Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA8D7314A2E711F1A5BCD4DECE1D38B0.roa
File:                     EA8D7314A2E711F1A5BCD4DECE1D38B0.roa (raw, json)
Hash identifier:          +ofIbKO4pRHhGHiL017zLdnE1af4GYp6EGBSBTwqiA0=
Subject key identifier:   1D:2D:13:B1:2E:A2:30:7D:70:9E:5D:FA:C0:BE:F9:E3:77:F4:3C:A0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D199
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA8D7314A2E711F1A5BCD4DECE1D38B0.roa
Signing time:             Fri 28 Aug 2026 13:53:58 +0000
ROA not before:           Fri 28 Aug 2026 13:53:54 +0000
ROA not after:            Mon 05 Oct 2026 13:53:54 +0000
asID:                     136800
IP address blocks:        156.234.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119193 (0x1d199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 28 13:53:54 2026 GMT
            Not After : Oct  5 13:53:54 2026 GMT
        Subject: CN=6a9192f6-6f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:95:f9:f6:d2:86:45:34:fc:40:fb:61:24:c1:
                    f2:97:99:9d:93:89:4b:fd:0b:b5:9e:2b:8a:aa:7e:
                    88:9e:18:be:31:9a:b7:1d:0e:f3:82:3f:1b:e5:3f:
                    8d:7b:7f:76:b2:e4:d1:bd:90:4c:ea:ce:06:de:1b:
                    f3:aa:0e:5e:ab:b4:7d:5e:30:11:c9:a2:41:8a:c3:
                    02:b2:af:9a:e7:5a:df:3c:76:b5:cd:53:d0:25:14:
                    9e:3f:6b:83:70:b2:49:4d:bb:26:98:90:ca:b6:d6:
                    44:27:bd:d8:3f:8b:4d:b2:78:a3:3d:71:94:77:c2:
                    4b:18:c2:5f:84:03:32:cb:69:9d:ba:38:09:bb:4b:
                    9f:ad:1a:69:f9:67:be:4f:fa:ef:34:70:6e:da:e6:
                    32:75:79:90:e3:c1:66:1a:1b:b8:f1:41:3b:50:aa:
                    3b:a8:94:a4:8c:df:17:59:cd:5c:6b:0e:12:3f:9c:
                    84:f5:ef:b2:00:c3:60:08:8e:93:d8:4f:37:cc:a2:
                    da:40:4d:4e:bb:b0:8b:25:1a:99:ef:c6:39:4d:c7:
                    a7:8d:4c:3d:35:db:41:ed:34:64:05:93:19:8f:0c:
                    31:56:16:98:21:b0:b0:50:5f:5e:08:6e:bc:05:fd:
                    bf:1a:56:a8:22:f2:89:7b:78:91:81:a0:21:50:e6:
                    74:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2D:13:B1:2E:A2:30:7D:70:9E:5D:FA:C0:BE:F9:E3:77:F4:3C:A0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA8D7314A2E711F1A5BCD4DECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:95:6f:a7:33:28:9f:05:a7:f4:b8:ce:c0:bd:53:5e:fd:f9:
         bb:d3:97:a5:ea:ca:de:8e:c1:76:c6:73:4c:e2:d8:d5:7d:ba:
         23:67:b7:c0:ae:cf:3b:14:71:df:fe:b7:60:8e:ea:c2:3a:2d:
         4e:59:1f:c5:ea:63:27:25:a8:e8:92:28:8a:02:09:76:e0:f7:
         df:32:29:60:26:b4:12:4f:3e:ba:22:9a:35:06:f5:45:c0:ae:
         3e:06:d4:64:20:2a:6c:1d:be:0d:0b:89:0b:44:e9:4c:d2:60:
         20:7a:61:e2:30:83:a7:32:85:31:c8:b0:a3:7c:ea:b1:fb:df:
         5d:57:44:99:61:35:67:7d:63:31:e5:b0:ac:e6:44:4b:9d:a2:
         76:0d:62:8c:d9:f6:c7:50:68:bb:ec:12:0c:1c:be:aa:a5:b9:
         18:4b:f2:59:ae:24:c9:08:82:a1:de:51:1a:7a:11:db:de:fb:
         5e:b5:ea:48:44:4c:df:56:ab:6b:b4:ae:94:03:a6:f3:74:d3:
         63:78:4f:96:1f:c4:e0:1c:15:6b:c9:2f:92:4a:f8:51:b8:ec:
         63:b2:23:88:7a:38:ba:6a:0c:ef:27:f9:c0:34:36:ce:35:35:
         af:f4:74:09:9e:7c:b6:a2:17:c6:c7:21:f5:08:c0:ff:fb:f3:
         0c:de:80:86
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdGZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODI4MTM1MzU0WhcNMjYxMDA1MTM1MzU0WjAYMRYw
FAYDVQQDEw02YTkxOTJmNi02ZjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA25X59tKGRTT8QPthJMHyl5mdk4lL/Qu1niuKqn6Inhi+MZq3HQ7zgj8b
5T+Ne392suTRvZBM6s4G3hvzqg5eq7R9XjARyaJBisMCsq+a51rfPHa1zVPQJRSe
P2uDcLJJTbsmmJDKttZEJ73YP4tNsnijPXGUd8JLGMJfhAMyy2mdujgJu0ufrRpp
+We+T/rvNHBu2uYydXmQ48FmGhu48UE7UKo7qJSkjN8XWc1caw4SP5yE9e+yAMNg
CI6T2E83zKLaQE1Ou7CLJRqZ78Y5TcenjUw9NdtB7TRkBZMZjwwxVhaYIbCwUF9e
CG68Bf2/GlaoIvKJe3iRgaAhUOZ0ewIDAQABo4ICojCCAp4wHQYDVR0OBBYEFB0t
E7EuojB9cJ5d+sC++eN39DygMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQThENzMxNEEyRTcxMUYxQTVCQ0Q0REVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOpNMA0GCSqGSIb3DQEBCwUA
A4IBAQCKlW+nMyifBaf0uM7AvVNe/fm705el6srejsF2xnNM4tjVfbojZ7fArs87
FHHf/rdgjurCOi1OWR/F6mMnJajokiiKAgl24PffMilgJrQSTz66Ipo1BvVFwK4+
BtRkICpsHb4NC4kLROlM0mAgemHiMIOnMoUxyLCjfOqx+99dV0SZYTVnfWMx5bCs
5kRLnaJ2DWKM2fbHUGi77BIMHL6qpbkYS/JZriTJCIKh3lEaehHb3vtetepIREzf
VqtrtK6UA6bzdNNjeE+WH8TgHBVryS+SSvhRuOxjsiOIeji6agzvJ/nANDbONTWv
9HQJnny2ohfGxyH1CMD/+/MM3oCG
-----END CERTIFICATE-----