Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1A7DA26A77811F1B1544202CF1D38B0.roa
File:                     C1A7DA26A77811F1B1544202CF1D38B0.roa (raw, json)
Hash identifier:          oE/2cPRHT7GmlbPlzEcGfkV20K/2xuxNcCH4alcPDm0=
Subject key identifier:   0E:71:13:A1:86:38:61:D8:01:B7:6F:96:95:D1:D6:A8:F7:0B:01:43
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D2E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1A7DA26A77811F1B1544202CF1D38B0.roa
Signing time:             Thu 03 Sep 2026 09:20:52 +0000
ROA not before:           Thu 03 Sep 2026 09:20:47 +0000
ROA not after:            Sat 10 Oct 2026 09:20:47 +0000
asID:                     154177
IP address blocks:        156.244.3.0/24 maxlen: 24
                          156.244.8.0/24 maxlen: 24
                          156.244.10.0/24 maxlen: 24
                          156.244.11.0/24 maxlen: 24
                          156.244.12.0/24 maxlen: 24
                          156.244.31.0/24 maxlen: 24
                          156.244.39.0/24 maxlen: 24
                          156.244.41.0/24 maxlen: 24
                          156.244.42.0/24 maxlen: 24
                          156.244.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119524 (0x1d2e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  3 09:20:47 2026 GMT
            Not After : Oct 10 09:20:47 2026 GMT
        Subject: CN=6a993bf3-7e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:46:36:75:69:53:cc:e0:bf:5a:ef:9e:d6:55:
                    fc:b5:c9:e3:3a:39:bf:bb:82:7c:e0:55:33:e1:21:
                    c3:a7:23:19:30:50:ba:78:9a:57:b4:09:0d:80:43:
                    6a:e9:88:76:b7:50:ec:5d:d2:94:d6:5e:aa:41:b6:
                    e7:81:d3:07:f4:1f:b4:12:d9:d3:a6:c2:b6:18:fd:
                    1c:62:76:d2:76:61:da:47:9a:74:04:91:d7:b9:01:
                    b4:59:37:49:b9:77:b8:2f:3a:0e:a5:ac:4c:4f:7a:
                    64:0c:2e:40:cd:e7:1c:5e:26:30:aa:d7:e8:bc:91:
                    74:f5:96:14:b5:ec:8d:10:45:8e:3a:61:b9:67:ae:
                    c7:28:8f:b5:7c:1f:e4:1a:b2:25:24:56:7d:37:e6:
                    5e:52:35:18:63:35:43:34:57:c1:6c:bc:81:6c:a9:
                    a5:cc:e2:5f:1c:f4:63:33:ec:94:af:42:2c:82:9e:
                    09:c1:ce:ef:09:a5:23:fd:25:e9:2c:76:ef:b9:dc:
                    ca:45:26:a3:cc:e0:7c:fa:3d:0e:4d:ca:4b:0c:b2:
                    15:5f:ff:5b:92:7d:c1:f3:4d:be:e8:b5:37:f2:76:
                    42:1c:e9:f8:e1:d6:a9:6f:68:b1:b1:90:94:20:32:
                    ac:16:05:d2:e5:ac:23:48:45:74:59:05:35:2d:15:
                    2f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:71:13:A1:86:38:61:D8:01:B7:6F:96:95:D1:D6:A8:F7:0B:01:43
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1A7DA26A77811F1B1544202CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.3.0/24
                  156.244.8.0/24
                  156.244.10.0-156.244.12.255
                  156.244.31.0/24
                  156.244.39.0/24
                  156.244.41.0-156.244.43.255

    Signature Algorithm: sha256WithRSAEncryption
         70:ed:ad:16:7e:3c:a5:7e:18:30:cd:5f:aa:8f:fc:1f:30:c6:
         99:07:0c:84:18:6a:cb:6e:e5:82:bd:0c:3c:47:c0:26:40:1b:
         2f:4d:bb:85:7a:8b:ef:c1:50:ed:27:eb:4e:57:07:55:dc:af:
         6f:6c:1d:da:1b:79:fc:84:6b:1b:12:d7:1f:5d:d3:6b:f3:98:
         40:8e:04:4a:e0:de:26:4c:3b:02:fd:b9:b3:aa:b0:e2:a1:8b:
         85:a9:55:6f:00:5f:cd:86:14:6a:0e:6c:ae:c6:b0:43:8e:ea:
         79:3f:15:33:00:13:d8:3c:01:97:24:df:db:46:17:51:93:db:
         e8:16:92:3e:d1:06:6d:43:60:ee:bc:a0:5a:70:a0:e5:0f:ed:
         6c:5e:48:df:9d:99:37:15:20:a6:58:c6:35:1b:8d:05:00:4d:
         63:3c:6a:06:a4:3c:20:0b:e8:c7:62:bf:c9:99:d4:07:06:a7:
         ba:e7:34:2b:f3:ed:53:c7:29:0b:3f:08:6b:63:64:e4:4c:94:
         e0:46:cf:af:02:48:b5:05:22:8f:ad:af:32:76:1c:4d:51:55:
         17:83:8f:e4:78:ef:d1:d5:30:75:7b:73:28:0d:98:8d:2a:70:
         df:a9:cb:72:95:00:ff:fc:c1:e9:4c:55:dc:bc:e0:5d:c2:c6:
         67:71:07:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----