Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CB5155CB01811F1A38F23BBCE1D38B0.roa
File:                     2CB5155CB01811F1A38F23BBCE1D38B0.roa (raw, json)
Hash identifier:          Slj590VV4RpWUyr5rxAReqvG/RWi4aVVqJU2G6VSrXY=
Subject key identifier:   A9:41:5A:B8:92:C0:0D:7F:02:15:4A:AE:DC:08:77:0D:53:0A:D6:60
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D5F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CB5155CB01811F1A38F23BBCE1D38B0.roa
Signing time:             Mon 14 Sep 2026 08:42:10 +0000
ROA not before:           Mon 14 Sep 2026 08:42:06 +0000
ROA not after:            Thu 05 Nov 2026 08:42:06 +0000
asID:                     402506
IP address blocks:        156.238.224.0/21 maxlen: 24
                          156.238.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120304 (0x1d5f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 14 08:42:06 2026 GMT
            Not After : Nov  5 08:42:06 2026 GMT
        Subject: CN=6aa7b362-9671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:03:9a:c2:04:c4:51:5e:46:f2:ac:d8:b8:52:
                    c6:02:a4:85:1d:c8:1f:47:f7:2c:16:0e:38:02:3f:
                    9b:25:fd:43:63:68:7f:54:08:8b:b9:0e:01:77:bc:
                    9a:e3:af:31:5b:0b:42:ac:51:2b:b4:fc:29:b2:42:
                    e4:a7:cb:12:99:59:4f:98:4e:66:8e:09:f2:af:a0:
                    a4:1d:55:41:11:d8:64:a8:f5:6f:58:1f:37:1f:d4:
                    3c:33:0e:16:57:59:da:0f:3b:20:f5:67:00:4e:d0:
                    da:eb:e9:80:1a:4b:56:6c:5c:76:da:62:a1:d6:4b:
                    cb:91:f4:95:d4:11:cc:75:4e:32:83:ad:de:c8:a3:
                    d7:ea:ef:78:4f:ee:36:e0:75:1c:2a:de:6f:c5:df:
                    2f:9b:90:7a:50:47:cd:36:f2:31:43:56:a5:df:eb:
                    46:73:dd:ec:40:34:f0:03:a9:79:11:d4:da:01:d4:
                    79:f9:b6:49:e6:d0:5b:99:ee:c3:28:4b:1a:78:b8:
                    5f:66:e3:2e:84:bd:ad:d6:af:62:47:fa:33:fd:b6:
                    7c:ff:82:33:b4:c4:a1:9f:31:88:12:23:73:50:1d:
                    15:64:53:7b:98:f6:2e:c6:0f:f5:3c:07:07:b5:3b:
                    e1:d9:ed:2a:75:3a:5e:01:91:69:37:a0:aa:22:fc:
                    5d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:41:5A:B8:92:C0:0D:7F:02:15:4A:AE:DC:08:77:0D:53:0A:D6:60
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CB5155CB01811F1A38F23BBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.224.0/21
                  156.238.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         73:a7:8f:6f:68:8f:a5:b1:dc:f5:0b:9b:d4:6e:88:04:b7:35:
         cc:3d:b0:24:9c:55:d6:fc:f1:f8:7c:fd:9b:2f:04:05:32:b3:
         19:14:39:ac:d6:88:22:87:11:75:85:91:54:09:03:17:58:80:
         28:98:cd:9a:84:e0:2e:dd:d3:0c:82:05:62:d9:01:fb:46:98:
         da:0c:48:aa:ad:f9:be:69:54:04:5d:17:c6:ad:d3:76:ea:9e:
         70:81:53:1b:1f:24:b8:5e:31:3a:11:ce:24:93:e3:5f:e7:2c:
         2d:59:2b:11:30:09:24:78:b1:88:87:37:47:97:b1:88:e8:1d:
         ce:ff:2a:8e:9b:9d:e1:39:27:1d:c4:00:c1:c2:20:fa:1f:3c:
         2b:ce:7b:5f:e6:17:48:cb:8a:bf:e6:c9:4e:bb:34:48:06:76:
         bc:b9:76:6a:07:ba:34:1d:80:9f:79:b0:8b:78:eb:81:f9:98:
         9c:d5:fa:1b:cf:29:6b:69:26:22:d1:02:2d:0a:e4:fc:33:6d:
         6c:82:9d:f7:24:9f:72:c6:b9:32:c9:8d:ec:86:30:b7:7a:1d:
         89:fe:9f:0d:32:04:de:af:b2:dd:4e:e9:39:bd:8c:8b:8f:82:
         94:e4:3f:b4:0e:10:b4:75:fc:02:df:45:ad:a0:5b:d0:af:79:
         3a:4d:8a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----