Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD3A90CEADC611F18FEA36B3CE1D38B0.roa
File:                     BD3A90CEADC611F18FEA36B3CE1D38B0.roa (raw, json)
Hash identifier:          Gj3COtgbhbPOtdo1Xa4NqKkWal8md1hxtyXqAKr1EtU=
Subject key identifier:   5C:68:EA:26:58:90:4E:9B:98:EF:F6:AC:B7:10:08:6D:5C:10:0E:B7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D555
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD3A90CEADC611F18FEA36B3CE1D38B0.roa
Signing time:             Fri 11 Sep 2026 09:54:12 +0000
ROA not before:           Fri 11 Sep 2026 09:54:08 +0000
ROA not after:            Fri 16 Oct 2026 09:54:08 +0000
asID:                     401615
IP address blocks:        156.226.170.0/23 maxlen: 24
                          156.231.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120149 (0x1d555)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 11 09:54:08 2026 GMT
            Not After : Oct 16 09:54:08 2026 GMT
        Subject: CN=6aa3cfc4-41c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3c:fe:a5:1c:39:ed:d3:98:3f:69:d5:65:df:
                    ec:06:ba:d0:7d:ba:97:66:85:da:46:2c:f3:5a:af:
                    c3:30:f6:c2:49:a3:5c:4d:aa:e3:c0:4e:70:96:e2:
                    ef:56:d4:38:55:c6:79:18:ad:a7:ff:d5:a7:a9:a8:
                    34:4e:3a:ce:31:84:5b:d2:b1:d9:c3:86:75:fc:c0:
                    01:9f:ce:b6:b9:4e:22:d6:94:49:4b:7c:45:6b:eb:
                    a3:77:67:0c:23:e4:d4:5a:49:19:04:ef:89:01:f5:
                    1e:1a:2a:5b:35:26:e0:27:78:7e:22:1e:84:83:29:
                    72:36:92:b1:ca:d2:3b:4d:40:b7:fd:47:60:51:27:
                    6b:a0:e9:7b:60:93:75:81:3e:1e:4a:b2:55:1f:4d:
                    ac:4f:4e:93:32:c0:eb:8c:d9:88:6e:7e:3f:32:22:
                    fb:27:a3:89:ab:3f:6d:3f:c2:21:30:c3:24:b1:53:
                    1f:8f:55:53:f3:13:2d:03:10:14:f3:d1:2a:22:84:
                    15:18:9e:05:9c:d0:ea:6f:e5:dc:be:1d:c9:c6:15:
                    4f:9a:cf:10:39:01:75:a5:cb:6a:c1:65:25:f9:95:
                    b6:65:56:c6:67:39:ae:ff:29:85:62:aa:76:af:4a:
                    36:aa:71:23:a8:14:81:a4:19:d5:e6:dc:67:4d:a8:
                    ad:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:68:EA:26:58:90:4E:9B:98:EF:F6:AC:B7:10:08:6D:5C:10:0E:B7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD3A90CEADC611F18FEA36B3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.170.0/23
                  156.231.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:38:0d:3d:eb:59:c2:8a:bd:0e:ea:7e:32:2f:36:71:d3:aa:
         81:ce:00:08:44:69:9e:66:18:96:29:90:39:8a:55:c3:5f:ca:
         d2:d4:52:7d:ed:d3:22:96:09:ec:5c:23:cb:c3:aa:03:43:a7:
         75:b5:73:f1:62:53:6f:7d:8f:6e:b1:76:2e:24:dc:c4:55:aa:
         db:9c:a6:83:07:bc:d1:02:47:a8:39:2f:23:6a:d2:7a:63:d6:
         72:7e:d3:fa:f0:3f:22:09:9c:80:a2:e2:98:48:b3:a5:9e:e5:
         94:31:a4:9b:6e:b6:0f:d2:99:95:cf:bd:67:98:e0:7f:ab:99:
         d5:48:c8:86:16:91:f5:62:ee:c7:24:2a:28:33:d3:b3:ba:cb:
         37:cd:09:b1:f0:96:ec:ff:65:b8:07:91:a4:54:fd:55:1e:ef:
         86:a3:be:22:b1:70:e5:26:db:44:38:75:ee:24:68:c3:6d:95:
         02:f7:1e:3c:70:7f:74:ee:fe:0e:bd:11:d1:67:56:9b:ab:07:
         1a:b1:4e:3e:f5:1e:6c:89:8b:33:a5:3d:99:dc:a3:8c:91:0c:
         a4:2d:4e:68:96:9b:b1:c0:d3:bc:ae:5f:08:28:58:8f:ca:f0:
         2f:f3:e1:ac:57:9f:dc:97:4e:86:16:ea:32:aa:79:a6:0b:5e:
         7a:63:55:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----