Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A46E2ECB65011F1AC8570F3CE1D38B0.roa
File:                     4A46E2ECB65011F1AC8570F3CE1D38B0.roa (raw, json)
Hash identifier:          /SRBZ4F0giM1KQTKSmSUvC4WFlbBClZRxnXR7YpoKpM=
Subject key identifier:   31:10:0A:7C:D1:17:57:ED:28:C0:E6:36:B9:88:6D:12:73:63:72:CA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D7AB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A46E2ECB65011F1AC8570F3CE1D38B0.roa
Signing time:             Tue 22 Sep 2026 06:38:59 +0000
ROA not before:           Tue 22 Sep 2026 06:38:55 +0000
ROA not after:            Mon 12 Oct 2026 06:38:55 +0000
asID:                     203545
IP address blocks:        156.233.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120747 (0x1d7ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 06:38:55 2026 GMT
            Not After : Oct 12 06:38:55 2026 GMT
        Subject: CN=6ab22283-3cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:34:2f:59:0c:91:36:7c:7b:cc:0a:33:d9:f7:
                    16:21:78:fd:bd:9b:a7:79:d6:87:23:64:e7:3b:27:
                    a2:56:e9:fa:a4:a3:f6:eb:82:56:18:f4:14:a8:70:
                    d1:bc:b6:62:fc:c7:27:4d:a9:72:70:7a:c2:07:6d:
                    6e:12:36:6e:62:df:9a:68:2f:5c:ed:cc:eb:cb:b0:
                    17:38:64:0c:4d:6a:68:22:6e:81:ab:85:eb:d0:83:
                    98:03:10:23:53:bc:a6:9a:42:3c:1a:e1:42:1c:cf:
                    90:5f:4a:b0:08:66:a0:ce:57:26:cb:50:ea:60:12:
                    72:50:ab:e7:a8:bc:a4:fe:2e:d0:e4:1f:55:1b:f2:
                    79:a6:91:ee:ca:b8:d8:75:9b:d1:0f:6f:2f:9f:8e:
                    06:ed:41:0c:70:eb:7c:48:c3:24:26:3d:0f:08:96:
                    4f:6b:7b:26:96:93:0c:00:11:fd:31:83:dd:46:84:
                    94:c8:39:9b:f8:ad:bc:d4:91:8b:ed:af:d9:7e:a0:
                    33:36:0b:60:3f:dc:0e:c3:79:98:41:8f:71:25:bc:
                    24:22:28:fa:22:27:b2:ba:f2:b2:76:da:53:f4:97:
                    3a:9a:7c:a4:e8:5c:20:b7:30:6b:64:cf:d0:5f:e1:
                    cb:54:01:a5:c9:65:5a:63:e0:46:de:68:1b:ec:fc:
                    59:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:10:0A:7C:D1:17:57:ED:28:C0:E6:36:B9:88:6D:12:73:63:72:CA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A46E2ECB65011F1AC8570F3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:30:5a:c4:75:89:5a:a9:b4:ee:93:70:00:07:6e:8f:f6:c4:
         4f:18:e9:47:f8:79:67:c6:07:63:2a:44:54:64:16:32:76:a8:
         c9:06:33:71:ea:fb:a9:a9:6f:64:ed:fd:c6:4e:fa:b1:9f:5d:
         e9:9b:c9:56:e6:79:05:48:27:2e:db:d6:bd:a3:ad:c0:37:05:
         1d:82:3a:4e:e2:ad:2f:5b:e1:61:46:e3:ed:09:2c:b4:94:2d:
         b3:21:57:d1:9c:ba:36:81:b5:e7:97:c1:f1:46:07:34:0b:9e:
         10:1f:3e:6e:7f:f5:47:f6:a1:7f:81:90:37:df:7c:9a:3e:e5:
         6c:79:ad:a4:bb:27:fd:40:19:0e:10:fb:d4:e0:23:70:7b:c4:
         b3:4d:a9:aa:19:5c:24:01:8f:58:9d:a7:7d:78:1b:d1:a8:7e:
         71:ff:b2:52:b4:90:4b:2c:46:0a:ab:ee:dc:70:2a:e5:28:c7:
         70:16:45:e3:9f:93:d7:7c:61:84:21:00:b2:d3:a4:20:3b:ce:
         30:e3:90:b2:2a:61:b2:1e:96:4d:38:8f:66:72:c3:17:66:63:
         e3:06:0f:60:28:92:db:53:51:6a:2a:8f:3f:2e:df:d5:dd:7c:
         eb:ea:e9:7d:e2:fe:af:1f:73:51:dc:8a:8e:f0:79:f2:49:37:
         87:20:d7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----