Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34E56148A69811F187EFC5B6CE1D38B0.roa
File:                     34E56148A69811F187EFC5B6CE1D38B0.roa (raw, json)
Hash identifier:          H6L96Cz79azStVNURRR5KfqWT1/OYHELeZScZXUIdCc=
Subject key identifier:   67:C5:D8:74:B4:98:A8:F9:AB:85:27:4B:D5:67:61:EE:D0:DE:57:2F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D236
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34E56148A69811F187EFC5B6CE1D38B0.roa
Signing time:             Wed 02 Sep 2026 06:33:28 +0000
ROA not before:           Wed 02 Sep 2026 06:33:24 +0000
ROA not after:            Sat 01 Sep 2029 06:33:24 +0000
asID:                     17561
IP address blocks:        156.229.0.0/24 maxlen: 24
                          156.240.192.0/24 maxlen: 24
                          156.240.193.0/24 maxlen: 24
                          156.240.194.0/24 maxlen: 24
                          156.240.195.0/24 maxlen: 24
                          156.240.196.0/24 maxlen: 24
                          156.240.197.0/24 maxlen: 24
                          156.240.198.0/24 maxlen: 24
                          156.240.199.0/24 maxlen: 24
                          156.240.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119350 (0x1d236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  2 06:33:24 2026 GMT
            Not After : Sep  1 06:33:24 2029 GMT
        Subject: CN=6a97c338-f293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a5:7d:1f:22:2a:c6:6b:a5:db:56:52:a7:df:
                    40:c0:eb:d1:dd:a1:d6:8d:b8:7a:fd:20:26:65:56:
                    6d:b5:04:ce:d6:fc:0e:13:90:4d:da:df:86:b8:50:
                    99:1f:ce:16:b5:fe:e5:47:5d:3d:77:56:9f:b3:5d:
                    5c:cf:6d:ac:0e:9e:38:1e:41:8e:8c:59:5b:6f:6b:
                    3c:d9:f9:63:b5:59:29:2f:8e:31:be:ca:7c:00:ed:
                    9d:7d:65:62:46:bb:d1:bd:20:18:d6:58:7f:51:8f:
                    f7:5d:14:54:16:10:2a:69:34:05:f4:4e:f9:0c:da:
                    c7:37:60:e8:06:fc:fa:90:a2:c6:67:52:4b:a2:62:
                    62:95:1f:0d:7e:b6:61:ef:56:4d:16:6e:99:9b:41:
                    9e:0a:ff:04:92:da:75:51:9e:a8:db:92:f1:cb:74:
                    f9:17:08:9e:2a:ea:ea:12:79:d0:94:1c:16:37:1b:
                    eb:7c:0d:53:05:8a:23:a6:04:e3:97:75:06:fa:80:
                    32:ab:37:eb:6e:a6:8c:3f:6c:b3:d2:a4:69:fc:22:
                    ce:46:97:bb:81:c0:65:60:a4:06:8a:51:14:34:f8:
                    8d:13:a2:d8:1e:f0:4c:7f:95:29:31:8a:44:01:87:
                    ee:1b:69:c4:d9:d8:b5:bb:ac:a6:d3:56:33:66:88:
                    89:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C5:D8:74:B4:98:A8:F9:AB:85:27:4B:D5:67:61:EE:D0:DE:57:2F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34E56148A69811F187EFC5B6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.0.0/24
                  156.240.192.0-156.240.200.255

    Signature Algorithm: sha256WithRSAEncryption
         87:17:d9:0e:04:90:b1:bf:bd:d3:fa:69:4c:90:19:3c:4b:5e:
         f0:d7:e0:72:e3:4e:16:60:55:8c:cc:b8:6f:56:8e:84:5d:c5:
         23:7e:df:8b:f6:33:dc:94:70:f3:f1:f8:0e:2b:5d:f1:b5:aa:
         46:52:a5:ff:71:d9:fa:38:e4:e8:3d:6c:7b:53:0a:fc:b4:2d:
         85:83:ad:09:65:32:94:5b:2f:a6:6f:b9:94:e7:b9:6b:5f:7c:
         e5:07:8e:83:0c:e0:17:23:91:fe:48:dd:98:78:b2:94:fc:29:
         e7:d1:68:e8:4b:ba:0b:e5:c5:5c:46:c9:25:b7:b3:44:63:fd:
         91:78:23:f4:28:3f:6a:c2:b8:f9:8d:9b:ef:28:02:9d:93:41:
         40:be:1a:ab:14:0b:2f:42:14:9e:a4:34:9e:6d:0f:f3:74:8f:
         ba:aa:a7:bc:4a:a0:14:19:d7:dd:52:81:1e:20:b0:19:59:b1:
         9d:f1:b4:22:0b:5a:f5:c5:fa:1f:ca:4b:a6:bb:fe:5e:b1:c1:
         48:c9:76:0a:69:85:9f:63:ce:e7:bf:5c:e0:4d:aa:1d:6e:2d:
         6b:57:74:f8:bb:73:10:cf:98:55:a5:cf:2a:8c:3b:e8:fc:2b:
         84:e1:b5:30:b1:fa:61:8c:cd:ab:fe:44:7f:f2:e6:51:30:a9:
         c3:e5:56:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----