Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC1EBE84A6A111F192BA5DF0CE1D38B0.roa
File:                     CC1EBE84A6A111F192BA5DF0CE1D38B0.roa (raw, json)
Hash identifier:          BzAYSKWSeunPDakejYTdAiF41Jt0tR4yERiMjEFy1PE=
Subject key identifier:   16:26:93:5C:0C:0F:09:6C:51:45:1B:56:E1:66:5B:52:C2:6B:E5:EB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D258
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC1EBE84A6A111F192BA5DF0CE1D38B0.roa
Signing time:             Wed 02 Sep 2026 07:42:07 +0000
ROA not before:           Wed 02 Sep 2026 07:42:03 +0000
ROA not after:            Sat 01 Sep 2029 07:42:03 +0000
asID:                     17561
IP address blocks:        156.251.45.0/24 maxlen: 24
                          156.251.46.0/24 maxlen: 24
                          156.251.47.0/24 maxlen: 24
                          156.251.48.0/24 maxlen: 24
                          156.251.49.0/24 maxlen: 24
                          156.251.50.0/24 maxlen: 24
                          156.251.51.0/24 maxlen: 24
                          156.251.52.0/24 maxlen: 24
                          156.251.53.0/24 maxlen: 24
                          156.251.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119384 (0x1d258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  2 07:42:03 2026 GMT
            Not After : Sep  1 07:42:03 2029 GMT
        Subject: CN=6a97d34f-1b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1b:b9:ab:df:04:82:9c:07:a4:a4:0d:6c:a9:
                    f4:65:83:11:5e:06:2a:9c:26:42:47:ec:83:36:00:
                    35:1c:83:b3:34:3a:a2:6d:be:46:7e:2b:6e:1b:09:
                    70:df:fe:a5:06:1b:1b:d6:30:df:67:cd:64:be:3e:
                    4e:21:aa:36:38:c7:7f:03:fd:67:b0:6e:3c:c6:8f:
                    8d:02:17:5b:f1:c4:07:ed:8d:36:e1:58:12:f8:71:
                    dd:88:58:2b:73:94:35:b8:1a:86:56:53:03:e9:b8:
                    c4:e6:54:88:e2:b5:1a:7e:6e:5f:b1:33:6b:29:b5:
                    e4:64:7c:cc:77:ee:d8:96:56:13:84:85:78:7b:e8:
                    af:ea:8a:ec:15:6c:5d:c5:84:2c:1b:63:e8:bc:be:
                    58:b1:87:99:b6:25:e7:b9:e3:40:d0:69:7d:23:05:
                    49:f1:b8:b7:f4:33:cf:3d:42:da:8a:65:97:23:a6:
                    f5:7f:9f:0f:77:eb:c6:00:44:cc:76:67:be:29:4d:
                    f0:40:0a:9f:4a:9d:6f:a7:55:f4:eb:52:7a:5b:73:
                    b6:9b:1a:0d:a1:f4:82:d1:a5:b9:3d:83:86:d8:d1:
                    ab:ae:9a:4c:36:88:26:7a:39:76:b4:89:17:60:98:
                    4e:21:79:62:13:f0:a9:21:cf:b2:28:b3:43:a6:c1:
                    ef:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:26:93:5C:0C:0F:09:6C:51:45:1B:56:E1:66:5B:52:C2:6B:E5:EB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC1EBE84A6A111F192BA5DF0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.45.0-156.251.54.255

    Signature Algorithm: sha256WithRSAEncryption
         69:bb:a5:72:4f:0e:ff:f5:7e:43:23:c1:41:f1:2c:dd:42:9a:
         a8:f5:af:00:c4:8d:24:f1:71:8d:56:1d:86:30:40:77:d0:95:
         39:a9:62:b0:e6:d5:03:1c:ef:87:66:d0:2f:ed:68:6a:b0:73:
         6a:fe:e2:df:97:c2:d6:39:0c:17:1b:25:ae:76:a4:cb:28:f6:
         57:92:98:2c:78:cb:f9:45:69:b1:e7:6f:15:8e:82:1b:1c:63:
         71:6f:e2:52:da:27:1a:14:47:fe:aa:d2:82:ce:87:d2:b2:77:
         bb:42:4f:25:0c:11:3c:eb:b9:85:46:3c:15:a2:3c:3a:4a:be:
         61:fa:fa:1e:7d:4f:f9:2c:dd:a6:52:81:32:9d:b9:e9:07:05:
         a7:6d:a3:48:3f:90:56:65:4d:a7:7b:f6:42:90:0b:f0:04:ae:
         1f:b6:f0:06:a5:5d:64:48:1e:d0:82:18:34:8e:9d:7f:0b:dc:
         75:2a:b6:90:92:b8:33:47:02:31:58:46:0d:22:9f:51:28:23:
         78:5a:a1:8c:87:97:f7:b0:91:32:70:c1:e1:79:20:dd:ac:9b:
         23:8f:0f:a6:0f:2b:04:8e:64:a3:fe:da:7c:6f:c4:18:d8:01:
         3b:81:ac:c1:c7:4b:50:f4:00:fa:80:6c:ae:29:5f:be:97:cb:
         49:6f:dc:32
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAdJYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTAyMDc0MjAzWhcNMjkwOTAxMDc0MjAzWjAYMRYw
FAYDVQQDEw02YTk3ZDM0Zi0xYjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxBu5q98EgpwHpKQNbKn0ZYMRXgYqnCZCR+yDNgA1HIOzNDqibb5Gfitu
Gwlw3/6lBhsb1jDfZ81kvj5OIao2OMd/A/1nsG48xo+NAhdb8cQH7Y024VgS+HHd
iFgrc5Q1uBqGVlMD6bjE5lSI4rUafm5fsTNrKbXkZHzMd+7YllYThIV4e+iv6ors
FWxdxYQsG2PovL5YsYeZtiXnueNA0Gl9IwVJ8bi39DPPPULaimWXI6b1f58Pd+vG
AETMdme+KU3wQAqfSp1vp1X061J6W3O2mxoNofSC0aW5PYOG2NGrrppMNogmejl2
tIkXYJhOIXliE/CpIc+yKLNDpsHvTQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFBYm
k1wMDwlsUUUbVuFmW1LCa+XrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DQzFFQkU4NEE2QTExMUYxOTJCQTVERjBDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACc+y0DBACc+zYwDQYJKoZI
hvcNAQELBQADggEBAGm7pXJPDv/1fkMjwUHxLN1Cmqj1rwDEjSTxcY1WHYYwQHfQ
lTmpYrDm1QMc74dm0C/taGqwc2r+4t+XwtY5DBcbJa52pMso9leSmCx4y/lFabHn
bxWOghscY3Fv4lLaJxoUR/6q0oLOh9Kyd7tCTyUMETzruYVGPBWiPDpKvmH6+h59
T/ks3aZSgTKduekHBadto0g/kFZlTad79kKQC/AErh+28AalXWRIHtCCGDSOnX8L
3HUqtpCSuDNHAjFYRg0in1EoI3haoYyHl/ewkTJwweF5IN2smyOPD6YPKwSOZKP+
2nxvxBjYATuBrMHHS1D0APqAbK4pX76Xy0lv3DI=
-----END CERTIFICATE-----