Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/145FE18EACFE11F19A55E3EFCE1D38B0.roa
File:                     145FE18EACFE11F19A55E3EFCE1D38B0.roa (raw, json)
Hash identifier:          BoM44wcQNT3JsRDy4qxxHAt2eNWNvy7fpYha2yvJyA4=
Subject key identifier:   18:1B:6A:1B:77:FD:9B:81:52:5C:D0:09:55:B0:39:23:E6:9F:EF:E1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D4BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/145FE18EACFE11F19A55E3EFCE1D38B0.roa
Signing time:             Thu 10 Sep 2026 09:57:49 +0000
ROA not before:           Thu 10 Sep 2026 09:57:45 +0000
ROA not after:            Sat 17 Oct 2026 09:57:45 +0000
asID:                     22773
IP address blocks:        156.233.243.0/24 maxlen: 24
                          156.233.244.0/24 maxlen: 24
                          156.233.245.0/24 maxlen: 24
                          156.233.246.0/24 maxlen: 24
                          156.233.247.0/24 maxlen: 24
                          156.233.248.0/24 maxlen: 24
                          156.233.249.0/24 maxlen: 24
                          156.233.250.0/24 maxlen: 24
                          156.233.251.0/24 maxlen: 24
                          156.238.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119999 (0x1d4bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 10 09:57:45 2026 GMT
            Not After : Oct 17 09:57:45 2026 GMT
        Subject: CN=6aa27f1d-fb5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6f:dd:02:5f:9e:3a:f8:d8:64:74:de:83:cd:
                    e3:1f:93:2b:fb:a6:8f:f0:0d:f0:4b:a0:72:b8:ef:
                    cd:ce:82:3a:a4:63:72:84:be:31:c4:71:8e:1f:00:
                    49:f8:82:04:24:cf:1c:d9:32:a9:3a:bd:6b:8d:20:
                    4a:bd:ea:8a:95:a1:fa:92:9d:35:e0:cb:eb:5e:00:
                    5a:49:92:5a:8f:da:5f:a1:23:6d:2b:39:bd:1c:ac:
                    43:15:3c:e2:ff:07:15:db:b1:85:0b:63:71:ea:89:
                    de:ad:3c:f0:2c:39:90:b3:55:72:b3:cf:2e:bb:54:
                    89:e4:84:5f:2c:f3:8f:ab:af:cc:d3:52:08:33:00:
                    69:fa:94:3b:bf:4f:87:44:6c:9b:96:c9:6d:40:32:
                    9b:41:c8:54:1e:ad:ea:e3:44:b3:f9:4e:b4:e0:a2:
                    9b:72:e5:f3:b4:22:07:bc:71:9f:0f:25:bc:a9:6c:
                    b4:58:4b:82:fa:2d:59:b5:8e:6f:3f:fc:85:e6:df:
                    51:03:5e:ed:81:e4:de:2f:92:f3:c2:f4:e3:3a:04:
                    bd:4a:a8:52:39:65:96:f8:e0:c6:cf:af:ad:c4:57:
                    41:db:5a:97:7c:8f:23:60:e2:e5:b8:45:3b:62:95:
                    4a:7a:48:08:2d:49:e0:6e:74:63:71:92:35:c1:d2:
                    2f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:1B:6A:1B:77:FD:9B:81:52:5C:D0:09:55:B0:39:23:E6:9F:EF:E1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/145FE18EACFE11F19A55E3EFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.243.0-156.233.251.255
                  156.238.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:9f:17:d7:90:1d:54:ad:f2:fa:76:83:5f:9e:bc:6e:1f:28:
         3a:4c:ec:9d:51:d6:95:8b:2b:7b:9e:9d:45:7c:4c:5c:63:54:
         8a:e7:a2:74:83:78:f1:ff:7a:6f:f1:89:d7:a6:41:10:03:21:
         c7:75:d8:fa:53:1a:f1:10:ac:34:34:45:a7:7e:bf:f0:d9:cb:
         3f:94:75:3a:4c:c1:af:f4:67:51:31:dd:48:ed:33:53:4d:f1:
         54:58:9c:95:01:5a:77:f8:e8:d9:92:90:e4:b9:e9:91:62:4f:
         92:fd:8a:f9:51:46:ec:bc:b5:6a:e8:61:c4:15:c5:14:cc:6e:
         eb:81:0d:c8:4e:bd:45:e6:d2:12:0f:aa:d1:65:3e:e4:da:da:
         40:4b:27:89:53:ea:db:a9:20:6c:7d:95:fe:84:ed:23:c6:50:
         f1:b2:17:04:f3:7e:74:12:77:f1:96:14:61:b5:d0:97:51:fd:
         70:ee:5b:a4:f6:f0:10:a3:6e:82:56:7c:7d:ff:11:43:de:ad:
         4c:f1:c6:b1:aa:a9:a8:3d:4e:2d:9d:03:f0:65:65:0e:42:f1:
         a7:e6:1a:c2:59:f6:a2:25:f0:c3:8b:b8:fc:36:24:79:c2:5e:
         a9:56:4a:39:b1:98:5c:b0:fb:d1:43:55:1c:44:80:62:28:6f:
         63:79:10:9a
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAdS/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTEwMDk1NzQ1WhcNMjYxMDE3MDk1NzQ1WjAYMRYw
FAYDVQQDEw02YWEyN2YxZC1mYjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu2/dAl+eOvjYZHTeg83jH5Mr+6aP8A3wS6ByuO/NzoI6pGNyhL4xxHGO
HwBJ+IIEJM8c2TKpOr1rjSBKveqKlaH6kp014MvrXgBaSZJaj9pfoSNtKzm9HKxD
FTzi/wcV27GFC2Nx6onerTzwLDmQs1Vys88uu1SJ5IRfLPOPq6/M01IIMwBp+pQ7
v0+HRGyblsltQDKbQchUHq3q40Sz+U604KKbcuXztCIHvHGfDyW8qWy0WEuC+i1Z
tY5vP/yF5t9RA17tgeTeL5LzwvTjOgS9SqhSOWWW+ODGz6+txFdB21qXfI8jYOLl
uEU7YpVKekgILUngbnRjcZI1wdIvVQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFBgb
aht3/ZuBUlzQCVWwOSPmn+/hMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNDVGRTE4RUFDRkUxMUYxOUE1NUUzRUZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACc6fMDBAKc6fgDBACc7qEw
DQYJKoZIhvcNAQELBQADggEBAKifF9eQHVSt8vp2g1+evG4fKDpM7J1R1pWLK3ue
nUV8TFxjVIrnonSDePH/em/xidemQRADIcd12PpTGvEQrDQ0Rad+v/DZyz+UdTpM
wa/0Z1Ex3UjtM1NN8VRYnJUBWnf46NmSkOS56ZFiT5L9ivlRRuy8tWroYcQVxRTM
buuBDchOvUXm0hIPqtFlPuTa2kBLJ4lT6tupIGx9lf6E7SPGUPGyFwTzfnQSd/GW
FGG10JdR/XDuW6T28BCjboJWfH3/EUPerUzxxrGqqag9Ti2dA/BlZQ5C8afmGsJZ
9qIl8MOLuPw2JHnCXqlWSjmxmFyw+9FDVRxEgGIob2N5EJo=
-----END CERTIFICATE-----