Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A26B764B58E11F1BBB61E03CF1D38B0.roa
File:                     9A26B764B58E11F1BBB61E03CF1D38B0.roa (raw, json)
Hash identifier:          hfrpPISCu9MI+ve5sf+19WlmZfYkqTDLPeay0eEQ0qE=
Subject key identifier:   2F:78:99:45:F5:2D:15:F4:C0:9F:D8:FA:85:EB:14:80:00:87:C6:25
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D766
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A26B764B58E11F1BBB61E03CF1D38B0.roa
Signing time:             Mon 21 Sep 2026 07:32:30 +0000
ROA not before:           Mon 21 Sep 2026 07:32:26 +0000
ROA not after:            Thu 20 Sep 2029 07:32:26 +0000
asID:                     17561
IP address blocks:        156.245.66.0/24 maxlen: 24
                          156.245.67.0/24 maxlen: 24
                          156.245.68.0/24 maxlen: 24
                          156.245.69.0/24 maxlen: 24
                          156.245.70.0/24 maxlen: 24
                          156.245.71.0/24 maxlen: 24
                          156.245.72.0/24 maxlen: 24
                          156.245.73.0/24 maxlen: 24
                          156.245.74.0/24 maxlen: 24
                          156.245.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120678 (0x1d766)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 21 07:32:26 2026 GMT
            Not After : Sep 20 07:32:26 2029 GMT
        Subject: CN=6ab0dd8e-8cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:a3:c4:e4:26:c5:a7:13:20:75:b2:41:92:
                    33:36:67:d4:61:6e:a1:a9:a8:26:2d:8c:c1:56:e4:
                    c3:4f:62:e9:41:ba:47:de:a1:bc:40:e0:dd:5a:d4:
                    99:e7:49:f3:76:c7:79:c2:c1:21:00:bc:43:31:d2:
                    bb:3e:25:b1:59:78:25:44:b3:7e:f5:b2:68:b4:ff:
                    78:3d:92:83:2a:0e:69:a1:9a:2d:20:ea:4c:d4:e1:
                    11:19:c1:b8:3b:fe:c0:8d:7d:d8:05:37:7d:a1:63:
                    92:49:28:ba:32:e0:d7:69:6e:46:ce:c3:b3:b3:ed:
                    91:84:03:5c:75:fe:a3:c0:75:b9:79:a3:a9:f6:70:
                    a8:e1:d3:da:b1:1b:d0:27:80:54:1a:7b:22:1b:bf:
                    c2:34:82:0b:bf:f6:51:d6:ab:52:13:10:6d:e8:95:
                    46:37:b3:8e:e1:7e:61:02:41:f9:8c:89:8b:96:9c:
                    8b:e6:d6:16:8d:94:03:5f:4a:63:72:63:bb:1b:0c:
                    ac:2b:83:52:12:9b:b2:2e:8d:e6:09:0b:a0:71:05:
                    75:e8:76:e6:b6:87:09:53:97:dc:2a:cd:65:ae:50:
                    c3:1a:86:3c:3d:33:d5:33:a1:ce:4e:e1:c0:79:12:
                    e2:12:56:e0:3a:0c:27:f6:a1:05:f1:56:e7:c0:83:
                    08:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:78:99:45:F5:2D:15:F4:C0:9F:D8:FA:85:EB:14:80:00:87:C6:25
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A26B764B58E11F1BBB61E03CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.66.0-156.245.75.255

    Signature Algorithm: sha256WithRSAEncryption
         17:b1:47:81:38:a8:02:05:38:00:60:41:07:82:8f:04:91:0c:
         d5:c8:dd:17:22:e3:ad:17:bd:b4:28:6b:84:5e:07:6a:c9:53:
         1d:03:87:31:f8:40:08:77:d2:24:16:fd:5e:36:e7:e5:2d:a2:
         14:b9:7c:80:a7:32:4c:9b:1a:d1:5c:e9:2e:89:7e:98:d1:5e:
         56:7d:78:bf:fe:02:13:f5:a2:53:bc:09:fa:9f:f2:59:90:3b:
         53:20:5e:41:18:71:90:5c:00:a6:a8:4f:ea:6d:0d:47:65:96:
         c6:5f:27:25:3c:26:00:7f:3b:1b:d6:c7:74:9a:b0:25:ba:06:
         85:8b:ca:51:d8:a4:8d:95:07:68:fd:ff:47:e2:ca:1c:3d:8c:
         31:98:af:22:fc:e7:8e:0c:19:8b:ee:5d:93:e2:11:0c:d5:5d:
         5d:e6:03:c7:bb:0e:41:63:51:87:3a:f6:b0:a5:91:92:91:53:
         f1:d6:86:8c:a3:34:02:3d:fa:74:f7:1f:20:ef:ce:58:06:53:
         c7:37:70:88:89:54:75:3f:eb:4f:44:58:7d:8a:d7:07:5a:ca:
         7f:38:91:67:2a:cc:a7:72:33:30:bc:19:31:da:77:5b:e1:f4:
         02:1d:89:1b:3e:23:97:90:a8:c6:f8:8c:49:76:c9:dc:97:da:
         44:3a:77:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----