Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/121DA776B10911F19F7BE2E8CE1D38B0.roa
File:                     121DA776B10911F19F7BE2E8CE1D38B0.roa (raw, json)
Hash identifier:          F6YsuYj+U9v3Ai+4wqQow13uz/HoIPgyFgGjl1nEABo=
Subject key identifier:   AB:48:73:CD:BD:23:8D:3C:C7:55:61:9B:29:E7:83:25:BF:E2:E0:4E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D677
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/121DA776B10911F19F7BE2E8CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 13:26:34 +0000
ROA not before:           Tue 15 Sep 2026 13:26:30 +0000
ROA not after:            Sat 24 Oct 2026 13:26:30 +0000
asID:                     395793
IP address blocks:        156.225.2.0/23 maxlen: 24
                          156.225.50.0/23 maxlen: 24
                          156.230.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120439 (0x1d677)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 13:26:30 2026 GMT
            Not After : Oct 24 13:26:30 2026 GMT
        Subject: CN=6aa9478a-99b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:aa:da:3a:96:d1:47:d5:c3:6f:96:1b:e4:e6:
                    e2:16:3f:28:7b:de:dd:b7:42:ec:16:be:4b:8f:07:
                    fd:89:17:79:f1:00:6b:fc:14:64:91:85:0f:1e:bb:
                    17:cd:72:06:37:00:1a:bc:c6:49:d2:fb:41:b1:19:
                    91:e7:af:b7:1a:0e:1e:80:4c:93:ab:c5:28:33:11:
                    fa:7e:9c:55:8d:6d:02:d0:2a:70:30:f7:83:94:e8:
                    1c:35:da:c2:f3:ed:82:5a:a1:46:27:dc:0e:02:74:
                    65:be:8f:21:cb:24:50:4c:d8:2c:9d:82:3d:34:93:
                    56:be:cc:f3:62:d0:84:ad:f6:47:3d:a7:05:8e:87:
                    08:0a:de:80:86:6b:13:5a:30:35:34:42:1b:76:9c:
                    b7:93:a7:bb:41:a6:84:e3:44:4c:81:e9:a6:af:eb:
                    dc:b5:7d:4b:76:67:8d:de:d8:2f:a7:59:28:34:e6:
                    bc:bd:06:d5:79:c8:23:ef:da:c5:5c:e0:66:5c:ff:
                    7e:7e:a6:5b:e4:9e:45:a5:63:55:d6:a1:7a:3f:c9:
                    13:1d:bb:d5:bc:ce:66:d7:8a:84:4f:bd:49:7d:b3:
                    9e:3a:48:65:57:92:ff:39:37:62:ad:90:96:9f:ba:
                    ef:61:2c:a3:14:99:65:2c:af:e3:57:54:b8:fd:1d:
                    e8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:48:73:CD:BD:23:8D:3C:C7:55:61:9B:29:E7:83:25:BF:E2:E0:4E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/121DA776B10911F19F7BE2E8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.2.0/23
                  156.225.50.0/23
                  156.230.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:9b:78:db:5a:3d:8a:ba:ea:26:be:08:43:e5:ce:07:7a:cf:
         55:19:db:35:7d:f7:b9:4e:2a:ac:a6:15:7b:47:47:fe:d6:c2:
         ec:fa:5e:44:6c:35:95:2a:0f:1e:a3:da:ed:dc:be:04:29:6e:
         78:1e:a6:bb:04:41:bd:94:e2:62:37:01:55:5d:6c:1d:ce:01:
         42:bf:98:3c:0b:c7:74:a9:09:bc:f3:be:73:8b:54:0d:96:cd:
         30:59:24:97:10:b1:a2:ee:b6:7b:d9:bb:d8:4b:d1:d1:89:24:
         52:8a:e8:fa:7e:7a:4f:42:16:fa:7a:da:66:6f:5a:f0:0c:66:
         d5:ff:a2:55:f6:1e:4c:3f:47:23:7b:f0:3e:3b:40:16:ae:ec:
         96:fd:df:15:ca:30:0e:87:2f:53:fd:84:bb:37:1e:8c:0a:7e:
         39:44:36:8b:57:68:c9:ee:8e:0d:ea:d0:08:9d:92:35:e1:7e:
         dc:fd:49:d5:05:09:c5:44:09:8b:c1:c1:c7:5f:56:64:7f:3d:
         23:68:43:97:e3:93:bf:9e:35:b7:33:1c:5b:09:b8:e7:e2:88:
         b4:47:d5:b8:88:92:12:ee:47:93:5d:8e:62:83:c8:d1:77:cf:
         78:52:93:a8:0b:ff:84:8e:8f:07:74:eb:d2:a5:0e:1e:53:07:
         48:f6:a6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----