Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2B6B156B65911F1BBB85CB1CE1D38B0.roa
File:                     A2B6B156B65911F1BBB85CB1CE1D38B0.roa (raw, json)
Hash identifier:          uovt5+nJO0Jqv0qSK0d0cp3K1quOAJVf1rqAcmQYsZw=
Subject key identifier:   9B:BF:5C:92:A3:AD:A6:CE:1A:96:58:E8:52:8C:AC:66:6E:57:1A:6C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D7CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2B6B156B65911F1BBB85CB1CE1D38B0.roa
Signing time:             Tue 22 Sep 2026 07:45:53 +0000
ROA not before:           Tue 22 Sep 2026 07:45:49 +0000
ROA not after:            Wed 02 Dec 2026 07:45:49 +0000
asID:                     136476
IP address blocks:        156.253.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120779 (0x1d7cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 07:45:49 2026 GMT
            Not After : Dec  2 07:45:49 2026 GMT
        Subject: CN=6ab23231-14fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ea:44:b3:4e:df:01:e7:2c:8c:57:01:37:0b:
                    d8:8a:1f:18:f5:0d:38:37:19:a0:20:44:2d:a2:aa:
                    ab:6c:a0:ba:2c:78:14:06:c3:c1:ca:08:5c:74:ed:
                    36:dd:81:24:10:84:80:cc:9a:61:c1:55:85:4d:87:
                    b2:06:f2:80:c8:17:96:c1:82:df:0f:4c:34:16:a3:
                    c3:15:ef:ca:99:be:ae:8a:23:46:94:1d:22:db:77:
                    bc:28:eb:bb:15:f9:71:b2:67:b3:06:9c:83:ee:d1:
                    1a:3e:12:c6:71:c4:ff:49:11:a5:1c:01:5c:c1:48:
                    d7:45:4e:44:b0:00:fc:0f:e4:d7:6c:ae:7d:53:01:
                    2e:e0:02:83:90:50:48:2f:64:a9:d5:4f:2b:94:ea:
                    3e:05:37:15:14:64:eb:94:ad:cd:37:f3:dd:21:1c:
                    f7:74:04:b6:7d:98:f1:b3:96:55:49:e3:bd:24:12:
                    c0:84:55:35:fa:a7:b2:4e:aa:2a:50:35:7e:5c:05:
                    41:4b:f8:96:be:59:0b:0e:39:18:7f:54:21:bd:5d:
                    f8:85:40:82:35:55:31:ba:07:48:c7:6d:98:9a:c5:
                    91:dd:e1:42:47:bb:c1:8a:f5:8b:d3:f3:2c:f6:fc:
                    20:49:3e:b4:02:f8:60:6e:58:f6:c2:23:17:22:c1:
                    3d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BF:5C:92:A3:AD:A6:CE:1A:96:58:E8:52:8C:AC:66:6E:57:1A:6C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2B6B156B65911F1BBB85CB1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.253.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         72:40:65:21:f3:a9:87:f9:6e:8a:ff:39:61:dc:c0:4e:93:1f:
         24:39:20:fe:a8:88:60:9f:4c:f8:3e:dc:b1:17:e9:bf:fb:8a:
         da:a3:f7:11:c4:7f:ee:f4:1c:53:f5:3a:9f:e7:f9:8a:50:fe:
         da:8e:ff:a1:ea:86:47:3d:6c:d3:9e:61:bb:b1:96:d9:54:c6:
         3e:8d:71:66:1a:d3:e0:d2:83:40:41:2c:55:e0:66:ac:27:42:
         bd:60:13:a9:83:33:c1:d4:1d:e2:8d:fa:64:33:65:5a:21:eb:
         1c:78:42:2e:9d:97:67:77:a9:24:16:c7:d2:4f:38:9c:cb:a3:
         53:6b:5f:75:fa:ce:3f:8c:17:44:41:aa:18:5f:c2:d8:45:40:
         bc:31:dc:d8:c4:07:ac:be:54:5e:b0:84:6a:a1:13:a5:90:fc:
         86:60:ac:23:08:0e:e1:fc:0d:81:f2:54:78:b2:93:de:3f:c0:
         ac:25:6e:af:b2:fa:6d:40:dc:cb:77:68:fc:c6:5b:9b:92:7a:
         02:00:31:e7:e7:5b:80:26:2d:4e:c3:d6:42:f6:d6:b0:c5:25:
         ea:a3:c9:74:63:8a:ec:79:ed:c2:44:63:51:4b:60:e8:81:2d:
         9f:01:c8:b8:f5:67:03:0f:e2:71:97:df:aa:db:ac:ff:b1:4f:
         51:2d:95:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----