Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D6D617CB4BE11F18F5C4CB2CE1D38B0.roa
File:                     0D6D617CB4BE11F18F5C4CB2CE1D38B0.roa (raw, json)
Hash identifier:          qzICaEgYZawjru4k5rVUMN3gqXItupGVLBiDkP4hYPs=
Subject key identifier:   BB:5B:87:61:A0:56:6F:31:1E:F8:C6:17:91:A9:96:2C:B7:D9:AC:07
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D700
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D6D617CB4BE11F18F5C4CB2CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 06:39:39 +0000
ROA not before:           Sun 20 Sep 2026 06:39:35 +0000
ROA not after:            Tue 20 Oct 2026 06:39:35 +0000
asID:                     400619
IP address blocks:        156.239.24.0/21 maxlen: 24
                          156.254.16.0/24 maxlen: 24
                          156.254.17.0/24 maxlen: 24
                          156.254.18.0/24 maxlen: 24
                          156.254.19.0/24 maxlen: 24
                          156.254.20.0/24 maxlen: 24
                          156.254.21.0/24 maxlen: 24
                          156.254.22.0/24 maxlen: 24
                          156.254.23.0/24 maxlen: 24
                          156.254.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120576 (0x1d700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 20 06:39:35 2026 GMT
            Not After : Oct 20 06:39:35 2026 GMT
        Subject: CN=6aaf7fab-1ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:56:23:7a:49:73:eb:9f:7f:72:ec:b5:e9:f6:
                    54:54:b3:c3:5c:83:48:13:ec:f8:5e:0b:ef:a1:59:
                    2e:76:71:05:d7:36:5e:78:4b:69:e6:53:a5:dd:ec:
                    dd:30:23:62:04:cc:19:15:b5:52:f7:00:48:48:60:
                    c7:ca:78:8c:fb:d2:d7:81:bd:1e:b8:0c:c2:40:62:
                    68:b7:30:ce:7e:f1:e8:1f:bf:af:93:d4:f4:b7:3d:
                    30:e8:a9:0e:65:0c:03:fd:ff:40:9a:25:89:a7:af:
                    9d:b2:ee:a8:d8:d9:39:7d:a7:ea:68:40:5a:69:a0:
                    d6:79:41:52:82:0f:dc:12:e7:33:4d:f5:52:4f:e6:
                    3b:22:72:b5:a3:78:8b:a5:2a:5d:a7:0b:a7:cd:18:
                    6c:0f:0d:60:8f:70:33:3d:f0:9f:7e:a1:7d:79:bc:
                    8f:5e:4d:ed:3d:2b:70:94:c9:b4:e1:6e:a7:1a:6d:
                    19:a7:b3:07:91:42:10:e6:1e:52:5f:1c:40:5e:46:
                    a6:17:a6:06:fc:5a:49:40:23:d4:21:8e:df:f9:c1:
                    35:2c:94:da:f0:07:f3:82:a4:a0:ae:f3:1a:d6:40:
                    db:86:df:dc:98:a8:e8:d0:30:bb:78:5b:af:78:24:
                    ea:63:24:b4:2b:8e:fb:02:af:5a:76:21:cf:6a:ef:
                    80:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5B:87:61:A0:56:6F:31:1E:F8:C6:17:91:A9:96:2C:B7:D9:AC:07
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D6D617CB4BE11F18F5C4CB2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.24.0/21
                  156.254.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:15:53:5c:ae:6e:84:c4:04:83:d4:88:d4:33:0b:93:05:13:
         d6:07:98:8f:f1:df:16:33:7d:ef:ee:46:d6:33:a9:a0:a7:d0:
         68:90:af:df:b9:34:55:fb:d5:29:46:cc:35:89:82:82:0e:51:
         e0:89:59:90:9f:99:ef:3f:3d:b4:d1:c2:ab:80:9c:c4:8e:10:
         bb:bc:73:f5:d4:1d:9f:cb:9e:03:e3:d3:93:ad:4d:be:41:10:
         7f:e2:e5:e4:f1:c7:ce:29:e1:f9:4f:df:f8:80:8f:a1:70:f6:
         34:86:3c:13:d4:f2:be:7c:7b:3d:6f:0e:af:b9:f8:23:b8:25:
         f6:fd:8f:fd:3d:57:89:9c:2a:e3:82:e8:dc:62:a8:10:7f:7b:
         b0:2a:0e:06:64:f0:27:7e:9c:db:c9:88:de:25:8e:3b:89:06:
         7c:cf:38:d1:10:57:02:de:ab:78:bf:2e:3d:d4:76:13:38:bf:
         61:78:13:a8:7b:e8:37:88:40:db:52:51:62:13:d4:48:e3:fa:
         18:ed:db:5a:72:0e:d4:80:39:0d:7f:a0:d8:2a:80:f1:78:2e:
         27:22:ee:76:a5:a0:a4:85:14:4c:44:a3:15:96:16:55:f9:8a:
         88:7e:54:56:78:c9:aa:9f:ff:4b:8c:a5:00:61:1c:f4:c8:3b:
         f5:82:bf:ec
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAdcAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTIwMDYzOTM1WhcNMjYxMDIwMDYzOTM1WjAYMRYw
FAYDVQQDEw02YWFmN2ZhYi0xYWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxFYjeklz659/cuy16fZUVLPDXINIE+z4XgvvoVkudnEF1zZeeEtp5lOl
3ezdMCNiBMwZFbVS9wBISGDHyniM+9LXgb0euAzCQGJotzDOfvHoH7+vk9T0tz0w
6KkOZQwD/f9AmiWJp6+dsu6o2Nk5fafqaEBaaaDWeUFSgg/cEuczTfVST+Y7InK1
o3iLpSpdpwunzRhsDw1gj3AzPfCffqF9ebyPXk3tPStwlMm04W6nGm0Zp7MHkUIQ
5h5SXxxAXkamF6YG/FpJQCPUIY7f+cE1LJTa8AfzgqSgrvMa1kDbht/cmKjo0DC7
eFuveCTqYyS0K477Aq9adiHPau+ACwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtb
h2GgVm8xHvjGF5Gpliy32awHMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wRDZENjE3Q0I0QkUxMUYxOEY1QzRDQjJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDnO8YAwQEnP4QMA0GCSqGSIb3
DQEBCwUAA4IBAQAfFVNcrm6ExASD1IjUMwuTBRPWB5iP8d8WM33v7kbWM6mgp9Bo
kK/fuTRV+9UpRsw1iYKCDlHgiVmQn5nvPz200cKrgJzEjhC7vHP11B2fy54D49OT
rU2+QRB/4uXk8cfOKeH5T9/4gI+hcPY0hjwT1PK+fHs9bw6vufgjuCX2/Y/9PVeJ
nCrjgujcYqgQf3uwKg4GZPAnfpzbyYjeJY47iQZ8zzjREFcC3qt4vy491HYTOL9h
eBOoe+g3iEDbUlFiE9RI4/oY7dtacg7UgDkNf6DYKoDxeC4nIu52paCkhRRMRKMV
lhZV+YqIflRWeMmqn/9LjKUAYRz0yDv1gr/s
-----END CERTIFICATE-----