Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/639D52C8B4CD11F192B05213CF1D38B0.roa
File:                     639D52C8B4CD11F192B05213CF1D38B0.roa (raw, json)
Hash identifier:          cAWIM+NrDgR1vXnwK4N6HfwcHU7YTsj6pi5ZEiIbClo=
Subject key identifier:   2A:39:2C:8D:DC:7D:CC:DB:17:1B:9D:B9:E1:35:25:EB:30:55:38:BC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D71A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/639D52C8B4CD11F192B05213CF1D38B0.roa
Signing time:             Sun 20 Sep 2026 08:29:26 +0000
ROA not before:           Sun 20 Sep 2026 08:29:22 +0000
ROA not after:            Sat 24 Oct 2026 08:29:22 +0000
asID:                     18013
IP address blocks:        156.239.24.0/21 maxlen: 24
                          156.239.32.0/20 maxlen: 24
                          156.239.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120602 (0x1d71a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 20 08:29:22 2026 GMT
            Not After : Oct 24 08:29:22 2026 GMT
        Subject: CN=6aaf9966-78fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:77:71:6c:7f:19:64:72:1f:ef:a4:99:ab:
                    b5:cf:42:d5:3a:49:99:77:c6:83:00:1e:78:6d:ef:
                    62:4c:43:ec:b8:f3:28:4e:f3:a3:e8:01:29:19:a2:
                    16:68:02:1c:a3:bb:d2:25:43:56:08:fb:69:55:59:
                    1c:7e:c4:76:8f:1b:ba:e7:8a:83:21:ec:25:9c:17:
                    bc:5a:47:fc:b5:4e:c7:22:b7:0c:d6:fc:74:93:1d:
                    77:eb:9f:30:f1:2a:91:a3:75:49:22:29:42:5d:d3:
                    64:af:cc:ab:a8:f1:e9:22:24:ad:81:a9:4b:df:da:
                    71:a6:0a:77:9d:cf:bf:b3:0d:e7:3a:12:c3:6e:9f:
                    3d:98:63:be:6f:94:7a:95:27:46:f8:1c:40:c5:8a:
                    9c:9b:25:85:f3:8f:e1:d4:4a:23:87:9f:df:76:23:
                    cc:d5:dc:95:5b:70:09:93:fb:63:07:ff:5f:23:a4:
                    c8:45:3d:8b:40:43:52:46:b9:88:86:f2:bc:86:3e:
                    a0:bd:05:62:56:ee:85:e9:6d:3b:c0:20:c1:23:6b:
                    c7:f5:ae:00:21:11:b1:fc:3a:00:b3:6e:27:4c:1e:
                    41:46:e7:77:32:ee:6c:9d:b5:bf:3c:a4:97:63:74:
                    39:bc:35:8d:01:bc:35:eb:98:78:d5:6e:1a:6b:df:
                    a7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:39:2C:8D:DC:7D:CC:DB:17:1B:9D:B9:E1:35:25:EB:30:55:38:BC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/639D52C8B4CD11F192B05213CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.24.0-156.239.51.255

    Signature Algorithm: sha256WithRSAEncryption
         9d:93:0e:df:bf:3d:af:89:4d:8a:eb:d8:6a:80:fd:60:31:6b:
         07:0b:70:79:19:9e:ce:f1:b8:95:71:ce:22:1e:26:1a:05:94:
         0b:bf:8e:e9:93:4e:99:2f:c9:c7:f0:47:a5:96:2b:d1:90:77:
         2f:be:3c:ea:e2:b5:74:2b:df:bf:88:f5:72:b9:d6:fc:4f:47:
         7f:0e:8a:50:65:57:0f:c3:83:b0:28:a5:ab:32:4c:5d:27:df:
         9f:3f:e8:4d:f2:ce:96:13:b0:ee:09:29:44:64:2a:73:92:27:
         0b:3d:8f:e8:40:b7:8f:b0:8c:ea:ac:96:bc:a4:d9:76:5c:98:
         34:f4:fd:52:af:aa:2d:07:c3:8a:08:f6:c0:85:17:59:fc:82:
         62:ad:59:77:64:fe:5a:10:51:b1:b6:6a:a3:37:94:6b:78:f9:
         5d:8a:9e:6c:8f:29:f5:71:94:83:be:36:f3:17:1d:3c:9c:b3:
         7b:77:11:5f:cc:b6:7c:68:86:bd:d8:a6:dd:be:28:ee:31:ab:
         e2:82:fd:e3:4c:8f:f2:4f:22:61:7a:e7:16:f8:9f:91:7f:9b:
         8a:0a:d0:f7:ad:a3:6f:99:a1:b4:a9:29:04:44:b3:6a:43:e1:
         55:20:9f:40:3e:2e:ee:c7:33:d1:33:7d:13:96:8a:e0:8a:08:
         5c:4e:c9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----