Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8A3A908B59D11F18615F2E2CE1D38B0.roa
File:                     C8A3A908B59D11F18615F2E2CE1D38B0.roa (raw, json)
Hash identifier:          BeQTqvIj6BFgnPZEzm0mIllg6PKoSMRqSN7W25OErXM=
Subject key identifier:   B6:0B:FE:AC:F2:0D:8F:48:5D:F0:16:85:ED:E6:18:43:2E:CA:87:66
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D78C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8A3A908B59D11F18615F2E2CE1D38B0.roa
Signing time:             Mon 21 Sep 2026 09:21:11 +0000
ROA not before:           Mon 21 Sep 2026 09:21:07 +0000
ROA not after:            Thu 20 Sep 2029 09:21:07 +0000
asID:                     17561
IP address blocks:        156.245.121.0/24 maxlen: 24
                          156.245.122.0/24 maxlen: 24
                          156.245.123.0/24 maxlen: 24
                          156.245.124.0/24 maxlen: 24
                          156.245.125.0/24 maxlen: 24
                          156.245.126.0/24 maxlen: 24
                          156.245.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120716 (0x1d78c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 21 09:21:07 2026 GMT
            Not After : Sep 20 09:21:07 2029 GMT
        Subject: CN=6ab0f707-fdff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3d:37:43:58:58:1b:d6:a5:fe:b1:61:08:a7:
                    e9:47:c7:d3:d5:ba:dc:cf:f5:cc:99:e0:4a:47:ee:
                    bd:bb:09:5d:e4:27:30:de:52:fe:96:1f:39:06:58:
                    b3:6d:9a:66:84:ca:28:56:ac:17:9a:4d:b3:95:b1:
                    73:87:37:b5:94:8d:9f:77:47:d8:0b:1f:8c:f8:0d:
                    fc:fc:03:94:28:0c:9c:67:9d:da:d2:b3:b1:c1:a9:
                    7b:d5:73:7f:90:69:b5:e0:60:0d:54:aa:8c:65:2f:
                    88:63:b7:43:b9:d4:e2:04:b2:c1:7a:4a:4a:3c:1e:
                    47:5a:ae:0b:9c:55:68:d4:e4:11:3a:2b:d9:75:04:
                    be:23:2a:58:67:52:7f:40:4f:e2:5a:7e:59:10:e7:
                    df:9a:d0:cd:89:05:e8:49:99:18:81:85:33:7e:f5:
                    f9:75:b9:13:2e:e9:a9:98:81:05:d1:40:0a:9e:5f:
                    d4:d8:36:a3:f1:db:7b:d4:ec:16:cd:1e:f6:86:33:
                    0f:72:0b:d2:c0:c6:8b:69:2b:ae:3b:96:75:12:e0:
                    b3:71:d3:e7:af:20:01:e1:be:b4:3f:35:eb:2e:d5:
                    34:64:0f:03:11:89:5c:da:98:1a:f3:a8:be:b2:8c:
                    64:b8:d1:55:52:54:7b:e7:16:78:59:6b:5e:02:05:
                    16:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0B:FE:AC:F2:0D:8F:48:5D:F0:16:85:ED:E6:18:43:2E:CA:87:66
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8A3A908B59D11F18615F2E2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.121.0-156.245.127.255

    Signature Algorithm: sha256WithRSAEncryption
         36:e5:3a:04:45:87:55:17:69:19:e2:fa:85:f2:65:9a:03:57:
         09:f6:6f:35:f8:e9:8e:f8:a7:a1:02:68:4f:4b:90:bc:bd:4a:
         70:cc:cd:97:52:f9:fc:7d:0e:45:30:96:b6:88:55:a5:ff:11:
         a4:bf:8b:e2:32:95:da:e7:1f:1c:a1:0f:ce:20:91:0f:e4:88:
         b6:a1:ef:a7:13:70:10:3d:75:08:63:b9:d5:e4:13:c6:af:c2:
         e1:7c:db:6a:59:60:14:ff:a8:a3:ce:05:92:35:c1:e3:de:1f:
         65:fe:11:d6:89:14:9b:fe:fc:70:88:72:c9:8e:e2:96:a2:5d:
         e4:7c:61:cb:bb:be:3e:d4:a5:97:e9:5d:66:46:26:b5:26:89:
         16:83:36:fc:d0:44:c2:fc:89:86:4a:91:3e:51:df:f1:07:19:
         3e:92:bd:8a:02:b7:8a:51:a9:ec:87:6d:97:9c:36:fc:89:fb:
         c9:01:ca:7c:e3:1f:6f:42:55:9c:30:0f:49:8f:d7:14:bf:ef:
         df:13:9a:f5:ed:be:ba:f4:b5:0d:9b:00:a1:bb:3d:cf:d1:e3:
         e4:b7:63:8e:2f:a2:5e:37:f3:7f:33:e1:e9:e5:70:dd:a8:80:
         f7:20:a0:1e:64:80:7c:a6:a5:77:d5:ea:d9:71:2f:bd:62:80:
         3d:e0:a6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----