bf:70:96:0f:
                    8e:4d:90:dc:7c:a9:22:bd:de:60:de:14:45:3d:bf:
                    0f:93:9a:1b:a5:07:2c:1b:35:3e:e8:2a:31:9b:ec:
                    61:f1:31:62:f4:c1:7e:15:1e:36:01:b5:44:a8:c8:
                    ee:8d:35:eb:15:ca:96:ae:7a:ac:f7:24:38:00:cc:
                    3c:4a:9f:58:e4:ab:da:44:b5:d1:95:e8:fb:fa:d2:
                    07:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:61:E3:DE:2F:BD:E9:85:4D:40:B7:A9:97:54:86:B5:6F:4C:44:63
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA7E227CC58A11F1A478DBDDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.44.0/23
                  156.233.47.0/24
                  156.233.56.0/24
                  156.233.58.0/24
                  156.233.60.0/23
                  156.239.148.0/24
                  156.248.0.0/24
                  156.248.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:63:be:94:aa:34:c3:10:54:c9:5a:24:a5:82:70:27:44:28:
         d3:01:40:ac:fb:ba:4d:23:36:3e:36:84:19:96:7d:ba:15:6c:
         7c:78:6f:99:e5:e8:78:ed:eb:a0:79:85:a1:ec:25:a8:72:83:
         2f:b1:42:86:b0:66:6e:cd:57:e8:75:69:78:af:59:7b:f0:06:
         77:c3:f7:4b:d8:cc:3c:02:ab:61:d1:13:55:19:46:47:5e:f4:
         02:7d:f3:3b:8e:d8:ef:88:d0:ac:d8:6a:3b:1c:6f:bf:67:75:
         38:2c:ec:ff:60:d5:e6:c4:9c:0b:55:28:78:72:81:f5:5d:68:
         0c:97:61:28:f3:1e:50:aa:e8:a9:a4:54:2f:93:2d:25:42:0b:
         37:b3:ab:ee:ac:60:90:d1:b0:d3:1c:9d:f8:f2:bb:ae:13:74:
         ee:78:eb:bd:ea:62:1a:25:05:67:53:9f:9b:4b:de:4a:79:a3:
         69:95:ac:27:81:67:9c:24:b7:7e:58:ec:d7:44:7d:06:5b:c8:
         b8:4a:74:17:b7:f2:e0:e0:74:09:f7:a0:74:a7:f5:c2:1c:47:
         db:5d:91:58:9f:c7:be:f3:db:3d:a3:91:a6:20:2f:e1:da:92:
         da:f7:2c:ae:05:31:7e:e8:0f:c7:9f:48:8c:4f:8c:a5:5a:f7:
         5d:25:73:0e
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIDAdzdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDExMTU0NjIwWhcNMjYxMTE4MTU0NjIwWjAYMRYw
FAYDVQQDEw02YWNiYWY1Mi00N2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvU3PzjnpziT/HYNP/clzBRax2QgAlloMFPAzRjsNLJtjWK16QLDzjxHr
XiKeuxQZ/NjpV8g6CviqSKhvbM5KvZkMkDd1PLqO1Nc3gnxV5moBjxyvBNotXqr8
Z8Cke+Es/y51l38R+aI3fbZW2fxVLa31MLwhT/JcCzR8QtnKWwCwt3EmveeyrAYY
bjHNGmwFwCKhpijOwg6XX+ACQb7bTyaWKg6P9XLS0TbFhYzw+r9wlg+OTZDcfKki
vd5g3hRFPb8Pk5obpQcsGzU+6Coxm+xh8TFi9MF+FR42AbVEqMjujTXrFcqWrnqs
9yQ4AMw8Sp9Y5KvaRLXRlej7+tIH9QIDAQABo4ICzDCCAsgwHQYDVR0OBBYEFPVh
494vvemFTUC3qZdUhrVvTERjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQTdFMjI3Q0M1OEExMUYxQTQ3OERCRERDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBnOksAwQAnOkvAwQAnOk4AwQA
nOk6AwQBnOk8AwQAnO+UAwQAnPgAAwQAnPgEMA0GCSqGSIb3DQEBCwUAA4IBAQBT
Y76UqjTDEFTJWiSlgnAnRCjTAUCs+7pNIzY+NoQZln26FWx8eG+Z5eh47eugeYWh
7CWocoMvsUKGsGZuzVfodWl4r1l78AZ3w/dL2Mw8Aqth0RNVGUZHXvQCffM7jtjv
iNCs2Go7HG+/Z3U4LOz/YNXmxJwLVSh4coH1XWgMl2Eo8x5QquippFQvky0lQgs3
s6vurGCQ0bDTHJ348ruuE3TueOu96mIaJQVnU5+bS95KeaNplawngWecJLd+WOzX
RH0GW8i4SnQXt/Lg4HQJ96B0p/XCHEfbXZFYn8e+89s9o5GmIC/h2pLa9yyuBTF+
6A/Hn0iMT4ylWvddJXMO
-----END CERTIFICATE-----