Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F3A6B38B66811F1A8FD4A0ECF1D38B0.roa
File:                     6F3A6B38B66811F1A8FD4A0ECF1D38B0.roa (raw, json)
Hash identifier:          MASlDUV+D5DcgZFdSfBz8dzLkXlrll48YMmxFj8oHk0=
Subject key identifier:   3F:87:73:F9:A7:64:52:F8:C6:E9:A7:23:A2:A6:A4:8D:42:5A:31:A4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D7F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F3A6B38B66811F1A8FD4A0ECF1D38B0.roa
Signing time:             Tue 22 Sep 2026 09:31:49 +0000
ROA not before:           Tue 22 Sep 2026 09:31:45 +0000
ROA not after:            Thu 29 Oct 2026 09:31:45 +0000
asID:                     48031
IP address blocks:        156.246.128.0/24 maxlen: 24
                          156.246.129.0/24 maxlen: 24
                          156.246.130.0/24 maxlen: 24
                          156.246.131.0/24 maxlen: 24
                          156.246.132.0/24 maxlen: 24
                          156.246.133.0/24 maxlen: 24
                          156.246.134.0/24 maxlen: 24
                          156.246.135.0/24 maxlen: 24
                          156.246.136.0/24 maxlen: 24
                          156.246.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120822 (0x1d7f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 09:31:45 2026 GMT
            Not After : Oct 29 09:31:45 2026 GMT
        Subject: CN=6ab24b05-9a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:15:8e:8a:15:4c:2e:04:b8:9a:0b:ae:13:75:
                    a4:72:fc:eb:ba:a6:60:fa:9c:97:5f:12:00:5e:54:
                    51:84:06:db:f3:a8:90:b6:ea:bf:ee:16:ac:b4:a3:
                    54:96:ef:35:39:84:06:91:de:dd:95:70:7b:dd:95:
                    31:56:52:29:c9:1e:49:f9:af:10:67:37:07:ea:9b:
                    89:55:fb:e0:59:b1:06:1e:2b:d2:79:ba:69:5d:c9:
                    0d:15:5c:27:88:66:10:e8:4a:5f:14:38:33:46:c0:
                    2a:e4:ad:0a:d1:8e:3f:18:3d:62:bf:97:d7:58:23:
                    8d:64:ef:7f:9c:63:f4:da:02:c6:56:79:d7:57:4f:
                    7f:46:05:69:d6:12:77:f3:5b:13:0c:a7:bc:7d:3e:
                    12:af:73:14:42:0f:27:64:1e:a0:6f:c4:43:f3:02:
                    0d:d6:5c:af:e4:07:d2:3b:1a:dd:1e:6e:d7:05:75:
                    20:f1:a3:72:b5:34:1d:c6:1c:d0:15:00:cd:57:ea:
                    b5:3e:c8:a5:3b:fd:53:88:bc:d6:df:97:11:c3:ee:
                    3b:c9:ae:ce:3a:e0:aa:f4:f3:27:d8:91:29:22:a9:
                    7c:13:27:28:73:f0:de:12:06:68:2d:09:c6:ba:25:
                    ed:c7:ad:47:20:df:14:47:6b:b9:0f:29:0d:3a:3f:
                    fa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:87:73:F9:A7:64:52:F8:C6:E9:A7:23:A2:A6:A4:8D:42:5A:31:A4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F3A6B38B66811F1A8FD4A0ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.128.0-156.246.137.255

    Signature Algorithm: sha256WithRSAEncryption
         45:5c:9a:fc:b2:51:51:9e:f2:3d:80:42:ea:ea:d4:a1:cd:d7:
         cb:1e:5f:02:0d:c6:c2:8d:5b:9e:9d:ea:e9:9c:18:f4:48:3f:
         67:7f:c5:c1:98:16:f4:b7:78:3f:a3:07:50:db:4f:70:d0:0b:
         a8:ab:1b:76:c1:05:59:74:38:06:0e:0e:18:2f:d9:35:a1:16:
         a3:a8:d3:45:bd:07:c9:aa:b8:77:f0:a2:51:49:21:68:58:46:
         68:f3:e5:fd:e8:b3:e8:a9:1a:6a:2b:5f:82:7f:7d:c9:2d:88:
         ac:d2:f3:8e:92:fd:33:90:33:67:57:fd:29:15:38:e2:b6:37:
         f5:7a:d0:43:98:cd:b9:8a:b2:2b:60:e4:27:d9:45:00:54:d0:
         37:ae:a9:d2:8e:27:9b:74:ed:65:fe:f7:58:05:21:73:87:c2:
         3f:36:85:12:c8:05:b7:a0:a8:5d:a1:62:2b:d1:b8:aa:e3:cf:
         42:42:98:48:91:7f:54:65:67:7d:e3:15:3e:3c:f6:0d:cd:29:
         14:d6:56:c8:2a:4c:82:1b:cd:d3:8d:04:7c:68:88:cf:89:a1:
         6c:a4:e0:ac:63:78:98:ce:3f:f3:e7:75:a4:bd:52:72:d9:1f:
         57:25:49:9e:86:54:63:26:99:5c:0c:48:58:8a:bb:74:49:81:
         ac:8e:c7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----