Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA90D85AAC1A11F1A8723611CF1D38B0.roa
File:                     AA90D85AAC1A11F1A8723611CF1D38B0.roa (raw, json)
Hash identifier:          0KPzTxt3B8OnvWVvKJNX89nSOK9M6de/l6XQMmhKrlY=
Subject key identifier:   CF:D1:8A:5B:D1:70:0E:94:53:E5:0D:F6:5B:57:01:97:A2:18:93:5F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D433
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA90D85AAC1A11F1A8723611CF1D38B0.roa
Signing time:             Wed 09 Sep 2026 06:49:56 +0000
ROA not before:           Wed 09 Sep 2026 06:49:52 +0000
ROA not after:            Fri 09 Oct 2026 06:49:52 +0000
asID:                     274065
IP address blocks:        156.238.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119859 (0x1d433)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  9 06:49:52 2026 GMT
            Not After : Oct  9 06:49:52 2026 GMT
        Subject: CN=6aa10194-7b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:67:2c:66:66:27:ef:7a:62:f9:14:99:ec:
                    d4:88:9d:8b:42:82:ec:0b:92:00:9d:4c:0c:69:94:
                    0b:32:44:15:f1:ea:22:2d:a2:0b:ba:d1:6f:0a:3f:
                    7d:0a:1f:d0:b4:81:3e:88:58:2d:98:54:ed:48:d8:
                    da:3c:76:97:fa:96:94:55:1b:99:fa:42:db:48:e5:
                    89:6e:17:a9:e3:6b:29:7d:58:dc:0c:54:f4:b9:b7:
                    c6:28:c8:81:16:26:0d:73:2e:60:d4:57:d8:66:1d:
                    d9:34:4d:75:6a:16:33:e2:61:1b:40:75:f0:5f:13:
                    fb:7b:75:06:5d:af:76:dd:6c:25:cd:d6:3c:96:16:
                    65:50:36:df:53:19:07:ee:9c:70:a2:e2:c4:5a:85:
                    37:cb:a1:a2:5e:0c:e6:5b:f7:da:41:c9:bb:4d:df:
                    92:01:6d:64:7a:05:cd:28:fa:e8:40:45:e5:1f:57:
                    e6:94:cb:32:c1:09:2f:58:40:27:f6:c7:06:36:df:
                    d0:c2:44:80:14:0b:67:47:86:f8:a9:54:68:90:7e:
                    b2:a1:86:65:38:35:cd:ca:57:6f:40:5f:af:2a:35:
                    70:87:6b:6a:10:5d:59:6d:0c:da:58:97:37:e0:63:
                    f3:ae:6b:3c:7e:4d:dd:50:c0:37:e0:12:b3:48:14:
                    78:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D1:8A:5B:D1:70:0E:94:53:E5:0D:F6:5B:57:01:97:A2:18:93:5F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA90D85AAC1A11F1A8723611CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:38:88:21:31:2c:72:02:9b:85:12:37:7a:70:69:3c:70:32:
         ea:4f:e6:70:39:69:45:b8:ec:46:f7:c6:11:c8:df:2f:3d:39:
         3d:33:66:48:c3:01:7d:2e:69:67:fa:03:1c:4f:7f:70:72:63:
         87:8a:dd:d0:ef:12:6b:3f:5b:54:f9:ab:70:34:b4:aa:41:7f:
         91:e6:da:9f:2f:e2:1b:c9:62:1a:1e:41:7a:3f:10:05:35:a1:
         dd:77:85:83:6e:35:df:f7:14:f3:15:f9:c8:07:a2:5e:19:1f:
         dc:83:83:fc:dd:d2:88:1d:12:ea:44:ab:46:03:60:31:dd:8c:
         1c:56:23:19:16:fa:f5:8d:20:c7:d7:38:2c:32:e9:02:3a:70:
         3a:7d:dd:f0:8d:b1:44:55:86:92:e1:9c:54:78:4e:76:45:2b:
         7e:fb:de:49:54:26:74:23:20:bf:cc:38:c1:92:5c:6c:19:4a:
         61:9d:48:0c:12:f6:d2:9d:f7:fa:5f:f8:0d:89:4f:2a:a1:91:
         85:1f:4d:f3:f7:bb:51:2a:36:46:dc:14:53:fd:ec:bf:93:6f:
         30:7b:42:23:bf:2d:c0:e4:34:5d:af:df:0c:eb:67:69:4b:5b:
         1d:77:d8:25:d4:16:ee:f0:d9:d3:99:63:2b:22:96:d4:9b:60:
         c0:66:b5:01
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdQzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTA5MDY0OTUyWhcNMjYxMDA5MDY0OTUyWjAYMRYw
FAYDVQQDEw02YWExMDE5NC03Yjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApmhnLGZmJ+96YvkUmezUiJ2LQoLsC5IAnUwMaZQLMkQV8eoiLaILutFv
Cj99Ch/QtIE+iFgtmFTtSNjaPHaX+paUVRuZ+kLbSOWJbhep42spfVjcDFT0ubfG
KMiBFiYNcy5g1FfYZh3ZNE11ahYz4mEbQHXwXxP7e3UGXa923WwlzdY8lhZlUDbf
UxkH7pxwouLEWoU3y6GiXgzmW/faQcm7Td+SAW1kegXNKProQEXlH1fmlMsywQkv
WEAn9scGNt/QwkSAFAtnR4b4qVRokH6yoYZlODXNyldvQF+vKjVwh2tqEF1ZbQza
WJc34GPzrms8fk3dUMA34BKzSBR4oQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFM/R
ilvRcA6UU+UN9ltXAZeiGJNfMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BQTkwRDg1QUFDMUExMUYxQTg3MjM2MTFDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO5RMA0GCSqGSIb3DQEBCwUA
A4IBAQAeOIghMSxyApuFEjd6cGk8cDLqT+ZwOWlFuOxG98YRyN8vPTk9M2ZIwwF9
Lmln+gMcT39wcmOHit3Q7xJrP1tU+atwNLSqQX+R5tqfL+IbyWIaHkF6PxAFNaHd
d4WDbjXf9xTzFfnIB6JeGR/cg4P83dKIHRLqRKtGA2Ax3YwcViMZFvr1jSDH1zgs
MukCOnA6fd3wjbFEVYaS4ZxUeE52RSt++95JVCZ0IyC/zDjBklxsGUphnUgMEvbS
nff6X/gNiU8qoZGFH03z97tRKjZG3BRT/ey/k28we0Ijvy3A5DRdr98M62dpS1sd
d9gl1Bbu8NnTmWMrIpbUm2DAZrUB
-----END CERTIFICATE-----