Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBE6B2A2C22211F1BF71BA16CF1D38B0.roa
File:                     EBE6B2A2C22211F1BF71BA16CF1D38B0.roa (raw, json)
Hash identifier:          cipZlhterE+mLWoMacXf9xZDiBpCbf5d0TIqmvAGqog=
Subject key identifier:   EF:0C:AC:FD:EA:A1:39:F1:63:4C:94:BF:70:7C:FF:1F:2E:82:DE:C9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DBBF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBE6B2A2C22211F1BF71BA16CF1D38B0.roa
Signing time:             Wed 07 Oct 2026 07:44:27 +0000
ROA not before:           Wed 07 Oct 2026 07:44:22 +0000
ROA not after:            Fri 13 Nov 2026 07:44:22 +0000
asID:                     264844
IP address blocks:        156.232.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121791 (0x1dbbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  7 07:44:22 2026 GMT
            Not After : Nov 13 07:44:22 2026 GMT
        Subject: CN=6ac5f85b-5f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bc:4a:6b:2e:a9:f1:9b:27:05:e3:30:d7:e5:
                    bd:3c:b8:5c:64:dc:16:3f:a1:41:b9:b3:6c:6d:9f:
                    2a:6e:f0:e9:40:10:94:fe:66:0a:07:9e:a0:6f:7e:
                    1f:f2:cb:08:18:f3:8c:de:78:0e:41:d2:34:b3:85:
                    40:a3:e5:8b:40:6f:7c:ae:25:b8:9a:0b:6e:0e:de:
                    a8:5c:07:43:e0:b8:77:cf:ba:82:ea:b6:be:e6:f6:
                    0a:cb:f8:8a:83:6b:9e:77:24:c2:46:be:da:5f:12:
                    0e:37:34:1c:24:20:6f:d6:ea:64:4e:21:ee:f1:3e:
                    3c:8f:86:81:2c:75:04:a3:ce:df:0a:26:cc:7a:6e:
                    de:15:78:2c:8b:8f:c4:a9:1c:0e:d2:d9:34:21:64:
                    86:46:82:fb:3e:96:c5:6c:1d:7c:e2:cd:55:ee:1b:
                    7a:ab:95:6e:ae:79:e2:d2:e7:59:19:60:2f:c7:8f:
                    d5:3a:02:a3:50:cf:56:37:7b:6c:b6:9a:9b:1e:9e:
                    ae:d0:06:64:43:77:f4:ef:1f:57:ef:05:1d:e2:8d:
                    61:ec:12:80:22:4c:09:24:35:84:ba:bb:55:48:68:
                    47:44:51:b4:83:ea:ef:96:58:fd:6d:f1:a6:0e:02:
                    5d:1f:57:e0:2f:6f:b5:c1:05:c1:11:b6:03:0e:f6:
                    8a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:0C:AC:FD:EA:A1:39:F1:63:4C:94:BF:70:7C:FF:1F:2E:82:DE:C9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBE6B2A2C22211F1BF71BA16CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.232.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:d4:19:83:23:9a:1f:bc:1e:73:28:ca:a2:83:fd:30:56:8c:
         d1:34:a6:7d:aa:c8:a5:cd:05:d6:f6:d3:9a:8b:22:65:54:59:
         f8:ee:09:dc:8a:66:70:4b:cb:94:c9:ac:1d:c6:7b:8e:4f:7a:
         b2:7f:a6:d3:8f:f2:a3:ba:dc:f4:20:8f:63:0c:99:23:63:1d:
         54:6c:72:23:a8:62:da:07:b5:55:aa:3e:9f:d2:13:80:54:d9:
         4e:6f:aa:2d:88:53:22:43:1f:c9:ac:41:8a:9e:a3:34:48:36:
         ad:29:fc:57:87:cf:b6:71:51:93:54:d0:6d:76:5c:12:0a:9f:
         20:15:0a:3c:c4:1d:a6:a3:18:52:53:33:c5:4d:82:03:87:7f:
         25:d7:f3:36:f3:31:37:63:57:53:66:4c:73:d1:17:59:a4:59:
         ec:b7:50:9c:9c:5e:ea:54:4b:ea:53:02:ef:63:0d:68:f5:bc:
         a2:5e:0e:18:7b:69:43:d8:85:9a:06:6b:19:eb:7d:73:dc:7d:
         1c:8a:fb:a7:4b:cd:57:e4:88:a7:99:06:e8:3d:d6:e1:97:96:
         9a:fd:a5:6d:3b:9a:8e:9c:20:76:6a:f3:58:ca:95:7b:e7:ef:
         ed:2e:0a:47:46:29:7b:65:da:2c:38:ae:c6:21:5e:85:20:65:
         d7:02:41:5c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdu/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDA3MDc0NDIyWhcNMjYxMTEzMDc0NDIyWjAYMRYw
FAYDVQQDEw02YWM1Zjg1Yi01ZjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxrxKay6p8ZsnBeMw1+W9PLhcZNwWP6FBubNsbZ8qbvDpQBCU/mYKB56g
b34f8ssIGPOM3ngOQdI0s4VAo+WLQG98riW4mgtuDt6oXAdD4Lh3z7qC6ra+5vYK
y/iKg2uedyTCRr7aXxIONzQcJCBv1upkTiHu8T48j4aBLHUEo87fCibMem7eFXgs
i4/EqRwO0tk0IWSGRoL7PpbFbB184s1V7ht6q5Vurnni0udZGWAvx4/VOgKjUM9W
N3tstpqbHp6u0AZkQ3f07x9X7wUd4o1h7BKAIkwJJDWEurtVSGhHRFG0g+rvllj9
bfGmDgJdH1fgL2+1wQXBEbYDDvaK2QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFO8M
rP3qoTnxY0yUv3B8/x8ugt7JMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FQkU2QjJBMkMyMjIxMUYxQkY3MUJBMTZDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOgIMA0GCSqGSIb3DQEBCwUA
A4IBAQBr1BmDI5ofvB5zKMqig/0wVozRNKZ9qsilzQXW9tOaiyJlVFn47gncimZw
S8uUyawdxnuOT3qyf6bTj/Kjutz0II9jDJkjYx1UbHIjqGLaB7VVqj6f0hOAVNlO
b6otiFMiQx/JrEGKnqM0SDatKfxXh8+2cVGTVNBtdlwSCp8gFQo8xB2moxhSUzPF
TYIDh38l1/M28zE3Y1dTZkxz0RdZpFnst1CcnF7qVEvqUwLvYw1o9byiXg4Ye2lD
2IWaBmsZ631z3H0civunS81X5IinmQboPdbhl5aa/aVtO5qOnCB2avNYypV75+/t
LgpHRil7ZdosOK7GIV6FIGXXAkFc
-----END CERTIFICATE-----