Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40AF5B8AB71B11F19ACD33A2CE1D38B0.roa
File:                     40AF5B8AB71B11F19ACD33A2CE1D38B0.roa (raw, json)
Hash identifier:          BixltuqLBA7hSlLhyYW7XqCv08l1lIgD8dx9VCtfjKk=
Subject key identifier:   3A:B4:39:84:A4:C6:0F:97:1A:81:9B:4E:20:6E:6F:57:AD:AD:D6:7F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D860
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40AF5B8AB71B11F19ACD33A2CE1D38B0.roa
Signing time:             Wed 23 Sep 2026 06:51:51 +0000
ROA not before:           Wed 23 Sep 2026 06:51:46 +0000
ROA not after:            Mon 05 Oct 2026 06:51:46 +0000
asID:                     273155
IP address blocks:        156.236.192.0/19 maxlen: 24
                          156.236.224.0/19 maxlen: 24
                          156.236.224.0/24 maxlen: 24
                          156.236.225.0/24 maxlen: 24
                          156.236.226.0/24 maxlen: 24
                          156.236.227.0/24 maxlen: 24
                          156.236.228.0/24 maxlen: 24
                          156.236.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120928 (0x1d860)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 23 06:51:46 2026 GMT
            Not After : Oct  5 06:51:46 2026 GMT
        Subject: CN=6ab37706-d703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8f:3c:cd:fa:3f:62:8d:22:ca:4e:18:b8:6d:
                    4f:36:33:3c:45:2c:cd:a8:a5:5f:f3:a4:6b:51:da:
                    88:b4:6d:67:86:05:5d:5f:eb:90:b4:ad:5e:82:77:
                    4a:aa:35:d2:39:e5:5c:6f:f2:ea:ed:51:de:d3:50:
                    32:22:b6:70:07:94:49:a2:a2:a2:77:b0:cb:0b:41:
                    46:2b:59:10:0a:d9:a2:0a:1e:4a:ac:04:77:43:e3:
                    b6:07:9f:a9:12:f9:f1:6b:01:b3:c9:95:5e:fa:ce:
                    dc:8c:0a:5c:ca:0d:e5:92:06:9c:c4:40:f6:25:a3:
                    79:85:e9:ce:02:ea:94:5a:b3:97:4f:19:58:36:d9:
                    8a:45:1a:a7:27:a2:a3:83:29:04:93:2f:31:85:0d:
                    6c:cf:36:b7:d4:74:2f:7f:b8:e8:30:68:fa:74:dc:
                    64:66:ff:bf:89:43:34:45:a8:76:5d:e9:6d:f2:4e:
                    88:e7:05:e8:f5:7b:e9:e0:d4:e1:9b:77:15:38:ed:
                    cd:57:06:2e:15:d7:85:c6:69:a4:7f:f4:f8:c3:32:
                    8b:d5:8f:eb:34:d7:9f:43:de:d0:ae:34:40:09:f7:
                    5f:e7:fc:0a:c8:8d:f1:15:b6:1b:c1:c2:6a:4a:94:
                    e2:68:c4:8a:20:78:41:d3:84:41:be:76:54:0c:82:
                    08:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B4:39:84:A4:C6:0F:97:1A:81:9B:4E:20:6E:6F:57:AD:AD:D6:7F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40AF5B8AB71B11F19ACD33A2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1f:d5:a9:10:41:8a:51:8e:5a:52:a1:09:0a:04:43:3a:26:98:
         da:f3:2e:d0:e1:1d:63:7e:f0:66:18:c1:6a:6b:ec:82:ca:4a:
         de:cc:bd:5c:e3:4a:31:57:86:b2:a5:b3:42:94:12:1d:89:e4:
         05:42:fb:c2:af:b1:93:17:4e:21:47:77:4d:d5:5d:14:36:6f:
         dc:02:a9:e8:0e:f1:fc:cc:37:71:0c:52:6e:34:5e:84:8d:21:
         2b:26:2a:bf:67:9a:d8:5e:76:0d:8e:2d:8a:74:b6:51:b4:b5:
         40:44:35:4e:48:e7:f1:aa:c3:0c:ea:ad:13:45:a1:1a:92:63:
         ad:91:af:2c:1a:92:1a:2b:52:7c:46:db:5f:37:07:60:41:40:
         1e:fe:d1:fb:91:f4:31:14:cc:41:5f:55:cd:18:b0:ce:e0:2d:
         81:7e:50:b7:9e:14:e3:80:e1:70:e5:a3:c1:57:ec:96:c3:be:
         8b:d0:ab:a3:30:90:4b:6f:f1:95:eb:8d:3e:e0:be:be:e2:97:
         97:ea:f2:a1:42:92:39:92:95:8a:3a:d8:c6:4e:4f:40:cb:f6:
         21:7c:b4:95:98:85:a1:0b:c2:27:37:cc:25:a6:50:de:56:7f:
         37:c3:57:53:ca:d3:ae:5b:79:d3:ae:77:0d:2e:a4:b7:7a:30:
         75:85:59:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----