Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCABA646ABF811F1BFD742B7CE1D38B0.roa
File:                     FCABA646ABF811F1BFD742B7CE1D38B0.roa (raw, json)
Hash identifier:          O44i6fHmFZ70S2wOHbsno2JADvgu98kdm4IRMA7SD0A=
Subject key identifier:   61:02:13:34:52:54:70:BB:99:92:E8:B7:04:0A:62:CC:1F:E8:06:1E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D422
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCABA646ABF811F1BFD742B7CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 02:48:51 +0000
ROA not before:           Wed 09 Sep 2026 02:48:47 +0000
ROA not after:            Thu 17 Sep 2026 02:48:47 +0000
asID:                     17497
IP address blocks:        156.225.14.0/24 maxlen: 24
                          156.233.3.0/24 maxlen: 24
                          156.245.200.0/22 maxlen: 24
                          156.248.80.0/21 maxlen: 24
                          156.255.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 11 Sep 2026 00:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119842 (0x1d422)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  9 02:48:47 2026 GMT
            Not After : Sep 17 02:48:47 2026 GMT
        Subject: CN=6aa0c913-b974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2d:95:b4:97:de:06:d3:3a:48:f2:81:45:14:
                    19:eb:ea:e2:f1:88:45:0b:06:91:ab:98:fe:b9:f5:
                    37:70:cf:f5:e3:b7:3c:92:62:2f:18:c8:53:ed:34:
                    7c:95:ee:62:53:d1:fc:c3:bf:d5:6d:df:c7:ea:90:
                    2d:4e:58:c2:df:b4:e9:44:f1:8f:fa:bc:02:f6:b6:
                    91:e9:19:14:06:54:11:58:c1:4c:74:2c:8b:46:09:
                    dc:ad:d3:d4:f3:a0:bf:5d:19:c6:41:20:11:85:22:
                    13:f8:c3:ce:bf:c7:35:59:41:fc:e9:5c:d4:aa:8c:
                    48:b1:fc:83:7e:49:1a:36:52:a3:fb:ad:72:fd:d8:
                    f7:b7:ea:6c:93:74:a0:0f:0d:37:c6:44:bd:b6:fd:
                    d7:57:d0:bd:e9:79:1f:11:b9:c9:04:c3:bc:8b:26:
                    2e:84:be:8f:3b:ad:18:b9:05:2e:02:48:6d:9e:be:
                    9e:7b:e3:65:97:ff:2c:73:28:7b:36:b9:ba:9a:1e:
                    d6:ba:8f:74:53:7f:87:95:37:65:1e:21:9a:35:db:
                    93:e4:b7:ab:8b:17:c8:46:2f:ac:2f:0d:10:65:ff:
                    27:d6:eb:f7:9f:1c:c1:96:5e:ca:c8:57:50:69:6b:
                    0f:39:6e:b9:82:3c:71:f6:d1:1c:bb:93:39:a1:19:
                    ed:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:02:13:34:52:54:70:BB:99:92:E8:B7:04:0A:62:CC:1F:E8:06:1E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FCABA646ABF811F1BFD742B7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.14.0/24
                  156.233.3.0/24
                  156.245.200.0/22
                  156.248.80.0/21
                  156.255.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:ea:a9:fa:71:b0:4f:cb:11:87:c3:58:2c:9d:36:37:ae:27:
         1b:ba:31:b0:a8:6f:40:34:6e:92:5f:2a:e1:0e:72:cc:3a:9b:
         c6:33:48:00:da:d1:8b:6c:82:b5:0f:56:c7:4e:ce:70:42:5e:
         4e:c4:28:23:2b:5b:39:80:9e:e8:22:8a:61:89:94:d6:86:ab:
         c3:79:d9:6e:78:7b:11:7e:f9:ef:89:18:b5:52:20:fa:4a:2a:
         2b:bd:62:76:43:30:39:d5:92:22:57:e1:29:3f:74:6f:fb:ad:
         ea:b8:e3:a7:a0:15:ab:62:b5:9f:e1:8b:89:3a:63:d0:b1:e6:
         be:53:7d:0b:a9:90:f2:3f:26:f0:ec:79:0a:ed:0c:a2:ff:31:
         62:2a:5c:56:27:2a:fb:f5:8f:f0:0b:99:93:51:74:4e:08:1d:
         0a:2c:52:e0:a3:58:7b:2f:bd:e0:74:e1:50:be:70:c8:9e:6b:
         82:17:ab:ae:83:bb:30:35:07:cd:aa:d2:74:86:41:fd:c3:ac:
         7c:75:aa:9c:2c:1c:63:d7:70:dd:a7:93:15:a3:87:0e:c1:46:
         da:b3:e2:23:5d:b4:32:78:d2:93:17:bf:24:5c:60:c2:91:ce:
         ce:69:13:54:54:d7:86:fc:e5:db:a9:f5:99:34:74:1a:e3:58:
         b3:1f:61:c5
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgIDAdQiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTA5MDI0ODQ3WhcNMjYwOTE3MDI0ODQ3WjAYMRYw
FAYDVQQDEw02YWEwYzkxMy1iOTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyy2VtJfeBtM6SPKBRRQZ6+ri8YhFCwaRq5j+ufU3cM/147c8kmIvGMhT
7TR8le5iU9H8w7/Vbd/H6pAtTljC37TpRPGP+rwC9raR6RkUBlQRWMFMdCyLRgnc
rdPU86C/XRnGQSARhSIT+MPOv8c1WUH86VzUqoxIsfyDfkkaNlKj+61y/dj3t+ps
k3SgDw03xkS9tv3XV9C96XkfEbnJBMO8iyYuhL6PO60YuQUuAkhtnr6ee+Nll/8s
cyh7Nrm6mh7Wuo90U3+HlTdlHiGaNduT5LerixfIRi+sLw0QZf8n1uv3nxzBll7K
yFdQaWsPOW65gjxx9tEcu5M5oRntQwIDAQABo4ICujCCArYwHQYDVR0OBBYEFGEC
EzRSVHC7mZLotwQKYswf6AYeMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GQ0FCQTY0NkFCRjgxMUYxQkZENzQyQjdDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAnOEOAwQAnOkDAwQCnPXIAwQD
nPhQAwQEnP8QMA0GCSqGSIb3DQEBCwUAA4IBAQCI6qn6cbBPyxGHw1gsnTY3ricb
ujGwqG9ANG6SXyrhDnLMOpvGM0gA2tGLbIK1D1bHTs5wQl5OxCgjK1s5gJ7oIoph
iZTWhqvDedlueHsRfvnviRi1UiD6SiorvWJ2QzA51ZIiV+EpP3Rv+63quOOnoBWr
YrWf4YuJOmPQsea+U30LqZDyPybw7HkK7Qyi/zFiKlxWJyr79Y/wC5mTUXROCB0K
LFLgo1h7L73gdOFQvnDInmuCF6uug7swNQfNqtJ0hkH9w6x8daqcLBxj13Ddp5MV
o4cOwUbas+IjXbQyeNKTF78kXGDCkc7OaRNUVNeG/OXbqfWZNHQa41izH2HF
-----END CERTIFICATE-----