Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4560D7D6B74C11F19950CFD8CE1D38B0.roa
File:                     4560D7D6B74C11F19950CFD8CE1D38B0.roa (raw, json)
Hash identifier:          ovnbDyBZFBvQcz0n1aN8zM7GDwjPtonceDWVOonZrm8=
Subject key identifier:   06:13:BF:7A:30:04:18:B3:5B:89:CC:80:22:75:DC:B9:32:E6:9E:B5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D86F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4560D7D6B74C11F19950CFD8CE1D38B0.roa
Signing time:             Wed 23 Sep 2026 12:42:44 +0000
ROA not before:           Wed 23 Sep 2026 12:42:40 +0000
ROA not after:            Mon 07 May 2029 12:42:40 +0000
asID:                     17561
IP address blocks:        156.232.119.0/24 maxlen: 24
                          156.232.120.0/24 maxlen: 24
                          156.232.121.0/24 maxlen: 24
                          156.232.122.0/24 maxlen: 24
                          156.232.123.0/24 maxlen: 24
                          156.232.124.0/24 maxlen: 24
                          156.232.125.0/24 maxlen: 24
                          156.232.126.0/24 maxlen: 24
                          156.232.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120943 (0x1d86f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 23 12:42:40 2026 GMT
            Not After : May  7 12:42:40 2029 GMT
        Subject: CN=6ab3c944-7689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9c:b8:3a:0d:61:bd:b1:14:22:7f:13:e9:f0:
                    0c:a8:5c:ae:fc:83:93:d5:9b:0e:70:67:f1:c2:90:
                    e3:c7:e9:5e:06:b1:26:4a:91:4e:df:ab:30:33:96:
                    c7:39:2d:fd:6b:5f:f1:b6:50:bd:12:7b:0b:8a:08:
                    80:ce:54:4e:1e:01:97:af:36:00:80:ef:48:7a:78:
                    be:73:4c:fc:61:c8:05:05:bd:19:0d:8b:ef:28:d3:
                    30:62:47:93:78:71:cd:09:7b:27:9b:48:15:79:ae:
                    eb:cf:4a:30:30:eb:5c:b8:19:f4:a5:1a:88:e2:c5:
                    9e:44:72:24:1b:fd:f4:31:bd:05:ef:6e:17:37:83:
                    c7:2e:19:f1:34:68:ad:55:78:ec:8d:99:4b:b1:8b:
                    b7:f0:e7:fb:39:bf:90:47:f0:86:eb:d0:f0:ec:3b:
                    4b:e7:ea:b3:9b:18:e5:f9:c5:8a:a7:3f:6b:89:9c:
                    9b:36:4e:1e:06:59:f5:51:ba:e5:cc:f9:ac:ff:eb:
                    e8:9b:4b:86:1a:10:f8:81:61:85:59:01:24:78:ab:
                    c8:11:85:0f:f9:67:63:6a:f8:d3:be:54:d5:29:21:
                    79:a4:e0:a4:ff:5e:07:e3:35:86:9e:b8:1f:46:52:
                    2e:67:f1:fb:23:0d:cb:a5:9b:3b:a7:5a:55:72:c9:
                    60:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:13:BF:7A:30:04:18:B3:5B:89:CC:80:22:75:DC:B9:32:E6:9E:B5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4560D7D6B74C11F19950CFD8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.232.119.0-156.232.127.255

    Signature Algorithm: sha256WithRSAEncryption
         41:23:19:88:d5:4e:4a:78:ea:51:75:cb:3a:41:8b:a5:bf:38:
         b7:ea:8a:fd:9d:29:22:79:16:e2:25:b0:6f:84:7c:5e:27:a9:
         74:2f:ba:76:ec:9c:ee:8d:e7:5e:f1:d8:5e:21:0d:b1:0e:37:
         2a:69:5a:2d:2c:a2:a4:c9:cc:9b:77:85:11:2e:13:98:e0:59:
         bf:c3:bc:11:b4:71:31:50:c7:d0:84:b1:e8:d9:e5:f1:65:b4:
         f2:86:8c:2d:cc:70:ff:f3:c1:13:63:02:7a:3f:79:ba:3e:65:
         04:49:67:ce:74:4a:43:25:dd:f5:0d:58:87:6a:ab:81:21:9f:
         ae:bb:35:d2:d8:f4:54:27:0b:b3:74:a6:29:88:4d:d3:93:31:
         28:4a:63:db:e0:02:d3:ea:64:95:20:94:4a:bf:78:0c:27:28:
         0e:fe:74:c3:51:b8:2b:a9:60:40:68:41:df:1e:81:27:bb:be:
         f2:c8:cd:b6:be:d0:7f:b2:76:d5:34:9d:7e:ae:7b:a2:c8:35:
         58:82:4c:77:3d:f2:16:9b:cd:96:f0:f1:49:00:b3:90:e4:67:
         a6:d8:05:91:e8:f5:1b:0e:da:5e:04:aa:79:0b:b5:93:c4:b3:
         7e:96:a9:e7:6e:a5:4d:d1:ac:bd:84:50:ca:b5:89:60:b0:63:
         08:55:c7:7a
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAdhvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTIzMTI0MjQwWhcNMjkwNTA3MTI0MjQwWjAYMRYw
FAYDVQQDEw02YWIzYzk0NC03Njg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2Zy4Og1hvbEUIn8T6fAMqFyu/IOT1ZsOcGfxwpDjx+leBrEmSpFO36sw
M5bHOS39a1/xtlC9EnsLigiAzlROHgGXrzYAgO9Ieni+c0z8YcgFBb0ZDYvvKNMw
YkeTeHHNCXsnm0gVea7rz0owMOtcuBn0pRqI4sWeRHIkG/30Mb0F724XN4PHLhnx
NGitVXjsjZlLsYu38Of7Ob+QR/CG69Dw7DtL5+qzmxjl+cWKpz9riZybNk4eBln1
UbrlzPms/+vom0uGGhD4gWGFWQEkeKvIEYUP+WdjavjTvlTVKSF5pOCk/14H4zWG
nrgfRlIuZ/H7Iw3LpZs7p1pVcslgPQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFAYT
v3owBBizW4nMgCJ13Lky5p61MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NTYwRDdENkI3NEMxMUYxOTk1MENGRDhDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACc6HcDBAec6AAwDQYJKoZI
hvcNAQELBQADggEBAEEjGYjVTkp46lF1yzpBi6W/OLfqiv2dKSJ5FuIlsG+EfF4n
qXQvunbsnO6N517x2F4hDbEONyppWi0soqTJzJt3hREuE5jgWb/DvBG0cTFQx9CE
sejZ5fFltPKGjC3McP/zwRNjAno/ebo+ZQRJZ850SkMl3fUNWIdqq4Ehn667NdLY
9FQnC7N0pimITdOTMShKY9vgAtPqZJUglEq/eAwnKA7+dMNRuCupYEBoQd8egSe7
vvLIzba+0H+ydtU0nX6ue6LINViCTHc98habzZbw8UkAs5DkZ6bYBZHo9RsO2l4E
qnkLtZPEs36WqedupU3RrL2EUMq1iWCwYwhVx3o=
-----END CERTIFICATE-----