Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B50162AB36A11F18F3CE5CFCE1D38B0.roa
File:                     3B50162AB36A11F18F3CE5CFCE1D38B0.roa (raw, json)
Hash identifier:          8+rTv1RHwLxe/WstjVr+njdTKlGkTWlfA2fIgYR/kOg=
Subject key identifier:   D9:4D:CC:3B:41:7E:88:ED:E7:C1:1A:B1:88:46:17:0E:F1:28:37:E3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D6E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B50162AB36A11F18F3CE5CFCE1D38B0.roa
Signing time:             Fri 18 Sep 2026 14:07:07 +0000
ROA not before:           Fri 18 Sep 2026 14:07:03 +0000
ROA not after:            Mon 26 Oct 2026 14:07:03 +0000
asID:                     401362
IP address blocks:        156.253.48.0/24 maxlen: 24
                          156.253.49.0/24 maxlen: 24
                          156.253.50.0/24 maxlen: 24
                          156.253.51.0/24 maxlen: 24
                          156.253.52.0/24 maxlen: 24
                          156.253.53.0/24 maxlen: 24
                          156.253.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 18:39:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120544 (0x1d6e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 18 14:07:03 2026 GMT
            Not After : Oct 26 14:07:03 2026 GMT
        Subject: CN=6aad458b-a1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9e:fb:62:f6:6a:df:5d:97:bb:3b:c9:6a:03:
                    bf:50:0a:db:0a:90:dd:2f:91:b4:0d:e6:8f:54:de:
                    4d:f4:07:ed:37:32:70:85:19:67:ca:6f:2e:d2:e2:
                    02:32:0b:90:86:b1:d4:db:83:8b:02:19:b2:7e:67:
                    0f:c9:8d:03:3c:f4:51:7a:11:b9:38:2e:8f:d6:fc:
                    b5:8d:31:a7:a6:2f:9e:ed:d1:57:55:28:c2:fa:a1:
                    28:9d:9c:14:ba:22:f6:7e:a7:00:37:06:f0:bd:86:
                    1f:3f:07:9c:b3:b0:85:14:e5:d7:92:14:60:c6:07:
                    c0:e8:99:ce:35:0a:e5:dd:be:36:d8:47:7c:bb:a7:
                    f6:42:11:02:fa:39:e2:ef:43:33:16:5d:3b:77:7e:
                    46:3d:33:11:6a:e4:bb:7a:c8:0c:78:f0:f7:f6:68:
                    06:35:b9:ff:ae:06:12:fb:ad:37:ba:5f:3d:d8:2c:
                    9d:23:c3:09:a6:a3:54:a2:ed:ff:ae:50:0e:cc:fa:
                    90:57:25:38:3d:42:35:ca:6f:0e:56:71:f9:aa:a4:
                    1f:05:07:15:e5:70:52:ae:c3:8b:5a:89:41:f2:37:
                    4d:7c:7b:e7:04:5b:ee:fe:a2:1a:9a:70:9d:0b:a3:
                    3e:ac:4f:e1:5b:3a:44:05:e1:f6:e4:bd:23:89:cc:
                    06:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4D:CC:3B:41:7E:88:ED:E7:C1:1A:B1:88:46:17:0E:F1:28:37:E3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3B50162AB36A11F18F3CE5CFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.253.48.0-156.253.54.255

    Signature Algorithm: sha256WithRSAEncryption
         0c:d4:8c:d1:f3:bd:ee:60:f4:af:6a:9e:aa:00:7f:71:03:23:
         59:8f:a6:ef:9d:9d:e3:ce:56:0a:ca:35:5d:04:03:cc:05:26:
         5a:89:61:5d:fe:1a:20:0c:a7:27:62:5c:87:41:73:12:62:13:
         02:19:f9:a2:44:b9:41:0a:6f:7c:fe:93:86:16:bd:97:db:f0:
         a4:26:b0:17:3c:ee:9d:e5:37:18:2d:89:b9:6d:04:6f:d4:27:
         c7:09:a1:9d:36:cd:b6:7d:60:7b:ca:1c:81:b3:3b:9a:c3:25:
         fa:b9:fa:bd:2d:86:24:a2:d2:c2:bb:fc:68:3f:b6:4f:13:6a:
         a8:38:c5:15:95:b7:49:66:d1:c6:7f:88:96:6c:3f:17:3b:3d:
         ad:c5:c2:70:87:10:8e:d4:f4:e1:b3:9a:15:d0:f1:e7:5f:d3:
         92:4f:8d:9c:e0:f7:ce:5e:7b:38:85:26:0b:c2:df:e5:a6:5d:
         c7:b4:a1:9c:d1:cf:56:4a:7c:57:ae:dd:3b:29:25:51:7b:28:
         5d:e7:fe:1b:d1:9b:99:0a:65:f2:8b:e8:68:3d:93:0c:bd:34:
         92:be:77:80:a6:fa:68:15:41:54:29:dc:25:97:e9:87:0b:c7:
         93:39:de:d7:06:a1:41:67:d5:27:14:a4:a2:15:31:56:45:2b:
         23:7e:7b:e5
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAdbgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTE4MTQwNzAzWhcNMjYxMDI2MTQwNzAzWjAYMRYw
FAYDVQQDEw02YWFkNDU4Yi1hMWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtp77YvZq312XuzvJagO/UArbCpDdL5G0DeaPVN5N9AftNzJwhRlnym8u
0uICMguQhrHU24OLAhmyfmcPyY0DPPRRehG5OC6P1vy1jTGnpi+e7dFXVSjC+qEo
nZwUuiL2fqcANwbwvYYfPwecs7CFFOXXkhRgxgfA6JnONQrl3b422Ed8u6f2QhEC
+jni70MzFl07d35GPTMRauS7esgMePD39mgGNbn/rgYS+603ul892CydI8MJpqNU
ou3/rlAOzPqQVyU4PUI1ym8OVnH5qqQfBQcV5XBSrsOLWolB8jdNfHvnBFvu/qIa
mnCdC6M+rE/hWzpEBeH25L0jicwGsQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFNlN
zDtBfojt58EasYhGFw7xKDfjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQjUwMTYyQUIzNkExMUYxOEYzQ0U1Q0ZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASc/TADBACc/TYwDQYJKoZI
hvcNAQELBQADggEBAAzUjNHzve5g9K9qnqoAf3EDI1mPpu+dnePOVgrKNV0EA8wF
JlqJYV3+GiAMpydiXIdBcxJiEwIZ+aJEuUEKb3z+k4YWvZfb8KQmsBc87p3lNxgt
ibltBG/UJ8cJoZ02zbZ9YHvKHIGzO5rDJfq5+r0thiSi0sK7/Gg/tk8Taqg4xRWV
t0lm0cZ/iJZsPxc7Pa3FwnCHEI7U9OGzmhXQ8edf05JPjZzg985eeziFJgvC3+Wm
Xce0oZzRz1ZKfFeu3TspJVF7KF3n/hvRm5kKZfKL6Gg9kwy9NJK+d4Cm+mgVQVQp
3CWX6YcLx5M53tcGoUFn1ScUpKIVMVZFKyN+e+U=
-----END CERTIFICATE-----