Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F9BD024B4C911F19F5681FCCE1D38B0.roa
File:                     8F9BD024B4C911F19F5681FCCE1D38B0.roa (raw, json)
Hash identifier:          vxgpK6uRsjQoRWRkz/AfskAGWobRfu6K5WRgR3AzmTM=
Subject key identifier:   86:9A:72:EA:75:7F:68:37:E5:DA:3B:BB:7D:5D:3D:72:D5:9F:DD:0E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D712
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F9BD024B4C911F19F5681FCCE1D38B0.roa
Signing time:             Sun 20 Sep 2026 08:02:02 +0000
ROA not before:           Sun 20 Sep 2026 08:01:58 +0000
ROA not after:            Sat 24 Oct 2026 08:01:58 +0000
asID:                     395886
IP address blocks:        156.239.24.0/21 maxlen: 24
                          156.239.32.0/20 maxlen: 24
                          156.239.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120594 (0x1d712)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 20 08:01:58 2026 GMT
            Not After : Oct 24 08:01:58 2026 GMT
        Subject: CN=6aaf92fa-583f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:50:25:72:32:fa:7f:11:ad:c4:c6:2f:27:c6:
                    c6:67:19:49:5d:05:cd:62:0d:c9:eb:dd:12:c9:99:
                    55:e5:ea:9c:4a:8b:18:f1:8f:77:ed:be:fb:a0:07:
                    36:0e:15:08:fd:58:0b:35:cf:fc:bd:9d:cb:7d:4d:
                    c3:ea:15:95:b9:ab:c9:9c:f3:9a:0a:81:ca:2b:09:
                    26:f7:3a:49:45:39:c8:87:bf:54:90:1c:7d:14:c5:
                    aa:f9:e1:6b:ec:52:fb:e3:28:35:28:a2:c1:45:21:
                    26:ff:23:bc:1a:3a:ae:49:94:ff:45:0f:16:f3:8d:
                    00:8b:5b:28:cb:f5:68:c9:89:51:2a:c9:1c:b6:f1:
                    5e:40:d9:09:5f:fb:3f:07:97:21:4c:62:46:9c:07:
                    55:a8:2f:0a:1e:77:1c:1c:db:8d:6e:e7:10:33:1b:
                    15:3f:65:57:87:7e:9e:c9:ab:d0:8e:0f:bf:14:4e:
                    87:7f:d9:4d:be:6c:06:e8:0c:bd:af:24:ac:f5:b6:
                    1f:a6:54:b9:cb:cf:bf:d8:ee:65:f5:3e:c5:c8:41:
                    b2:dd:6d:ee:25:a3:30:3b:ad:0d:50:0d:09:79:da:
                    df:0a:c0:10:0b:a0:36:51:0e:b4:a9:7a:69:94:80:
                    5a:0d:87:ff:58:33:45:18:de:07:0f:f4:c1:1d:8c:
                    4e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9A:72:EA:75:7F:68:37:E5:DA:3B:BB:7D:5D:3D:72:D5:9F:DD:0E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F9BD024B4C911F19F5681FCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.24.0-156.239.51.255

    Signature Algorithm: sha256WithRSAEncryption
         70:3a:48:21:1b:c7:0b:1e:5b:33:96:e0:d7:09:07:c9:63:6e:
         63:92:2e:59:bf:cf:5a:3b:5b:7b:64:c2:11:40:09:48:5b:d1:
         5f:ba:65:7d:cf:43:8a:4c:79:ea:19:4a:25:41:bc:73:b2:7e:
         b6:25:bc:62:78:05:44:4f:dc:82:76:8a:f5:ae:a6:0d:24:20:
         d9:79:77:6e:1e:b3:59:3d:81:fe:14:ea:02:2b:ce:e0:a7:76:
         51:0e:89:02:94:8b:5c:69:74:4c:5a:fe:ac:97:d8:03:2b:2e:
         05:45:87:cf:da:a8:e7:6c:d6:90:86:e8:09:4d:0e:c4:c0:e2:
         59:28:d2:9f:2f:eb:a8:a7:be:1c:62:12:84:86:c6:e8:eb:f2:
         2b:3d:45:b1:44:5a:02:d6:92:e1:fe:ac:4f:8c:41:b3:f9:99:
         85:a2:00:0e:72:31:4d:69:96:29:f0:b1:5a:1f:29:76:d5:42:
         fc:c6:72:60:64:52:6b:7c:30:d6:72:f4:8e:ec:9e:b7:88:51:
         84:ad:c6:b3:93:df:8a:38:7a:79:b7:df:b4:2d:bb:06:23:f7:
         4a:9e:b5:2b:43:d4:59:3d:67:1c:f0:b5:5b:3e:b1:36:79:98:
         34:b2:49:38:3d:30:6a:50:18:b8:9e:92:8c:be:ed:70:6f:f9:
         0d:49:89:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----