Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F831F2C6B0D711F1B1508EC5CE1D38B0.roa
File:                     F831F2C6B0D711F1B1508EC5CE1D38B0.roa (raw, json)
Hash identifier:          B8NG5E4DMfb/2rLWbuUdbZjj91wlRlpV7lhOwQaxLwk=
Subject key identifier:   7C:4C:17:03:84:D5:35:C9:D5:BC:2C:ED:1E:4F:E9:6A:01:E1:54:EF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D619
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F831F2C6B0D711F1B1508EC5CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 07:35:06 +0000
ROA not before:           Tue 15 Sep 2026 07:35:01 +0000
ROA not after:            Wed 21 Oct 2026 07:35:01 +0000
asID:                     2914
IP address blocks:        156.225.8.0/22 maxlen: 24
                          156.225.8.0/24 maxlen: 24
                          156.225.9.0/24 maxlen: 24
                          156.225.10.0/24 maxlen: 24
                          156.225.11.0/24 maxlen: 24
                          156.229.26.0/24 maxlen: 24
                          156.229.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120345 (0x1d619)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 07:35:01 2026 GMT
            Not After : Oct 21 07:35:01 2026 GMT
        Subject: CN=6aa8f52a-8aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:21:e7:7b:ec:9b:c8:b7:d1:a9:70:4c:d7:ba:
                    e9:5f:be:95:41:23:a2:38:5b:d9:69:52:d2:b8:b1:
                    56:f7:d4:70:3a:f2:47:3f:ad:8c:b8:f9:92:38:e2:
                    ec:93:78:65:ff:28:eb:92:f3:05:49:e3:8f:e1:50:
                    d1:e1:1c:85:bd:d6:d2:00:1c:83:81:40:af:ba:db:
                    9f:a4:42:45:f8:32:f7:29:93:d9:47:77:e8:3a:0b:
                    58:27:8a:ab:16:7f:0d:69:92:da:f0:28:bc:65:dd:
                    a8:d5:14:61:df:b5:4c:01:5e:d6:ff:80:1d:19:1d:
                    6b:b4:79:23:f5:c4:fb:c3:24:bb:b1:51:c0:2a:db:
                    f8:df:e4:93:5b:31:e1:fc:c6:68:3b:9d:ce:28:f2:
                    dc:15:91:0a:b2:31:f3:2e:f6:37:45:ea:0a:5b:a7:
                    54:f8:d7:24:7a:94:ec:90:ef:0d:2d:f9:01:2d:33:
                    71:f4:ee:f3:3f:44:65:f0:f9:58:89:83:b9:ff:03:
                    06:c8:1d:25:5b:ea:69:fc:a0:0c:9d:53:46:d5:2f:
                    bc:45:f2:8e:ce:fa:9e:fa:99:88:d2:3d:bc:ac:ba:
                    a9:ef:71:4b:ef:0a:08:80:46:12:a3:19:da:2a:59:
                    24:af:46:cb:51:07:9e:51:5f:52:32:15:86:32:91:
                    ff:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4C:17:03:84:D5:35:C9:D5:BC:2C:ED:1E:4F:E9:6A:01:E1:54:EF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F831F2C6B0D711F1B1508EC5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.8.0/22
                  156.229.26.0/24
                  156.229.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:f0:85:d3:cb:21:03:6b:ba:bf:7d:b6:c5:6e:c8:58:c3:56:
         74:83:4e:de:5e:91:d9:a0:46:58:7a:68:54:9a:c8:c8:aa:4f:
         89:9b:f1:59:bf:5e:b7:fc:e5:0a:db:7e:21:28:90:5d:bf:12:
         ea:24:e2:4b:25:ae:1a:23:a4:58:17:0a:1f:f8:d1:c5:41:b2:
         bc:f4:06:9e:5d:ed:dc:19:32:f2:90:10:f0:8f:1b:11:3b:06:
         0b:d8:da:5d:6f:f6:c1:a7:a4:07:d2:65:ed:1c:f6:37:e6:37:
         9e:3a:57:2f:88:4f:67:3f:29:49:09:cd:82:5b:ca:99:b1:ab:
         45:cb:43:49:6f:4e:07:f4:c7:a5:f9:4c:48:e5:3b:59:df:4b:
         61:af:e1:79:42:1a:ee:74:9f:7d:92:e6:13:ab:22:1c:c1:6e:
         a0:05:22:9a:fc:f2:c4:c4:1b:ca:0e:75:11:c0:98:3d:74:95:
         a7:8c:db:33:74:01:94:d9:04:82:89:40:3d:43:b4:ab:3c:fa:
         98:fa:cd:f7:3a:89:fb:58:ce:43:14:6e:de:58:90:7b:58:e9:
         34:55:40:a7:97:b6:fb:a0:bf:07:fa:d3:23:aa:6a:90:f0:ab:
         ad:85:d7:d7:0a:95:57:92:93:63:b2:33:f3:b9:58:5b:1d:91:
         6a:f1:49:a8
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAdYZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTE1MDczNTAxWhcNMjYxMDIxMDczNTAxWjAYMRYw
FAYDVQQDEw02YWE4ZjUyYS04YWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7CHne+ybyLfRqXBM17rpX76VQSOiOFvZaVLSuLFW99RwOvJHP62MuPmS
OOLsk3hl/yjrkvMFSeOP4VDR4RyFvdbSAByDgUCvutufpEJF+DL3KZPZR3foOgtY
J4qrFn8NaZLa8Ci8Zd2o1RRh37VMAV7W/4AdGR1rtHkj9cT7wyS7sVHAKtv43+ST
WzHh/MZoO53OKPLcFZEKsjHzLvY3ReoKW6dU+NckepTskO8NLfkBLTNx9O7zP0Rl
8PlYiYO5/wMGyB0lW+pp/KAMnVNG1S+8RfKOzvqe+pmI0j28rLqp73FL7woIgEYS
oxnaKlkkr0bLUQeeUV9SMhWGMpH/RQIDAQABo4ICrjCCAqowHQYDVR0OBBYEFHxM
FwOE1TXJ1bws7R5P6WoB4VTvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GODMxRjJDNkIwRDcxMUYxQjE1MDhFQzVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCnOEIAwQAnOUaAwQBnOX6MA0G
CSqGSIb3DQEBCwUAA4IBAQAF8IXTyyEDa7q/fbbFbshYw1Z0g07eXpHZoEZYemhU
msjIqk+Jm/FZv163/OUK234hKJBdvxLqJOJLJa4aI6RYFwof+NHFQbK89AaeXe3c
GTLykBDwjxsROwYL2Npdb/bBp6QH0mXtHPY35jeeOlcviE9nPylJCc2CW8qZsatF
y0NJb04H9Mel+UxI5TtZ30thr+F5QhrudJ99kuYTqyIcwW6gBSKa/PLExBvKDnUR
wJg9dJWnjNszdAGU2QSCiUA9Q7SrPPqY+s33Oon7WM5DFG7eWJB7WOk0VUCnl7b7
oL8H+tMjqmqQ8KuthdfXCpVXkpNjsjPzuVhbHZFq8Umo
-----END CERTIFICATE-----