Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EDD6F98B71811F1A9C4760FCF1D38B0.roa
File:                     8EDD6F98B71811F1A9C4760FCF1D38B0.roa (raw, json)
Hash identifier:          7NI8NT0KZxkFeRzx2eZhEFFBSif5Qi3hsBzo6rzMzvg=
Subject key identifier:   0D:78:48:43:7C:B6:63:7E:2F:1C:67:9A:C1:0A:4F:FB:30:DD:6C:A2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D85A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EDD6F98B71811F1A9C4760FCF1D38B0.roa
Signing time:             Wed 23 Sep 2026 06:32:33 +0000
ROA not before:           Wed 23 Sep 2026 06:32:29 +0000
ROA not after:            Mon 05 Oct 2026 06:32:29 +0000
asID:                     271355
IP address blocks:        156.236.195.0/24 maxlen: 24
                          156.236.201.0/24 maxlen: 24
                          156.236.202.0/24 maxlen: 24
                          156.236.203.0/24 maxlen: 24
                          156.236.204.0/24 maxlen: 24
                          156.236.205.0/24 maxlen: 24
                          156.236.206.0/24 maxlen: 24
                          156.236.207.0/24 maxlen: 24
                          156.236.208.0/24 maxlen: 24
                          156.236.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120922 (0x1d85a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 23 06:32:29 2026 GMT
            Not After : Oct  5 06:32:29 2026 GMT
        Subject: CN=6ab37281-0a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7d:4b:7e:09:78:b6:a7:96:1c:b1:26:0c:77:
                    21:ae:46:7a:6b:c0:02:52:de:81:87:98:cd:12:c9:
                    ee:9b:5b:c4:39:a0:d1:c8:30:b4:8d:41:90:9f:5c:
                    88:ea:6a:0e:83:1c:80:16:de:35:c9:87:c1:3c:8d:
                    b0:2e:3e:25:45:de:99:f9:ee:73:73:50:f5:b9:0b:
                    0d:78:42:48:b1:37:26:79:b2:50:fa:5c:1c:ac:5e:
                    58:e3:64:b2:72:7f:2c:4f:b9:f8:15:84:4f:0e:68:
                    43:6d:55:8c:ac:20:70:94:b4:86:e9:ec:c2:4a:08:
                    3a:c2:79:7c:a1:cc:39:eb:81:30:55:80:a6:70:c2:
                    95:8c:6c:33:59:aa:bb:4a:3b:d6:80:0d:aa:c1:f2:
                    0f:95:2c:7e:1b:04:30:31:7d:ee:90:06:dd:51:81:
                    63:f1:d4:ba:48:7d:30:5c:92:fd:d2:a3:ea:fe:c0:
                    47:12:77:a6:cd:fb:0f:af:bd:8b:b7:9c:b7:e7:8d:
                    01:96:62:84:03:d9:97:1b:7a:2a:66:84:f3:bd:37:
                    fc:a5:b1:29:49:56:b5:51:3c:d6:76:b1:4a:f7:e5:
                    e6:4d:63:de:bf:63:3d:8f:4f:67:86:7e:ef:99:4f:
                    48:f9:67:77:73:f5:20:b9:64:02:1a:82:e3:e1:ad:
                    d0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:78:48:43:7C:B6:63:7E:2F:1C:67:9A:C1:0A:4F:FB:30:DD:6C:A2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8EDD6F98B71811F1A9C4760FCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.195.0/24
                  156.236.201.0-156.236.209.255

    Signature Algorithm: sha256WithRSAEncryption
         60:d4:60:57:8f:5e:30:42:98:2d:36:aa:82:bc:f6:6d:c4:6c:
         64:00:e0:ea:2e:c0:85:fa:e1:f4:58:7e:b4:9b:0c:c9:16:ad:
         0f:d9:cf:62:71:fc:f1:ee:c9:c8:46:06:94:89:3b:d1:3f:fc:
         4d:05:79:df:40:f4:9a:ba:52:bf:09:42:c5:95:3e:dd:39:c8:
         90:12:7c:76:db:f1:29:ef:44:9b:d4:e4:0e:60:7f:eb:83:7c:
         f4:db:7d:15:9f:bd:ed:23:1c:b2:47:a2:19:3c:62:a0:2d:25:
         fb:88:93:8b:13:05:ce:a1:14:ac:4a:a2:a0:df:15:68:47:c7:
         ee:9b:e7:73:c3:1e:98:13:a4:9f:d5:95:e7:b9:ba:d9:84:62:
         9e:05:7c:ad:22:53:6d:76:47:cc:c1:04:d0:16:ca:e2:69:ca:
         ee:9e:86:6c:a3:8d:10:8a:47:5b:22:31:58:8c:3b:ca:ea:a4:
         86:51:73:95:63:42:c1:d7:b1:49:dc:5a:ed:52:1f:2f:e2:8b:
         28:eb:43:23:92:82:19:fe:e8:68:61:00:fa:39:d2:ee:d8:a1:
         56:7c:8e:a9:6a:af:09:06:2c:65:92:a4:39:72:84:48:76:e9:
         f0:41:72:ca:fa:c2:2f:88:f6:22:04:b5:5a:9f:dc:57:38:47:
         a6:d0:ea:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----