Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6674DEE8AB6911F187B775DBCE1D38B0.roa
File:                     6674DEE8AB6911F187B775DBCE1D38B0.roa (raw, json)
Hash identifier:          i35Hfovg2X5DJO0mF+Qgd9l0EtSaqpCrRVooLP+JBN0=
Subject key identifier:   38:DD:02:F1:7A:F4:A5:2C:78:9F:3B:6F:A9:67:0C:2F:37:A7:6F:A2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D3E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6674DEE8AB6911F187B775DBCE1D38B0.roa
Signing time:             Tue 08 Sep 2026 09:41:01 +0000
ROA not before:           Tue 08 Sep 2026 09:40:57 +0000
ROA not after:            Wed 04 Nov 2026 09:40:57 +0000
asID:                     395793
IP address blocks:        156.243.241.0/24 maxlen: 24
                          156.243.245.0/24 maxlen: 24
                          156.243.250.0/24 maxlen: 24
                          156.243.251.0/24 maxlen: 24
                          156.243.252.0/24 maxlen: 24
                          156.243.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119783 (0x1d3e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  8 09:40:57 2026 GMT
            Not After : Nov  4 09:40:57 2026 GMT
        Subject: CN=6a9fd82d-ab84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:40:f1:c8:bf:0d:79:2a:10:66:f6:31:d7:52:
                    e5:0c:b9:0d:f0:25:83:78:97:df:23:1e:c1:52:b8:
                    56:f3:21:c1:76:6f:a8:29:94:bd:89:d7:20:7e:1e:
                    f4:8c:f1:b9:d2:de:a0:61:1b:1b:12:9d:84:ff:93:
                    35:ce:11:d7:17:a9:cf:b7:e8:43:ab:82:cc:c0:2d:
                    6b:67:84:38:87:7a:33:8e:f7:8c:57:8c:33:44:97:
                    18:a9:fb:1c:9f:47:85:51:e4:75:b8:0e:0c:35:0a:
                    1c:ea:2b:4b:8e:2f:eb:78:c4:87:89:6a:5f:73:0a:
                    87:6a:55:5d:0b:75:e8:8f:8d:cc:95:ca:65:7c:fa:
                    99:09:06:48:b3:b8:1f:54:0d:28:de:e1:05:dc:df:
                    48:9f:15:53:4f:c4:67:95:7f:07:d8:39:01:87:33:
                    c4:cd:7d:fa:ab:df:c4:f4:8b:05:8d:bc:91:3d:46:
                    0a:9c:67:79:ae:70:d2:df:b1:c9:7e:f9:11:a9:2e:
                    f6:ae:7e:8e:24:3d:b5:9b:87:8b:33:14:01:6c:0b:
                    9d:a7:10:c4:c0:e1:dd:b8:72:40:d6:e8:5e:6f:09:
                    3d:0e:c8:52:af:d0:34:a8:d6:ae:62:99:ab:5f:b5:
                    58:83:52:17:25:48:3a:2c:2f:4f:ff:45:d3:02:8b:
                    cd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DD:02:F1:7A:F4:A5:2C:78:9F:3B:6F:A9:67:0C:2F:37:A7:6F:A2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6674DEE8AB6911F187B775DBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.243.241.0/24
                  156.243.245.0/24
                  156.243.250.0-156.243.253.255

    Signature Algorithm: sha256WithRSAEncryption
         86:00:36:e6:e9:b9:a4:fe:f2:72:a4:9c:cc:d2:5b:56:25:81:
         64:fe:e2:22:b0:0e:ff:92:ad:f6:63:85:b9:61:4f:05:69:0b:
         7a:09:6b:04:5f:fa:bf:b3:e3:a1:ae:a6:ec:f7:77:29:34:04:
         66:1b:37:e3:7e:d7:6a:15:c0:6b:91:49:7b:8e:c7:53:3e:2d:
         0d:b9:5e:cc:c5:72:50:10:9d:b5:84:7e:a6:72:b4:97:17:79:
         78:8a:39:39:64:3e:39:3d:4d:4a:48:f0:d5:02:42:12:47:da:
         4c:15:be:30:75:70:2a:ff:be:2c:b2:49:68:2b:4f:5e:74:3b:
         c0:69:e7:61:75:40:1a:6d:8c:bd:2f:19:5e:6e:bc:35:74:08:
         be:ad:43:4b:73:cc:4f:0b:f8:8f:6d:ad:b8:28:58:db:6f:9d:
         5c:30:4c:d6:f4:84:7f:5e:79:97:16:94:cd:e5:6b:58:45:87:
         a2:f9:b3:27:ec:38:17:05:4d:73:50:5f:89:01:53:e7:61:94:
         83:5f:d0:72:2e:6d:38:f2:7f:76:8a:fd:ec:59:fa:fe:32:5e:
         c2:e0:dd:80:a5:32:e2:32:8a:d6:66:d6:1a:4f:4f:95:83:99:
         1a:4c:71:fc:99:1d:d9:d7:a8:a5:0f:d4:88:e3:6a:1b:f1:f4:
         21:d8:73:17
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIDAdPnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTA4MDk0MDU3WhcNMjYxMTA0MDk0MDU3WjAYMRYw
FAYDVQQDEw02YTlmZDgyZC1hYjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq0DxyL8NeSoQZvYx11LlDLkN8CWDeJffIx7BUrhW8yHBdm+oKZS9idcg
fh70jPG50t6gYRsbEp2E/5M1zhHXF6nPt+hDq4LMwC1rZ4Q4h3ozjveMV4wzRJcY
qfscn0eFUeR1uA4MNQoc6itLji/reMSHiWpfcwqHalVdC3Xoj43MlcplfPqZCQZI
s7gfVA0o3uEF3N9InxVTT8RnlX8H2DkBhzPEzX36q9/E9IsFjbyRPUYKnGd5rnDS
37HJfvkRqS72rn6OJD21m4eLMxQBbAudpxDEwOHduHJA1uhebwk9DshSr9A0qNau
YpmrX7VYg1IXJUg6LC9P/0XTAovN+wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFDjd
AvF69KUseJ87b6lnDC83p2+iMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82Njc0REVFOEFCNjkxMUYxODdCNzc1REJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAnPPxAwQAnPP1MAwDBAGc8/oD
BAGc8/wwDQYJKoZIhvcNAQELBQADggEBAIYANubpuaT+8nKknMzSW1YlgWT+4iKw
Dv+SrfZjhblhTwVpC3oJawRf+r+z46Gupuz3dyk0BGYbN+N+12oVwGuRSXuOx1M+
LQ25XszFclAQnbWEfqZytJcXeXiKOTlkPjk9TUpI8NUCQhJH2kwVvjB1cCr/viyy
SWgrT150O8Bp52F1QBptjL0vGV5uvDV0CL6tQ0tzzE8L+I9trbgoWNtvnVwwTNb0
hH9eeZcWlM3la1hFh6L5syfsOBcFTXNQX4kBU+dhlINf0HIubTjyf3aK/exZ+v4y
XsLg3YClMuIyitZm1hpPT5WDmRpMcfyZHdnXqKUP1Ijjahvx9CHYcxc=
-----END CERTIFICATE-----