Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DE5E984AE9711F1B75F8AA0CE1D38B0.roa
File:                     6DE5E984AE9711F1B75F8AA0CE1D38B0.roa (raw, json)
Hash identifier:          GKQGPjsTvp+PaWXiuk6JBUW1WiTR4uVTk0bOfeFdIu8=
Subject key identifier:   F6:9C:61:89:8F:14:0D:41:59:97:76:E9:D9:AE:D0:DE:27:EA:2E:69
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D5A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DE5E984AE9711F1B75F8AA0CE1D38B0.roa
Signing time:             Sat 12 Sep 2026 10:48:03 +0000
ROA not before:           Sat 12 Sep 2026 10:47:59 +0000
ROA not after:            Tue 22 Sep 2026 10:47:59 +0000
asID:                     6079
IP address blocks:        156.229.172.0/24 maxlen: 24
                          156.233.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120226 (0x1d5a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 12 10:47:59 2026 GMT
            Not After : Sep 22 10:47:59 2026 GMT
        Subject: CN=6aa52de3-ecba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ce:0b:ea:86:c0:41:1c:cc:3a:9d:e4:4c:c9:
                    16:c0:87:32:aa:fc:3b:08:6f:90:a3:59:cb:4a:15:
                    ea:32:bd:3b:b7:89:29:92:19:50:52:21:cd:e6:22:
                    1e:09:dd:e3:49:66:9f:6e:6a:14:b9:29:04:2b:f8:
                    be:ea:01:f1:e5:dd:aa:40:97:88:b3:12:b5:59:7d:
                    6e:26:60:eb:c9:e4:7d:09:25:1d:11:49:ff:08:6c:
                    50:19:e3:89:4c:80:e7:f8:f1:c6:49:e1:b9:d7:76:
                    88:b5:88:c0:ad:ff:73:bc:a9:12:27:bf:72:86:9e:
                    72:0c:90:ad:14:be:57:a9:8e:e6:29:ea:68:e0:88:
                    21:0f:7f:73:e6:ef:91:8a:a3:98:d9:b5:de:ff:ff:
                    d8:b9:40:c1:b9:ff:9b:62:37:28:b1:66:a5:38:c0:
                    e6:bd:94:56:81:ad:71:b5:f9:e0:04:f8:b9:4b:a6:
                    23:3d:54:9f:95:5a:d3:ff:dd:7c:cd:3c:52:35:3c:
                    33:e6:b5:35:a2:3a:de:a5:16:7b:2c:2c:4b:d1:38:
                    57:f4:a0:27:9a:c5:cd:63:ae:b8:7b:5e:24:c6:68:
                    6c:96:65:f3:22:13:b3:77:ef:40:bc:42:a7:61:ce:
                    2f:8a:9e:b7:3e:32:f6:5b:e1:07:14:44:b9:48:3c:
                    75:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:9C:61:89:8F:14:0D:41:59:97:76:E9:D9:AE:D0:DE:27:EA:2E:69
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6DE5E984AE9711F1B75F8AA0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.172.0/24
                  156.233.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:a0:6c:da:23:42:d0:17:a2:65:a6:6f:fa:85:a1:ad:3a:20:
         05:13:ce:37:c2:fe:51:d0:44:35:fa:24:62:91:ca:42:ab:2e:
         14:2b:bc:e0:97:18:76:d3:b5:9a:1f:6d:4f:c9:6d:d9:d9:93:
         8b:3f:f2:28:31:c2:56:2f:e5:3f:77:66:17:3f:19:8d:3b:6a:
         3d:77:aa:79:fc:de:47:78:de:7d:71:83:93:a8:5e:10:1f:96:
         95:ba:d8:9a:04:46:6e:fb:09:9d:e2:6e:36:5b:7f:94:ab:43:
         3f:52:23:7c:ed:ad:29:d5:48:77:90:67:a7:90:76:0b:64:96:
         96:56:0f:93:05:11:36:6b:16:f0:3d:14:80:63:02:31:25:9d:
         74:0f:84:a0:ea:0d:45:a8:f2:a0:ff:f6:10:8b:c7:24:5c:ae:
         2f:ac:3f:df:e1:05:5e:33:13:3b:89:5f:af:fc:ae:3c:02:f6:
         eb:a3:ee:ca:b4:e2:1e:8b:b5:a4:30:d4:3d:ab:33:2d:84:c0:
         28:3a:5a:04:7f:96:fd:39:9e:18:df:d9:3b:e6:23:48:67:99:
         13:61:82:36:c6:3b:0b:5f:28:08:b9:fe:55:4d:19:5b:5f:57:
         de:39:eb:b6:26:26:66:15:d2:40:82:de:22:ad:5e:61:a3:d2:
         61:d5:79:6a
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAdWiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTEyMTA0NzU5WhcNMjYwOTIyMTA0NzU5WjAYMRYw
FAYDVQQDEw02YWE1MmRlMy1lY2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2s4L6obAQRzMOp3kTMkWwIcyqvw7CG+Qo1nLShXqMr07t4kpkhlQUiHN
5iIeCd3jSWafbmoUuSkEK/i+6gHx5d2qQJeIsxK1WX1uJmDryeR9CSUdEUn/CGxQ
GeOJTIDn+PHGSeG513aItYjArf9zvKkSJ79yhp5yDJCtFL5XqY7mKepo4IghD39z
5u+RiqOY2bXe///YuUDBuf+bYjcosWalOMDmvZRWga1xtfngBPi5S6YjPVSflVrT
/918zTxSNTwz5rU1ojrepRZ7LCxL0ThX9KAnmsXNY664e14kxmhslmXzIhOzd+9A
vEKnYc4vip63PjL2W+EHFES5SDx1hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPac
YYmPFA1BWZd26dmu0N4n6i5pMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82REU1RTk4NEFFOTcxMUYxQjc1RjhBQTBDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnOWsAwQAnOlAMA0GCSqGSIb3
DQEBCwUAA4IBAQAcoGzaI0LQF6Jlpm/6haGtOiAFE843wv5R0EQ1+iRikcpCqy4U
K7zglxh207WaH21PyW3Z2ZOLP/IoMcJWL+U/d2YXPxmNO2o9d6p5/N5HeN59cYOT
qF4QH5aVutiaBEZu+wmd4m42W3+Uq0M/UiN87a0p1Uh3kGenkHYLZJaWVg+TBRE2
axbwPRSAYwIxJZ10D4Sg6g1FqPKg//YQi8ckXK4vrD/f4QVeMxM7iV+v/K48Avbr
o+7KtOIei7WkMNQ9qzMthMAoOloEf5b9OZ4Y39k75iNIZ5kTYYI2xjsLXygIuf5V
TRlbX1feOeu2JiZmFdJAgt4irV5ho9Jh1Xlq
-----END CERTIFICATE-----