Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3D827D6B26C11F1A1B5FCD8CE1D38B0.roa
File:                     F3D827D6B26C11F1A1B5FCD8CE1D38B0.roa (raw, json)
Hash identifier:          nAFhv01dMMp/Gjf2Pyx+cIsx6hPJWDh4RYPGiJvD9dw=
Subject key identifier:   36:36:E9:3E:40:76:52:8E:3A:AB:10:22:20:D8:D0:6D:E4:8B:FE:9C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D6B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3D827D6B26C11F1A1B5FCD8CE1D38B0.roa
Signing time:             Thu 17 Sep 2026 07:54:05 +0000
ROA not before:           Thu 17 Sep 2026 07:54:01 +0000
ROA not after:            Thu 22 Oct 2026 07:54:01 +0000
asID:                     141718
IP address blocks:        156.225.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120504 (0x1d6b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 17 07:54:01 2026 GMT
            Not After : Oct 22 07:54:01 2026 GMT
        Subject: CN=6aab9c9c-5204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:09:6d:1d:9a:35:e8:68:e8:e9:d1:20:dd:f3:
                    ad:02:61:35:c6:87:ae:0b:80:b0:e2:19:6b:81:8c:
                    55:0b:c9:f8:c6:70:82:a3:cd:df:88:50:12:8a:f8:
                    09:87:27:f8:2b:70:2e:22:7c:5d:35:96:81:92:8e:
                    f5:65:1a:c4:6e:59:3b:d3:09:63:fd:da:b2:a4:8a:
                    db:c6:77:f2:27:bd:4b:05:33:62:59:18:5e:2b:da:
                    c4:53:dd:25:30:a9:ed:73:3b:ba:f7:d6:5b:bb:7c:
                    e0:59:f3:5e:ab:d9:74:f6:e4:dd:f4:20:f4:3f:dc:
                    a9:ef:03:0f:11:17:82:a8:63:ae:1a:cc:6d:1c:e6:
                    bc:41:dc:47:c0:8d:17:9f:8b:40:c1:05:2e:0f:51:
                    79:6c:d5:56:0e:71:6e:74:75:8f:79:2d:13:62:c6:
                    50:69:97:02:e5:39:35:1f:cf:12:96:96:90:e4:ea:
                    d1:cb:16:46:34:67:0e:e9:ff:bb:38:ab:00:3b:19:
                    50:df:0e:ee:15:8f:1c:97:5c:62:fb:80:10:1d:cd:
                    07:0a:0c:d6:c0:85:98:33:45:a3:62:39:c4:26:0f:
                    86:41:8d:72:cb:1b:a9:6d:82:3e:21:d0:49:09:1b:
                    e8:ec:87:c4:96:a2:45:ad:c5:5e:68:93:bf:1f:af:
                    93:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:36:E9:3E:40:76:52:8E:3A:AB:10:22:20:D8:D0:6D:E4:8B:FE:9C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3D827D6B26C11F1A1B5FCD8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:ef:3a:0c:df:a0:38:94:f9:b3:86:b4:12:e0:d7:38:72:45:
         07:bd:04:1a:79:c8:4f:98:fa:9f:38:92:38:7d:f7:2c:53:77:
         64:d6:43:b7:01:de:e5:28:d5:1c:fb:f9:c0:fb:93:00:ea:f2:
         09:96:76:42:5c:83:4b:90:b3:35:e9:e6:2a:70:f3:6f:ad:d4:
         ed:65:4e:a1:f8:b1:79:b4:cd:51:f8:c8:d5:5a:5f:bf:af:64:
         dd:db:10:c9:1c:47:4f:70:7c:f0:64:09:84:86:d3:ac:86:c2:
         a1:fd:c5:1d:40:18:63:72:b6:65:48:9c:ab:d7:8d:6b:25:5d:
         aa:67:df:20:39:4e:67:c7:f0:aa:fb:ff:ff:7a:9d:4e:48:1e:
         0f:54:1c:47:bd:1c:c3:bd:7f:fc:0e:8f:70:04:05:8f:e1:45:
         6b:55:52:09:f3:25:a0:07:9a:61:81:d1:a5:63:eb:ba:d9:4e:
         d9:a2:a5:83:05:ae:a4:18:22:25:67:c9:0d:f3:a8:7f:5a:fc:
         db:20:ea:75:5c:82:1c:ed:fb:da:0d:38:45:cb:df:09:e0:87:
         88:05:9f:09:b4:9b:72:6c:50:41:83:68:92:ce:2e:eb:3e:77:
         5b:04:ef:4c:68:d4:1c:6c:6f:d4:4c:a3:a5:ee:fb:70:47:f3:
         e3:2a:61:93
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAda4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTE3MDc1NDAxWhcNMjYxMDIyMDc1NDAxWjAYMRYw
FAYDVQQDEw02YWFiOWM5Yy01MjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8QltHZo16Gjo6dEg3fOtAmE1xoeuC4Cw4hlrgYxVC8n4xnCCo83fiFAS
ivgJhyf4K3AuInxdNZaBko71ZRrEblk70wlj/dqypIrbxnfyJ71LBTNiWRheK9rE
U90lMKntczu699Zbu3zgWfNeq9l09uTd9CD0P9yp7wMPEReCqGOuGsxtHOa8QdxH
wI0Xn4tAwQUuD1F5bNVWDnFudHWPeS0TYsZQaZcC5Tk1H88SlpaQ5OrRyxZGNGcO
6f+7OKsAOxlQ3w7uFY8cl1xi+4AQHc0HCgzWwIWYM0WjYjnEJg+GQY1yyxupbYI+
IdBJCRvo7IfElqJFrcVeaJO/H6+TuwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDY2
6T5AdlKOOqsQIiDY0G3ki/6cMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GM0Q4MjdENkIyNkMxMUYxQTFCNUZDRDhDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOFEMA0GCSqGSIb3DQEBCwUA
A4IBAQBS7zoM36A4lPmzhrQS4Nc4ckUHvQQaechPmPqfOJI4ffcsU3dk1kO3Ad7l
KNUc+/nA+5MA6vIJlnZCXINLkLM16eYqcPNvrdTtZU6h+LF5tM1R+MjVWl+/r2Td
2xDJHEdPcHzwZAmEhtOshsKh/cUdQBhjcrZlSJyr141rJV2qZ98gOU5nx/Cq+///
ep1OSB4PVBxHvRzDvX/8Do9wBAWP4UVrVVIJ8yWgB5phgdGlY+u62U7ZoqWDBa6k
GCIlZ8kN86h/WvzbIOp1XIIc7fvaDThFy98J4IeIBZ8JtJtybFBBg2iSzi7rPndb
BO9MaNQcbG/UTKOl7vtwR/PjKmGT
-----END CERTIFICATE-----