Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCD09CAAB4BE11F19F62B1B6CE1D38B0.roa
File:                     CCD09CAAB4BE11F19F62B1B6CE1D38B0.roa (raw, json)
Hash identifier:          8y27gVBpwyMntjuIWnwLY7IeMT5CQXfKCORu2zBeRV0=
Subject key identifier:   12:0C:1F:FF:0A:DA:90:8B:19:16:1A:A8:71:34:E1:F1:CE:C4:31:41
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D702
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCD09CAAB4BE11F19F62B1B6CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 06:45:00 +0000
ROA not before:           Sun 20 Sep 2026 06:44:56 +0000
ROA not after:            Sat 24 Oct 2026 06:44:56 +0000
asID:                     400619
IP address blocks:        156.239.32.0/20 maxlen: 24
                          156.239.48.0/22 maxlen: 24
                          156.239.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120578 (0x1d702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 20 06:44:56 2026 GMT
            Not After : Oct 24 06:44:56 2026 GMT
        Subject: CN=6aaf80ec-7114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:72:f9:94:ea:a1:86:66:cb:82:e9:cf:97:
                    64:84:bf:92:5d:e7:9d:13:c0:d8:0a:e5:12:f0:68:
                    2a:3c:d3:c1:ba:22:89:c5:c0:de:fb:ff:78:31:65:
                    2f:5e:79:61:ed:f4:88:17:af:bb:59:66:f4:9d:60:
                    09:5e:9e:16:37:9f:e0:89:47:96:98:2f:2a:58:0d:
                    e2:72:89:cd:a5:ff:07:5f:b0:60:9a:b6:59:63:64:
                    0e:0d:ce:80:db:fb:8a:9f:f3:6f:96:5a:72:a4:3a:
                    87:da:6f:aa:6f:27:bf:29:e7:82:10:2b:6b:65:93:
                    fc:9e:ca:ec:13:44:28:0d:3c:ad:aa:ae:5a:e8:d3:
                    15:6a:7e:a4:40:64:64:63:3a:4d:a8:74:22:64:13:
                    6e:03:70:42:51:af:85:1d:ea:34:d7:2c:ed:9a:67:
                    bb:1e:8c:43:51:cb:ba:d5:54:1c:b0:a5:e1:8c:d6:
                    74:d2:7d:c5:0f:e7:c7:ba:44:e9:42:8a:41:42:e0:
                    3a:c1:10:5b:69:d6:db:4f:d9:a2:da:0f:db:c0:0d:
                    4f:bf:45:c4:f3:a5:ce:02:5e:55:f8:6c:7c:eb:7b:
                    bc:cc:ac:98:9a:96:27:bc:64:4c:0d:33:04:9f:e9:
                    6f:52:25:79:0b:84:e0:d9:34:71:f5:8d:39:0a:9c:
                    48:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0C:1F:FF:0A:DA:90:8B:19:16:1A:A8:71:34:E1:F1:CE:C4:31:41
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCD09CAAB4BE11F19F62B1B6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.32.0-156.239.53.255

    Signature Algorithm: sha256WithRSAEncryption
         9f:3c:42:4e:fa:fa:98:f2:2f:ae:48:51:2b:9a:20:ca:66:86:
         ac:4a:62:e2:c7:a3:f7:a3:6b:ad:43:ef:48:d0:10:28:eb:7b:
         84:f0:79:37:b6:f3:b8:26:b0:72:3e:76:41:ec:06:85:be:57:
         6d:48:7d:b0:a4:d6:ef:b3:55:01:4e:6b:1c:17:12:f8:b5:e6:
         bc:cd:43:a0:00:19:c6:7e:7d:79:17:25:c4:e0:01:72:45:98:
         ba:52:a2:1c:bb:31:42:b6:1d:12:37:cd:d9:7e:eb:45:59:b1:
         ba:27:af:88:82:bc:88:50:67:35:d7:45:0d:a4:26:e6:0b:1b:
         50:bc:29:b6:f8:f4:ae:32:8c:bf:fb:66:76:ed:05:cc:ae:6d:
         88:b8:44:93:59:d7:7c:44:33:fd:4e:26:27:f6:21:7a:84:67:
         fa:1d:d2:22:6b:74:e6:27:01:a5:56:88:7c:a7:f3:fe:48:ad:
         1a:68:df:11:77:42:50:bc:3d:6f:e4:b0:a2:5b:a7:76:4f:a1:
         d0:af:ab:38:d7:9f:44:19:04:21:d5:5e:52:53:56:d8:2c:6e:
         7e:be:ae:ef:a2:59:88:e4:f7:a4:34:a5:b2:07:06:28:eb:1c:
         08:53:ae:df:d6:18:ca:c0:73:c5:f2:42:d2:16:28:93:54:ea:
         ea:a8:97:6b
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAdcCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTIwMDY0NDU2WhcNMjYxMDI0MDY0NDU2WjAYMRYw
FAYDVQQDEw02YWFmODBlYy03MTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt+ty+ZTqoYZmy4Lpz5dkhL+SXeedE8DYCuUS8GgqPNPBuiKJxcDe+/94
MWUvXnlh7fSIF6+7WWb0nWAJXp4WN5/giUeWmC8qWA3iconNpf8HX7BgmrZZY2QO
Dc6A2/uKn/NvllpypDqH2m+qbye/KeeCECtrZZP8nsrsE0QoDTytqq5a6NMVan6k
QGRkYzpNqHQiZBNuA3BCUa+FHeo01yztmme7HoxDUcu61VQcsKXhjNZ00n3FD+fH
ukTpQopBQuA6wRBbadbbT9mi2g/bwA1Pv0XE86XOAl5V+Gx863u8zKyYmpYnvGRM
DTMEn+lvUiV5C4Tg2TRx9Y05CpxIJwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFBIM
H/8K2pCLGRYaqHE04fHOxDFBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DQ0QwOUNBQUI0QkUxMUYxOUY2MkIxQjZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAWc7yADBAGc7zQwDQYJKoZI
hvcNAQELBQADggEBAJ88Qk76+pjyL65IUSuaIMpmhqxKYuLHo/eja61D70jQECjr
e4TweTe287gmsHI+dkHsBoW+V21IfbCk1u+zVQFOaxwXEvi15rzNQ6AAGcZ+fXkX
JcTgAXJFmLpSohy7MUK2HRI3zdl+60VZsbonr4iCvIhQZzXXRQ2kJuYLG1C8Kbb4
9K4yjL/7ZnbtBcyubYi4RJNZ13xEM/1OJif2IXqEZ/od0iJrdOYnAaVWiHyn8/5I
rRpo3xF3QlC8PW/ksKJbp3ZPodCvqzjXn0QZBCHVXlJTVtgsbn6+ru+iWYjk96Q0
pbIHBijrHAhTrt/WGMrAc8XyQtIWKJNU6uqol2s=
-----END CERTIFICATE-----