Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04D94AF0B59311F1B575731DCF1D38B0.roa
File:                     04D94AF0B59311F1B575731DCF1D38B0.roa (raw, json)
Hash identifier:          R3/1P4jmpWi17lC135nUq0CYXQufBmB0W8RkL8mb/1o=
Subject key identifier:   A1:C9:9D:0D:5F:FD:EE:77:B7:C5:D1:6C:A7:FA:15:15:73:D6:12:8F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D77A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04D94AF0B59311F1B575731DCF1D38B0.roa
Signing time:             Mon 21 Sep 2026 08:04:07 +0000
ROA not before:           Mon 21 Sep 2026 08:04:03 +0000
ROA not after:            Thu 01 Oct 2026 08:04:03 +0000
asID:                     138152
IP address blocks:        156.227.232.0/21 maxlen: 24
                          156.227.232.0/24 maxlen: 24
                          156.227.233.0/24 maxlen: 24
                          156.227.234.0/24 maxlen: 24
                          156.227.235.0/24 maxlen: 24
                          156.227.236.0/24 maxlen: 24
                          156.227.237.0/24 maxlen: 24
                          156.227.238.0/24 maxlen: 24
                          156.227.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120698 (0x1d77a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 21 08:04:03 2026 GMT
            Not After : Oct  1 08:04:03 2026 GMT
        Subject: CN=6ab0e4f7-19fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bd:70:8f:9d:84:dd:f3:45:e5:3b:29:f1:74:
                    d7:4a:a8:4f:15:d9:ab:0f:66:dc:6e:b0:43:0d:65:
                    35:db:e1:82:86:45:b5:81:08:b2:73:91:bf:2c:88:
                    80:8d:6b:fe:4f:a3:b2:9c:6f:e7:5d:7b:af:41:d8:
                    43:d0:7a:96:c1:bd:14:6c:48:ad:b1:3d:8a:26:38:
                    68:66:44:13:6a:c9:4b:c9:47:e9:25:7f:8d:17:2c:
                    79:56:df:56:c6:56:f6:38:49:bf:57:fa:35:21:f1:
                    58:79:fb:48:8b:f3:fa:5d:b7:7b:05:79:f9:1b:af:
                    a9:d3:4c:28:ee:cb:dd:43:30:75:6a:7d:0d:c0:3e:
                    46:3d:97:cd:19:f6:77:66:92:78:59:a5:bd:9c:3f:
                    14:92:24:fe:74:e2:97:55:89:b3:ce:b0:23:41:e1:
                    5d:64:3b:6f:7f:7a:41:71:9b:3b:86:4b:8f:1d:83:
                    03:97:0a:20:55:e1:49:2e:39:f0:39:a7:7d:36:eb:
                    f2:27:9f:cf:08:2d:e3:ed:6e:51:bc:c9:44:1a:f8:
                    1c:31:fa:16:be:e6:dd:dd:d3:44:8c:af:a9:d6:c8:
                    e1:73:c6:43:34:37:a8:4b:8a:f1:9c:6b:c9:57:c3:
                    d5:d5:96:dd:93:b1:84:e9:49:e0:7e:0f:a2:f8:46:
                    a8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C9:9D:0D:5F:FD:EE:77:B7:C5:D1:6C:A7:FA:15:15:73:D6:12:8F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04D94AF0B59311F1B575731DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.227.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:e7:f5:3b:1c:13:92:f7:63:f1:35:50:27:16:38:a8:f0:30:
         77:27:fe:2b:d8:e6:55:7f:ac:1f:54:41:89:b2:2f:d5:b7:9b:
         0c:a3:0d:37:6b:6c:38:ab:d9:94:af:19:5d:16:8f:46:fc:92:
         50:97:ba:53:4a:c6:ac:0c:90:d7:9e:bb:1d:71:05:2e:e4:54:
         c4:ce:01:42:64:0a:9d:9d:1e:82:8e:79:a2:4d:03:45:bd:4c:
         c1:c1:aa:ed:60:4d:97:9c:77:01:1b:23:0c:17:ea:e1:57:01:
         78:25:7a:ef:c7:41:4a:2d:d5:7c:1c:c4:67:30:f2:1d:73:1a:
         58:ba:c4:54:fa:93:f9:ad:46:6e:ff:d5:81:4c:8a:8c:e0:08:
         f4:12:e0:bf:8c:28:44:7d:36:48:e7:d3:b3:a7:a4:0e:78:0f:
         d3:81:fa:78:de:7e:3f:ea:f6:97:c7:05:6f:af:e9:10:c7:09:
         b4:64:85:fe:da:fa:f7:13:44:94:19:e2:03:98:b3:3c:d8:d6:
         71:f1:03:d6:f1:00:cd:78:c9:f3:e0:ac:f9:6b:8f:d5:31:70:
         94:8d:da:2b:36:09:26:93:3f:64:b3:f7:49:12:f1:d4:a3:05:
         15:d7:b9:8a:ef:7c:9e:e6:27:14:39:72:82:32:61:cb:30:20:
         24:28:92:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----