Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86F6B488AA8911F1A3A52114CF1D38B0.roa
File:                     86F6B488AA8911F1A3A52114CF1D38B0.roa (raw, json)
Hash identifier:          Pyx4EMHQz3rd+EvgXeP7DEV/nf95ltZFjEtqnqwDGNo=
Subject key identifier:   43:19:82:15:17:FC:AF:9E:EF:00:28:3C:2F:47:A4:32:E4:03:72:A2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D3B2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86F6B488AA8911F1A3A52114CF1D38B0.roa
Signing time:             Mon 07 Sep 2026 06:58:28 +0000
ROA not before:           Mon 07 Sep 2026 06:58:24 +0000
ROA not after:            Tue 13 Oct 2026 06:58:24 +0000
asID:                     142240
IP address blocks:        156.252.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119730 (0x1d3b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  7 06:58:24 2026 GMT
            Not After : Oct 13 06:58:24 2026 GMT
        Subject: CN=6a9e6094-2bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:74:e8:03:6e:b1:60:51:c7:d5:31:42:ae:11:
                    95:2d:05:f7:dc:cc:11:a5:b7:4c:a3:86:d8:6d:a0:
                    ef:85:01:30:8a:1f:df:ae:83:cf:ed:0f:dc:a4:bb:
                    8f:f9:aa:f2:84:15:fa:8a:1a:db:dc:7e:08:b3:05:
                    5a:df:41:f3:0c:c3:3f:06:68:73:43:52:13:89:b5:
                    c2:ef:2f:b5:89:e5:d4:64:94:24:c2:6d:05:2c:c1:
                    ce:0a:2b:31:77:86:dc:82:c0:f6:c3:1b:67:38:3b:
                    e4:b9:e3:57:37:66:bd:59:b6:4c:b1:81:7c:2c:7c:
                    2d:3d:3f:4d:97:16:65:8f:4e:b6:96:d0:50:f0:15:
                    ac:1e:35:45:87:81:2e:e1:e8:1b:63:55:cb:70:ec:
                    9a:98:7b:d7:88:5a:c0:59:a8:2d:ec:1b:86:45:d7:
                    9f:cf:58:ba:6c:4c:14:c1:e7:21:93:94:93:e0:7c:
                    68:fd:38:81:94:4c:39:75:ad:f1:9c:9e:8b:8b:46:
                    c2:49:5f:53:3b:2f:93:60:df:cc:f8:c5:44:3e:d0:
                    b9:c1:39:ca:45:0f:10:9a:47:fe:e7:0b:7f:91:96:
                    7d:ad:92:c2:76:16:6e:52:55:59:72:9a:0a:e4:dc:
                    3e:49:fd:0c:8a:29:ad:d9:94:b8:ed:59:54:ff:e6:
                    06:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:19:82:15:17:FC:AF:9E:EF:00:28:3C:2F:47:A4:32:E4:03:72:A2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86F6B488AA8911F1A3A52114CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.252.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:13:2a:ce:4d:ef:03:a9:c2:5a:7f:d5:51:eb:b8:08:cb:5c:
         e5:15:05:67:df:db:3f:26:cc:21:32:cf:c1:dc:0e:5b:bc:c1:
         4f:6f:90:c7:b5:73:3e:2a:9e:4a:ad:47:57:c8:74:ea:c5:4c:
         df:a3:b8:8f:0b:87:21:58:26:96:23:da:a4:0c:b0:1c:31:07:
         f1:06:3a:a7:30:de:7a:79:dd:09:ac:35:e3:d3:b0:48:ee:02:
         b7:51:78:1b:c4:f8:1e:8c:1e:1f:8b:55:13:79:b7:5a:2b:00:
         65:91:f6:a1:26:c1:40:9f:cd:a6:8c:6f:1c:c4:ab:9b:5f:e6:
         ec:c5:4a:c0:97:ac:bf:e9:b2:52:a2:e0:e8:30:e7:30:14:a3:
         1f:3e:04:89:09:86:be:72:18:51:8b:af:9d:9e:81:f7:65:b9:
         70:9a:29:6c:39:b6:48:b6:94:6f:92:d1:b1:80:04:a6:c1:09:
         52:62:c3:d6:69:fc:b2:8b:ba:61:da:3e:38:d8:68:f5:ec:f4:
         ec:9b:a2:01:83:ad:ca:f1:ca:89:18:36:49:97:72:32:be:b7:
         0e:06:b2:f5:ec:1e:e0:e8:30:85:63:8e:f6:ba:cc:67:82:c9:
         ac:ea:8c:04:d0:ca:35:af:fd:a8:97:6f:ed:e8:ea:2b:4f:1b:
         a0:54:c3:1a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdOyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTA3MDY1ODI0WhcNMjYxMDEzMDY1ODI0WjAYMRYw
FAYDVQQDEw02YTllNjA5NC0yYmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqHToA26xYFHH1TFCrhGVLQX33MwRpbdMo4bYbaDvhQEwih/froPP7Q/c
pLuP+aryhBX6ihrb3H4IswVa30HzDMM/BmhzQ1ITibXC7y+1ieXUZJQkwm0FLMHO
Cisxd4bcgsD2wxtnODvkueNXN2a9WbZMsYF8LHwtPT9NlxZlj062ltBQ8BWsHjVF
h4Eu4egbY1XLcOyamHvXiFrAWagt7BuGRdefz1i6bEwUwechk5ST4Hxo/TiBlEw5
da3xnJ6Li0bCSV9TOy+TYN/M+MVEPtC5wTnKRQ8Qmkf+5wt/kZZ9rZLCdhZuUlVZ
cpoK5Nw+Sf0Miimt2ZS47VlU/+YGVwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFEMZ
ghUX/K+e7wAoPC9HpDLkA3KiMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84NkY2QjQ4OEFBODkxMUYxQTNBNTIxMTRDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnPwUMA0GCSqGSIb3DQEBCwUA
A4IBAQAvEyrOTe8DqcJaf9VR67gIy1zlFQVn39s/JswhMs/B3A5bvMFPb5DHtXM+
Kp5KrUdXyHTqxUzfo7iPC4chWCaWI9qkDLAcMQfxBjqnMN56ed0JrDXj07BI7gK3
UXgbxPgejB4fi1UTebdaKwBlkfahJsFAn82mjG8cxKubX+bsxUrAl6y/6bJSouDo
MOcwFKMfPgSJCYa+chhRi6+dnoH3ZblwmilsObZItpRvktGxgASmwQlSYsPWafyy
i7ph2j442Gj17PTsm6IBg63K8cqJGDZJl3IyvrcOBrL17B7g6DCFY472usxngsms
6owE0Mo1r/2ol2/t6OorTxugVMMa
-----END CERTIFICATE-----