Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/634F8B8EB71A11F1B2B44F1ACF1D38B0.roa
File:                     634F8B8EB71A11F1B2B44F1ACF1D38B0.roa (raw, json)
Hash identifier:          Ht/9J2X2qYCVcHuMWScCO9JUFD0tmUiYwORNGgwbwNo=
Subject key identifier:   BD:6F:D8:51:AE:39:9D:51:CB:C1:F5:E4:25:B3:31:C7:F6:0B:32:1F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D85E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/634F8B8EB71A11F1B2B44F1ACF1D38B0.roa
Signing time:             Wed 23 Sep 2026 06:45:39 +0000
ROA not before:           Wed 23 Sep 2026 06:45:35 +0000
ROA not after:            Mon 05 Oct 2026 06:45:35 +0000
asID:                     271355
IP address blocks:        156.236.214.0/24 maxlen: 24
                          156.236.216.0/24 maxlen: 24
                          156.236.217.0/24 maxlen: 24
                          156.236.218.0/24 maxlen: 24
                          156.236.219.0/24 maxlen: 24
                          156.236.220.0/24 maxlen: 24
                          156.236.221.0/24 maxlen: 24
                          156.236.222.0/24 maxlen: 24
                          156.236.223.0/24 maxlen: 24
                          156.236.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120926 (0x1d85e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 23 06:45:35 2026 GMT
            Not After : Oct  5 06:45:35 2026 GMT
        Subject: CN=6ab37593-152c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a3:f3:8f:c2:20:8f:0c:66:69:77:f0:07:9d:
                    b8:a2:e2:b3:bc:96:18:75:b8:31:7f:bd:e2:bf:8f:
                    12:1e:0a:77:44:c2:dd:e0:09:38:2d:e6:11:eb:16:
                    86:63:bf:5f:63:29:6a:eb:26:43:e1:bf:a0:fb:49:
                    cd:59:b7:9d:36:84:74:48:bc:04:05:43:d6:09:1c:
                    60:06:80:9e:41:37:79:c1:5d:23:ed:03:7a:3a:b0:
                    e9:dc:c2:fa:21:4d:6e:ba:2d:79:28:f4:4c:ad:8a:
                    79:3d:56:3e:08:eb:21:86:11:97:5b:1c:3e:ea:25:
                    29:96:f3:fb:f6:29:1f:62:a8:78:5a:08:c8:8c:c4:
                    93:20:75:b0:1f:8b:f6:d3:e5:d0:49:67:4c:ea:7c:
                    b3:b6:e7:12:28:2e:ed:c3:ed:78:17:cd:29:a5:cf:
                    9d:93:e5:cb:2d:88:f9:85:ee:5c:08:5d:5b:98:2a:
                    ad:14:2a:ce:71:ab:be:b0:fb:bb:18:9f:f5:09:f6:
                    a7:54:05:12:16:e6:5b:cd:dd:a8:9f:ba:c6:ac:8c:
                    7f:77:f9:6e:14:96:f2:c6:5e:4d:43:a7:90:f8:88:
                    29:b0:2d:bb:5f:b2:27:15:5f:f8:b3:d9:c3:0b:88:
                    4e:86:f1:47:a2:ad:33:df:7d:c5:6f:b6:81:0d:00:
                    a4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6F:D8:51:AE:39:9D:51:CB:C1:F5:E4:25:B3:31:C7:F6:0B:32:1F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/634F8B8EB71A11F1B2B44F1ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.214.0/24
                  156.236.216.0/21
                  156.236.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:a3:29:b2:47:f4:d8:c0:3b:85:6e:ff:63:45:77:e2:5d:41:
         15:a9:34:04:d8:83:94:15:86:90:40:71:a1:54:de:c4:9a:7e:
         e2:55:ee:5a:a8:4e:e4:af:8d:99:4a:c1:fc:c6:c4:45:46:cc:
         d0:16:2b:21:4f:02:dd:45:5f:b9:9b:24:b2:20:59:42:ad:b3:
         20:71:62:e4:50:55:f5:33:8d:b4:8e:64:ff:a9:5e:e9:31:98:
         51:f3:fb:dd:d7:33:e6:d9:09:f5:80:82:85:bd:15:9c:e4:52:
         97:31:e0:a1:65:85:f2:c0:73:9a:14:3b:fa:25:30:1c:2d:cd:
         8e:58:53:f4:7a:47:de:44:ca:bb:bc:b5:00:09:76:85:78:62:
         f1:67:3b:19:13:7c:ab:60:2a:af:40:c2:74:fc:7a:d2:86:7f:
         0c:ce:19:ba:ca:fc:9a:c3:75:72:22:e5:e5:bf:23:23:60:be:
         44:ff:87:21:14:dd:41:c8:38:e7:9a:a8:3f:5a:57:0e:fc:e9:
         07:ad:28:45:3b:a4:d7:d4:b4:02:3c:97:a1:86:d8:8d:48:9d:
         29:65:b1:e1:90:d3:4d:1a:e3:d6:22:79:20:95:b9:a9:e5:e5:
         01:3a:1c:6d:94:36:54:09:69:ca:60:be:a8:a5:a8:d3:bc:42:
         4e:27:3e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----