Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39E23A9EB17F11F198BC1CB2CE1D38B0.roa
File:                     39E23A9EB17F11F198BC1CB2CE1D38B0.roa (raw, json)
Hash identifier:          qSO7rPiUDtKtu/4VOa3mIAj7k2QAf3kxdxBhe53zqAE=
Subject key identifier:   B1:60:C3:BF:BE:F3:78:31:54:F1:F3:DA:31:23:9F:D5:19:3D:CF:90
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D67E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39E23A9EB17F11F198BC1CB2CE1D38B0.roa
Signing time:             Wed 16 Sep 2026 03:32:22 +0000
ROA not before:           Wed 16 Sep 2026 03:32:18 +0000
ROA not after:            Fri 23 Oct 2026 03:32:18 +0000
asID:                     152698
IP address blocks:        156.252.0.0/24 maxlen: 24
                          156.252.1.0/24 maxlen: 24
                          156.252.22.0/24 maxlen: 24
                          156.252.23.0/24 maxlen: 24
                          156.252.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120446 (0x1d67e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 16 03:32:18 2026 GMT
            Not After : Oct 23 03:32:18 2026 GMT
        Subject: CN=6aaa0dc6-003f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:28:40:36:d0:0c:0a:4f:32:4c:01:29:69:0d:
                    55:ab:32:b2:f9:ca:d3:a6:2a:6d:60:be:08:57:a9:
                    b8:d2:fa:2f:d9:e6:b3:34:47:ba:79:3f:9e:8c:85:
                    5c:b1:67:88:3f:93:d3:7f:86:c0:63:95:8e:25:00:
                    ef:0a:ad:af:0b:88:d4:bf:57:9e:50:81:cc:4d:8c:
                    07:d1:1d:f6:c5:37:77:7d:9f:13:76:f0:17:d5:74:
                    45:f6:52:08:d7:bc:04:16:61:de:7f:36:3a:d8:b4:
                    7e:3d:c2:f0:f8:a9:c0:fe:c0:8b:13:66:fe:9b:04:
                    da:14:59:ed:c2:be:e6:a3:cf:b5:a5:6f:3a:a3:f3:
                    6b:d7:34:34:b1:1f:dd:39:02:ec:70:7a:42:95:84:
                    85:b7:f1:cc:f9:ec:fb:93:64:17:3f:3f:23:ec:8d:
                    04:96:86:58:5f:37:ea:cf:29:9f:07:dc:06:af:2e:
                    db:1b:57:2b:67:ff:46:dd:1d:8f:14:e7:3a:64:d9:
                    c4:59:42:a3:ef:de:79:43:4f:06:99:72:fb:12:f7:
                    4c:5c:f7:fd:62:1a:3c:20:5d:ce:86:b4:4b:c7:25:
                    d4:db:26:24:95:2a:e3:a2:2a:77:fc:ac:a0:4b:20:
                    d8:57:28:a7:c4:b3:a8:bf:1e:cb:a9:45:a2:00:cd:
                    9a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:60:C3:BF:BE:F3:78:31:54:F1:F3:DA:31:23:9F:D5:19:3D:CF:90
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39E23A9EB17F11F198BC1CB2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.252.0.0/23
                  156.252.22.0/23
                  156.252.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:ea:31:9c:85:f8:f4:f3:7c:f6:2c:2b:7a:2c:73:6c:18:53:
         fb:1a:ff:55:e6:94:c6:72:d7:d7:0d:33:ef:26:7b:c0:b2:a3:
         5b:7a:a4:b5:b2:2d:a4:84:8d:d2:1f:12:8e:c5:a0:dd:73:18:
         bd:ff:bb:2b:8e:77:83:b9:80:9f:3b:92:54:ef:2c:c3:e3:04:
         43:5d:35:a9:56:75:20:08:2c:17:5b:31:af:6c:7a:0a:6f:d4:
         f3:7b:72:45:3a:d4:79:a1:ee:6a:40:ab:62:74:cf:9b:30:3a:
         59:79:f3:9a:43:13:e4:4b:58:f5:9d:25:c5:17:83:a4:6b:5d:
         a4:6f:ba:04:a9:08:6b:b4:0c:57:c4:b6:86:1c:7b:79:fa:fa:
         ea:a0:a6:f3:28:a9:d0:4f:89:ef:1e:ec:9a:49:19:ce:65:9e:
         b8:c1:4c:7b:c5:aa:5f:06:14:71:1d:91:11:79:f1:00:17:39:
         86:ee:34:3f:9b:30:e3:08:53:9a:10:34:8f:44:13:61:aa:32:
         58:8a:50:c1:36:f7:c5:31:b8:6f:2f:3e:60:d0:41:d8:7b:47:
         bb:bb:7b:02:da:eb:de:54:a7:21:b3:a4:0a:08:32:5d:88:b3:
         7e:5e:7c:72:41:4a:e0:90:b4:41:eb:cd:74:2f:d1:d0:ba:b0:
         d4:b8:53:ad
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAdZ+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTE2MDMzMjE4WhcNMjYxMDIzMDMzMjE4WjAYMRYw
FAYDVQQDEw02YWFhMGRjNi0wMDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3ihANtAMCk8yTAEpaQ1VqzKy+crTpiptYL4IV6m40vov2eazNEe6eT+e
jIVcsWeIP5PTf4bAY5WOJQDvCq2vC4jUv1eeUIHMTYwH0R32xTd3fZ8TdvAX1XRF
9lII17wEFmHefzY62LR+PcLw+KnA/sCLE2b+mwTaFFntwr7mo8+1pW86o/Nr1zQ0
sR/dOQLscHpClYSFt/HM+ez7k2QXPz8j7I0EloZYXzfqzymfB9wGry7bG1crZ/9G
3R2PFOc6ZNnEWUKj7955Q08GmXL7EvdMXPf9Yho8IF3OhrRLxyXU2yYklSrjoip3
/KygSyDYVyinxLOovx7LqUWiAM2aNwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFLFg
w7++83gxVPHz2jEjn9UZPc+QMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zOUUyM0E5RUIxN0YxMUYxOThCQzFDQjJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnPwAAwQBnPwWAwQAnPy5MA0G
CSqGSIb3DQEBCwUAA4IBAQBP6jGchfj083z2LCt6LHNsGFP7Gv9V5pTGctfXDTPv
JnvAsqNbeqS1si2khI3SHxKOxaDdcxi9/7srjneDuYCfO5JU7yzD4wRDXTWpVnUg
CCwXWzGvbHoKb9Tze3JFOtR5oe5qQKtidM+bMDpZefOaQxPkS1j1nSXFF4Oka12k
b7oEqQhrtAxXxLaGHHt5+vrqoKbzKKnQT4nvHuyaSRnOZZ64wUx7xapfBhRxHZER
efEAFzmG7jQ/mzDjCFOaEDSPRBNhqjJYilDBNvfFMbhvLz5g0EHYe0e7u3sC2uve
VKchs6QKCDJdiLN+XnxyQUrgkLRB6810L9HQurDUuFOt
-----END CERTIFICATE-----