Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F44DA5A4A2F611F1A08459B9CE1D38B0.roa
File:                     F44DA5A4A2F611F1A08459B9CE1D38B0.roa (raw, json)
Hash identifier:          9xRmSmm+xyyWfY+2YfTNNL1w1rIVPdvj3E1bEHD6X9U=
Subject key identifier:   F8:2C:40:56:9A:11:E4:8A:21:F8:2F:1B:99:91:79:C7:8E:42:B7:10
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D1A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F44DA5A4A2F611F1A08459B9CE1D38B0.roa
Signing time:             Fri 28 Aug 2026 15:41:37 +0000
ROA not before:           Fri 28 Aug 2026 15:41:32 +0000
ROA not after:            Mon 05 Oct 2026 15:41:32 +0000
asID:                     18013
IP address blocks:        156.234.0.0/24 maxlen: 24
                          156.234.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119201 (0x1d1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 28 15:41:32 2026 GMT
            Not After : Oct  5 15:41:32 2026 GMT
        Subject: CN=6a91ac31-fb78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1b:57:70:05:b8:2c:d4:5b:45:d7:86:4e:2d:
                    47:47:94:c2:fb:19:31:de:b7:95:5e:24:ba:c8:d3:
                    7e:65:13:ae:b6:9a:34:27:fe:2d:2f:79:d3:9b:55:
                    d9:e1:bf:8d:2a:a0:76:41:5c:b1:7a:12:c2:60:04:
                    eb:95:f0:32:f4:08:c5:bd:e8:71:f3:59:51:af:a2:
                    0a:46:49:3c:5d:4d:fd:d8:a7:28:55:52:ff:1a:9f:
                    cd:c9:02:73:cf:c3:78:0a:34:ab:24:1f:cd:4b:a3:
                    84:6d:ea:4c:1f:74:8f:59:26:43:f0:4d:b6:b1:28:
                    32:f6:e5:bf:36:7f:6e:cb:92:9d:08:b8:29:da:37:
                    e3:0c:5c:9f:93:03:0a:48:45:6f:be:7c:e4:59:44:
                    f7:e0:e4:52:c2:86:97:92:1c:d7:22:a5:e8:ad:18:
                    ed:8e:f5:c4:c7:dd:ec:f7:34:74:3c:2c:be:b7:cd:
                    bf:01:c2:c4:59:08:80:20:99:60:b2:5d:39:47:4e:
                    7e:6b:7f:36:4f:f4:8f:62:34:05:e0:4c:18:8e:d8:
                    ff:3c:37:58:88:3a:bb:32:35:5a:57:26:d7:53:61:
                    d6:2c:90:49:d1:fa:4f:b7:03:11:ab:be:95:68:99:
                    3f:61:54:e8:ff:d8:71:72:f7:5b:4b:26:d2:2f:55:
                    6c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2C:40:56:9A:11:E4:8A:21:F8:2F:1B:99:91:79:C7:8E:42:B7:10
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F44DA5A4A2F611F1A08459B9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.0.0/24
                  156.234.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:53:fc:e0:01:4e:a5:97:b4:71:28:52:85:7a:16:89:40:6c:
         ba:b8:b2:90:0f:ac:62:b6:f1:99:c8:ed:20:c0:89:11:1a:60:
         71:ee:85:c4:b1:23:12:f2:bd:32:f9:ba:18:2b:f6:a3:cc:54:
         9b:87:20:a3:2f:59:7e:05:f2:59:0b:96:29:a6:2a:cf:70:7f:
         0f:96:f9:42:23:3a:e0:c2:b6:0a:3e:8e:1b:85:8a:06:4f:bc:
         04:dd:a0:ba:1a:34:fa:3e:94:6a:ac:ef:c4:b4:ea:0d:7d:e6:
         37:28:24:a9:fd:f2:0e:3f:b8:77:ee:10:79:63:27:39:e9:da:
         88:9c:42:ee:f6:c9:70:4f:cc:37:58:d0:4f:0a:8a:79:22:d1:
         24:4c:c2:1f:be:8c:00:3c:66:12:43:be:23:3e:8d:da:fe:49:
         ba:8a:58:de:54:85:0c:62:c7:0e:be:31:a9:ea:a0:98:4e:76:
         b0:ca:63:4b:30:69:c8:44:6a:12:b6:e1:12:90:ec:77:43:30:
         35:81:4a:30:30:a0:4c:db:47:c3:df:35:14:22:f6:88:33:86:
         ec:e2:89:8c:22:cb:87:d8:37:54:18:6c:47:32:a1:e7:97:98:
         ff:c8:0c:42:13:ac:0f:fd:91:0f:d4:6c:b5:81:b5:c9:1e:cf:
         97:81:b5:6a
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAdGhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODI4MTU0MTMyWhcNMjYxMDA1MTU0MTMyWjAYMRYw
FAYDVQQDEw02YTkxYWMzMS1mYjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAthtXcAW4LNRbRdeGTi1HR5TC+xkx3reVXiS6yNN+ZROutpo0J/4tL3nT
m1XZ4b+NKqB2QVyxehLCYATrlfAy9AjFvehx81lRr6IKRkk8XU392KcoVVL/Gp/N
yQJzz8N4CjSrJB/NS6OEbepMH3SPWSZD8E22sSgy9uW/Nn9uy5KdCLgp2jfjDFyf
kwMKSEVvvnzkWUT34ORSwoaXkhzXIqXorRjtjvXEx93s9zR0PCy+t82/AcLEWQiA
IJlgsl05R05+a382T/SPYjQF4EwYjtj/PDdYiDq7MjVaVybXU2HWLJBJ0fpPtwMR
q76VaJk/YVTo/9hxcvdbSybSL1VsXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgs
QFaaEeSKIfgvG5mReceOQrcQMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GNDREQTVBNEEyRjYxMUYxQTA4NDU5QjlDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOoAAwQAnOoHMA0GCSqGSIb3
DQEBCwUAA4IBAQCqU/zgAU6ll7RxKFKFehaJQGy6uLKQD6xitvGZyO0gwIkRGmBx
7oXEsSMS8r0y+boYK/ajzFSbhyCjL1l+BfJZC5YppirPcH8PlvlCIzrgwrYKPo4b
hYoGT7wE3aC6GjT6PpRqrO/EtOoNfeY3KCSp/fIOP7h37hB5Yyc56dqInELu9slw
T8w3WNBPCop5ItEkTMIfvowAPGYSQ74jPo3a/km6iljeVIUMYscOvjGp6qCYTnaw
ymNLMGnIRGoStuESkOx3QzA1gUowMKBM20fD3zUUIvaIM4bs4omMIsuH2DdUGGxH
MqHnl5j/yAxCE6wP/ZEP1Gy1gbXJHs+XgbVq
-----END CERTIFICATE-----