Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28815BDCAB7F11F1A7BE49DECE1D38B0.roa
File:                     28815BDCAB7F11F1A7BE49DECE1D38B0.roa (raw, json)
Hash identifier:          l0jIRxZd03DiBybgxthGySLtCyG1H3FWzvVVoYDoPz0=
Subject key identifier:   46:9C:75:28:3B:69:A2:98:A5:6B:26:A9:44:09:53:74:C7:01:BB:72
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D3FF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28815BDCAB7F11F1A7BE49DECE1D38B0.roa
Signing time:             Tue 08 Sep 2026 12:16:46 +0000
ROA not before:           Tue 08 Sep 2026 12:15:29 +0000
ROA not after:            Tue 07 Sep 2027 12:15:29 +0000
asID:                     328608
IP address blocks:        156.229.97.0/24 maxlen: 24
                          156.242.75.0/24 maxlen: 24
                          156.243.134.0/24 maxlen: 24
                          156.244.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119807 (0x1d3ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  8 12:15:29 2026 GMT
            Not After : Sep  7 12:15:29 2027 GMT
        Subject: CN=6a9ffcae-5c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:b6:68:a8:71:e5:a1:08:cb:40:8a:62:33:
                    4f:4c:7b:e7:ae:d6:ab:b9:2b:8d:86:27:a4:be:ea:
                    b3:69:56:f6:6c:b6:2a:12:3b:f5:bb:b8:fa:79:c6:
                    2d:ed:a2:73:2f:a5:8e:bd:5b:8f:7f:9b:3a:30:4f:
                    3f:74:cd:16:ba:0f:b3:7d:0f:32:c9:3c:99:48:63:
                    f8:ae:ab:d3:cb:f6:5b:7c:5e:22:ac:13:96:da:21:
                    6d:4b:81:8b:05:c4:c4:d7:cc:21:1d:67:d8:83:51:
                    25:42:cb:47:c2:88:3c:4c:fc:29:d4:28:09:7a:21:
                    bf:b4:ac:67:01:14:fc:5d:1a:c1:13:f9:f3:33:f4:
                    36:8a:07:7c:9f:9e:10:cf:30:29:c6:29:d3:76:3f:
                    51:88:eb:11:5b:8d:4b:7a:99:00:75:f0:b4:7d:42:
                    19:d1:fd:b0:a3:52:dc:71:35:0d:c8:11:09:7e:39:
                    a6:f5:15:d7:cf:73:26:3b:b6:08:5c:2b:97:53:6a:
                    9d:a6:86:d9:38:a9:6c:91:70:8b:b6:44:90:4e:0c:
                    50:23:98:02:9a:5a:ab:6c:dc:15:77:88:e5:be:5a:
                    c8:28:95:2a:58:8d:e6:97:36:71:9c:d4:59:65:99:
                    ed:a9:28:92:a0:78:c2:e7:1f:75:4c:37:f7:5e:5d:
                    39:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9C:75:28:3B:69:A2:98:A5:6B:26:A9:44:09:53:74:C7:01:BB:72
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28815BDCAB7F11F1A7BE49DECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.97.0/24
                  156.242.75.0/24
                  156.243.134.0/24
                  156.244.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:81:8e:f1:d7:8e:06:33:2b:2d:aa:8f:4a:d2:c6:04:8f:9e:
         b6:58:0b:21:e9:7d:b6:86:e6:77:77:4b:9a:ce:ea:1f:b1:89:
         e6:48:ca:9f:f0:de:d5:41:20:38:fc:64:b3:dd:38:69:44:40:
         f4:b4:0e:3a:b1:3f:b5:a4:6a:66:e7:c8:1b:41:6a:7d:b2:0f:
         a1:a5:98:45:ec:2c:60:31:94:7d:c9:9e:e1:10:d3:2b:43:5e:
         75:69:c9:3b:1d:49:91:0a:88:ff:56:77:a2:ad:9a:5d:58:dd:
         64:70:21:5a:be:75:c4:ca:1f:ec:71:03:c1:b1:b4:7f:b6:9c:
         81:11:9b:9f:46:c5:fc:55:28:53:e8:b1:65:23:98:da:d8:6b:
         d9:e6:64:3b:11:d3:18:08:2f:de:40:03:43:7e:a2:db:7f:0b:
         07:5b:89:d4:ae:77:01:f5:d6:34:1a:3d:90:69:a0:06:c7:fd:
         07:1d:ff:5b:45:ce:72:43:5f:15:ed:a8:c0:c3:f2:fb:16:0c:
         ff:e2:75:25:6a:a5:d5:fa:d8:b0:54:8d:dd:a9:23:55:73:41:
         d2:36:c4:5b:5d:ff:23:d3:e1:97:f7:bc:c9:29:d8:86:50:62:
         a0:c9:cc:2d:75:b8:38:85:98:3b:72:a2:b1:39:7c:65:f2:3d:
         2b:d7:7b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----