Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0AF7A789B0611F1A92683DCCE1D38B0.roa
File:                     F0AF7A789B0611F1A92683DCCE1D38B0.roa (raw, json)
Hash identifier:          m80XPi4444S7kkYl3xrnym2b7GTqjelHmhjgNf3bC7c=
Subject key identifier:   BD:43:95:ED:CB:F3:DB:58:C9:F5:E3:68:73:6B:51:1D:91:9B:8D:01
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CDD7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0AF7A789B0611F1A92683DCCE1D38B0.roa
Signing time:             Tue 18 Aug 2026 13:15:54 +0000
ROA not before:           Tue 18 Aug 2026 13:15:50 +0000
ROA not after:            Fri 25 Sep 2026 13:15:50 +0000
asID:                     271355
IP address blocks:        156.236.195.0/24 maxlen: 24
                          156.236.201.0/24 maxlen: 24
                          156.236.202.0/24 maxlen: 24
                          156.236.203.0/24 maxlen: 24
                          156.236.204.0/24 maxlen: 24
                          156.236.205.0/24 maxlen: 24
                          156.236.206.0/24 maxlen: 24
                          156.236.207.0/24 maxlen: 24
                          156.236.208.0/24 maxlen: 24
                          156.236.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118231 (0x1cdd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 18 13:15:50 2026 GMT
            Not After : Sep 25 13:15:50 2026 GMT
        Subject: CN=6a845b0a-f231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ad:17:05:55:6b:3f:b0:38:7d:30:66:10:76:
                    bb:8c:28:e0:61:f8:4f:6a:bf:d9:f7:3d:65:d9:54:
                    11:38:65:dc:c7:d9:96:81:1c:05:26:fc:13:85:37:
                    58:37:8f:cf:c8:53:59:13:5d:06:86:21:0f:90:d7:
                    2f:8d:c6:63:e6:77:e9:75:15:79:07:2b:1a:9b:80:
                    8d:b1:b1:97:e9:79:f6:b8:6c:e0:bb:f3:36:dc:f0:
                    1f:b0:ab:9f:98:3a:10:d1:3d:ba:2f:e4:eb:12:47:
                    27:81:53:33:08:94:29:61:61:f1:c7:44:0a:19:f6:
                    0f:9c:be:d1:92:7e:8a:f7:b0:5e:23:f2:22:00:35:
                    49:57:9d:13:c7:0f:b2:29:8b:50:3e:f5:c5:84:a8:
                    1a:bd:7c:fa:f4:47:9f:a3:a5:7b:b3:86:04:33:82:
                    de:14:dd:be:78:96:a1:2d:d1:b4:cc:61:97:60:ee:
                    56:fc:d9:61:25:f4:a2:26:64:88:45:b3:9a:41:09:
                    d9:ff:4c:09:95:3e:d0:37:3e:91:95:d9:7f:13:4c:
                    3f:1f:f3:a5:37:b8:3c:05:18:dc:59:87:36:c8:f5:
                    af:b9:a7:0a:0b:3f:6e:d3:dc:87:ed:03:51:44:40:
                    8f:9e:6b:21:a9:f6:3f:ee:d9:bc:d1:df:f2:69:d6:
                    d8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:43:95:ED:CB:F3:DB:58:C9:F5:E3:68:73:6B:51:1D:91:9B:8D:01
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0AF7A789B0611F1A92683DCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.195.0/24
                  156.236.201.0-156.236.209.255

    Signature Algorithm: sha256WithRSAEncryption
         15:8c:06:e3:ac:da:b5:48:4a:14:48:4f:1f:59:e2:bb:5e:c8:
         9a:24:c2:80:3e:29:0f:3f:1d:1c:bb:f5:39:8f:0e:57:06:a1:
         7b:02:0e:ea:ce:f6:c1:db:eb:bd:e7:e6:4c:4d:b8:3a:87:59:
         3e:dc:c1:cc:14:30:19:31:ed:07:06:69:0f:27:51:2e:77:43:
         53:22:55:35:a9:b2:48:3a:ee:6f:fc:67:1f:01:1a:18:5b:85:
         b9:cf:da:1d:3d:a4:98:15:f0:b7:75:ad:68:62:c2:2e:c9:a2:
         30:43:26:f3:d6:d6:42:e2:26:35:a7:a1:91:d2:19:3d:6a:3b:
         d3:09:e5:38:44:d9:a0:24:04:0b:ba:ee:45:9e:ee:bc:a7:3a:
         2d:2c:27:2f:8d:19:fe:05:61:56:f8:4b:5a:d9:b5:89:0d:01:
         c3:af:44:ab:b1:73:05:c8:2b:11:5a:77:83:74:96:56:36:68:
         75:0b:df:95:5a:d1:48:4f:0d:c7:98:bd:b7:d8:4d:d8:1b:65:
         ac:91:39:8c:f3:05:54:b6:1e:4f:e9:5e:86:ef:e8:06:d5:db:
         12:7a:69:4b:7f:33:82:be:6d:1e:19:a0:9b:ca:53:4c:3c:ea:
         75:6d:cb:e8:64:6c:8c:b1:99:f1:40:c5:ac:21:c2:4e:60:58:
         42:b4:31:7b
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAc3XMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODE4MTMxNTUwWhcNMjYwOTI1MTMxNTUwWjAYMRYw
FAYDVQQDEw02YTg0NWIwYS1mMjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnK0XBVVrP7A4fTBmEHa7jCjgYfhPar/Z9z1l2VQROGXcx9mWgRwFJvwT
hTdYN4/PyFNZE10GhiEPkNcvjcZj5nfpdRV5Bysam4CNsbGX6Xn2uGzgu/M23PAf
sKufmDoQ0T26L+TrEkcngVMzCJQpYWHxx0QKGfYPnL7Rkn6K97BeI/IiADVJV50T
xw+yKYtQPvXFhKgavXz69Eefo6V7s4YEM4LeFN2+eJahLdG0zGGXYO5W/NlhJfSi
JmSIRbOaQQnZ/0wJlT7QNz6Rldl/E0w/H/OlN7g8BRjcWYc2yPWvuacKCz9u09yH
7QNRRECPnmshqfY/7tm80d/yadbYwQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFL1D
le3L89tYyfXjaHNrUR2Rm40BMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMEFGN0E3ODlCMDYxMUYxQTkyNjgzRENDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAnOzDMAwDBACc7MkDBAGc7NAw
DQYJKoZIhvcNAQELBQADggEBABWMBuOs2rVIShRITx9Z4rteyJokwoA+KQ8/HRy7
9TmPDlcGoXsCDurO9sHb673n5kxNuDqHWT7cwcwUMBkx7QcGaQ8nUS53Q1MiVTWp
skg67m/8Zx8BGhhbhbnP2h09pJgV8Ld1rWhiwi7JojBDJvPW1kLiJjWnoZHSGT1q
O9MJ5ThE2aAkBAu67kWe7rynOi0sJy+NGf4FYVb4S1rZtYkNAcOvRKuxcwXIKxFa
d4N0llY2aHUL35Va0UhPDceYvbfYTdgbZayROYzzBVS2Hk/pXobv6AbV2xJ6aUt/
M4K+bR4ZoJvKU0w86nVty+hkbIyxmfFAxawhwk5gWEK0MXs=
-----END CERTIFICATE-----