Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E27DE72B66911F1A51DD712CF1D38B0.roa
File:                     2E27DE72B66911F1A51DD712CF1D38B0.roa (raw, json)
Hash identifier:          vPOk1wlfNXszNhQVzyKtDef+adIvlnCUDYbWQtBRONw=
Subject key identifier:   C9:0B:21:62:A1:0F:94:BF:B5:D2:D5:62:A8:0C:64:65:AE:DA:52:EC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D7F8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E27DE72B66911F1A51DD712CF1D38B0.roa
Signing time:             Tue 22 Sep 2026 09:37:09 +0000
ROA not before:           Tue 22 Sep 2026 09:37:05 +0000
ROA not after:            Thu 29 Oct 2026 09:37:05 +0000
asID:                     48031
IP address blocks:        156.246.138.0/24 maxlen: 24
                          156.246.139.0/24 maxlen: 24
                          156.246.140.0/24 maxlen: 24
                          156.246.141.0/24 maxlen: 24
                          156.246.142.0/24 maxlen: 24
                          156.246.143.0/24 maxlen: 24
                          156.246.144.0/24 maxlen: 24
                          156.246.145.0/24 maxlen: 24
                          156.246.146.0/24 maxlen: 24
                          156.246.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120824 (0x1d7f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 09:37:05 2026 GMT
            Not After : Oct 29 09:37:05 2026 GMT
        Subject: CN=6ab24c45-7551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:99:a6:7d:6e:56:df:e7:b3:fb:03:8e:e9:8e:
                    10:2d:0c:5e:6b:b6:48:00:64:4b:89:3a:83:dd:bf:
                    ed:47:0a:79:05:20:6f:1f:28:3a:f9:ff:85:78:1f:
                    44:aa:8c:62:18:ec:0a:47:01:0f:ff:3e:23:47:2b:
                    dc:1d:60:f4:38:d7:f3:b0:82:59:a4:b5:ce:a8:e2:
                    70:b1:3c:f7:b5:7c:47:7a:9f:58:89:d6:af:6e:63:
                    4f:f4:55:19:67:1b:0a:87:ad:5a:1a:41:98:ba:9b:
                    dd:6f:8b:68:f0:e9:ba:f6:36:af:db:3d:4a:60:86:
                    7a:2b:e8:a2:c1:2a:a7:34:60:2e:6b:b8:30:80:f1:
                    15:b8:fb:20:58:01:9d:a7:7b:2e:1e:d7:ad:20:5d:
                    78:46:d1:db:82:85:eb:ff:09:3b:f5:26:61:13:5c:
                    a5:19:97:e2:0b:b4:62:d6:1c:3c:ee:c1:a7:e3:92:
                    ae:f4:b7:ef:2b:b9:a7:38:4b:55:58:c2:a5:fe:75:
                    f5:72:14:8c:d1:6b:10:b6:60:91:e5:2b:d4:da:de:
                    09:bc:4a:15:b1:6a:23:92:3a:45:5c:82:f0:de:81:
                    48:a6:d1:42:a8:91:6d:5e:dd:dc:a0:8c:46:4e:c6:
                    15:eb:2b:9e:3a:dd:dd:63:2a:78:6a:21:54:f8:7f:
                    1e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:0B:21:62:A1:0F:94:BF:B5:D2:D5:62:A8:0C:64:65:AE:DA:52:EC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E27DE72B66911F1A51DD712CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.138.0-156.246.147.255

    Signature Algorithm: sha256WithRSAEncryption
         0c:b8:99:99:5a:70:c4:a2:aa:5a:bd:85:29:1e:59:f7:47:6d:
         71:cd:6d:b9:0b:44:3f:84:61:40:b4:51:5e:57:f2:4f:31:3a:
         49:82:0a:91:80:d6:5d:e9:ee:96:16:a4:00:80:34:4b:c7:57:
         32:51:6b:27:c6:25:3e:17:c6:3b:c5:5a:0a:2b:a3:ab:7b:4e:
         d0:0b:2d:91:03:51:e4:f1:08:83:73:2c:b5:ca:cb:56:f7:5b:
         dc:a4:41:2c:05:5e:85:1e:04:3f:4d:77:73:a4:5c:6d:2e:83:
         45:36:5d:a5:c5:73:23:e4:9d:d5:7d:cb:d7:24:1c:51:19:9a:
         ab:98:6f:8c:d2:2f:1f:b7:6a:06:29:d0:4f:82:d8:d5:88:f9:
         8c:a5:f8:df:4b:04:f6:84:7d:99:76:b0:c4:cc:b6:61:93:15:
         dc:a0:b5:c4:1c:ec:73:45:1e:d7:68:98:59:ec:33:2c:55:b9:
         78:76:ce:1a:50:06:be:11:33:45:64:d2:3f:0f:7d:a2:1c:12:
         9f:bd:42:02:15:35:31:18:55:11:ea:22:ba:92:44:fd:34:b5:
         90:fe:49:07:1d:87:df:8e:fb:91:1d:76:94:46:c5:c7:8e:28:
         3c:43:2a:b3:46:b1:0c:aa:16:b3:17:9f:fa:95:e2:1d:09:8e:
         40:a1:98:0f
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAdf4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTIyMDkzNzA1WhcNMjYxMDI5MDkzNzA1WjAYMRYw
FAYDVQQDEw02YWIyNGM0NS03NTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1JmmfW5W3+ez+wOO6Y4QLQxea7ZIAGRLiTqD3b/tRwp5BSBvHyg6+f+F
eB9EqoxiGOwKRwEP/z4jRyvcHWD0ONfzsIJZpLXOqOJwsTz3tXxHep9YidavbmNP
9FUZZxsKh61aGkGYupvdb4to8Om69jav2z1KYIZ6K+iiwSqnNGAua7gwgPEVuPsg
WAGdp3suHtetIF14RtHbgoXr/wk79SZhE1ylGZfiC7Ri1hw87sGn45Ku9LfvK7mn
OEtVWMKl/nX1chSM0WsQtmCR5SvU2t4JvEoVsWojkjpFXILw3oFIptFCqJFtXt3c
oIxGTsYV6yueOt3dYyp4aiFU+H8ehwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFMkL
IWKhD5S/tdLVYqgMZGWu2lLsMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yRTI3REU3MkI2NjkxMUYxQTUxREQ3MTJDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGc9ooDBAKc9pAwDQYJKoZI
hvcNAQELBQADggEBAAy4mZlacMSiqlq9hSkeWfdHbXHNbbkLRD+EYUC0UV5X8k8x
OkmCCpGA1l3p7pYWpACANEvHVzJRayfGJT4XxjvFWgoro6t7TtALLZEDUeTxCINz
LLXKy1b3W9ykQSwFXoUeBD9Nd3OkXG0ug0U2XaXFcyPkndV9y9ckHFEZmquYb4zS
Lx+3agYp0E+C2NWI+Yyl+N9LBPaEfZl2sMTMtmGTFdygtcQc7HNFHtdomFnsMyxV
uXh2zhpQBr4RM0Vk0j8PfaIcEp+9QgIVNTEYVRHqIrqSRP00tZD+SQcdh9+O+5Ed
dpRGxceOKDxDKrNGsQyqFrMXn/qV4h0JjkChmA8=
-----END CERTIFICATE-----