Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/683BB8BAB72011F1A791F2C2CE1D38B0.roa
File:                     683BB8BAB72011F1A791F2C2CE1D38B0.roa (raw, json)
Hash identifier:          E1qB/dbzM/Ssdv1JJx4ojNzybOFvAV5aJbPdfbdFg8s=
Subject key identifier:   5B:AA:63:F8:B6:1E:DA:E3:09:4A:BD:DB:2D:04:49:11:09:F7:57:64
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D866
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/683BB8BAB72011F1A791F2C2CE1D38B0.roa
Signing time:             Wed 23 Sep 2026 07:28:44 +0000
ROA not before:           Wed 23 Sep 2026 07:28:40 +0000
ROA not after:            Sat 25 Sep 2027 07:28:40 +0000
asID:                     135097
IP address blocks:        156.250.4.0/22 maxlen: 24
                          156.250.8.0/21 maxlen: 24
                          156.250.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120934 (0x1d866)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 23 07:28:40 2026 GMT
            Not After : Sep 25 07:28:40 2027 GMT
        Subject: CN=6ab37fac-0c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b9:7a:6b:74:fc:a8:0b:09:c2:64:bb:21:5b:
                    7d:35:0b:b8:93:f9:22:39:45:8e:91:c5:4e:a7:d9:
                    70:d8:83:4c:30:c7:c5:bc:0d:af:ea:4c:c5:e9:2e:
                    ff:8a:a6:21:e2:3c:64:71:08:9b:c4:f2:67:f6:9d:
                    c6:d8:be:0e:83:6e:d1:92:e2:9f:70:7e:e1:cc:76:
                    39:7f:92:b9:ee:64:f1:dc:3b:09:b3:e1:2b:0e:35:
                    63:63:b5:2c:57:c7:2a:4f:07:37:34:03:f7:6d:a2:
                    19:ac:7e:81:92:06:e4:4b:48:68:04:19:da:62:64:
                    c5:16:07:55:14:57:d5:2e:4e:df:e8:91:42:d4:4b:
                    32:c1:16:86:8b:f1:7b:97:90:72:d3:6b:46:1d:e1:
                    b9:65:fa:a7:f0:85:75:8d:81:c8:fe:0f:41:f5:55:
                    18:bb:0f:ea:62:5f:94:a0:d3:7f:b7:15:4f:c5:b1:
                    04:f0:4c:0d:95:ba:59:ce:87:a9:71:ae:97:87:47:
                    20:45:d9:57:76:bd:17:8a:76:e8:b8:b0:e6:23:92:
                    d8:7a:9e:d1:fe:a3:8a:9f:4c:5f:02:10:07:6d:b3:
                    2e:ee:1b:6c:71:e9:99:f5:75:17:e9:74:60:96:60:
                    22:16:bf:ad:25:43:f2:44:17:32:2f:39:57:9f:7a:
                    f6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AA:63:F8:B6:1E:DA:E3:09:4A:BD:DB:2D:04:49:11:09:F7:57:64
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/683BB8BAB72011F1A791F2C2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.250.4.0-156.250.31.255

    Signature Algorithm: sha256WithRSAEncryption
         a2:47:9c:73:ee:78:28:e2:f2:24:0e:8a:42:71:18:87:1d:b6:
         bf:a4:a1:a6:77:d9:d0:b9:b9:fe:c4:30:fe:89:bc:45:de:83:
         06:63:be:d8:56:8e:26:2d:2e:28:24:97:d7:2b:a8:6c:e0:0e:
         e5:0a:06:d6:a7:d4:25:53:8f:75:8b:42:83:3d:93:30:61:77:
         31:93:2f:80:b7:f9:d6:52:f4:03:48:48:75:da:67:cb:c1:79:
         60:c3:c0:65:8e:a9:d1:fc:5c:0a:10:68:21:35:a9:5d:64:37:
         20:28:94:4d:f0:57:fd:49:de:79:65:e8:f6:73:6d:29:93:cb:
         20:51:50:ea:7b:bb:a8:2c:dc:ba:a0:6b:1c:0f:f6:a5:cd:44:
         fd:3f:2c:7c:95:9c:48:4d:eb:0a:13:c3:8f:89:8d:d3:10:76:
         46:36:9d:27:47:e1:05:a7:6e:b5:32:8c:8b:a8:09:2b:71:ad:
         a7:d5:96:37:82:28:d3:5b:58:de:69:1a:5d:7a:9a:44:9f:0d:
         fe:94:ca:71:96:84:c3:57:62:fd:79:c4:83:8e:e4:a9:63:4a:
         2c:68:1e:0c:7c:fa:53:9a:bb:b0:32:d1:28:12:7c:97:ba:a9:
         42:af:b1:0c:f9:db:d4:c5:f9:7b:9f:02:34:70:82:d3:44:e4:
         18:da:28:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----