Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1A52382B4D111F1B10D7AB1CE1D38B0.roa
File:                     D1A52382B4D111F1B10D7AB1CE1D38B0.roa (raw, json)
Hash identifier:          l+WDccT65aZ7aVonp33Qn+3YkbLLAOOiKaKWNcDXg6A=
Subject key identifier:   8F:7D:FC:B0:2A:AA:20:0D:5E:B1:3E:8E:28:8A:EB:13:64:3F:99:F3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D71C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1A52382B4D111F1B10D7AB1CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 09:01:09 +0000
ROA not before:           Sun 20 Sep 2026 09:01:04 +0000
ROA not after:            Sat 24 Oct 2026 09:01:04 +0000
asID:                     54600
IP address blocks:        156.239.24.0/21 maxlen: 24
                          156.239.32.0/20 maxlen: 24
                          156.239.48.0/22 maxlen: 24
                          156.239.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120604 (0x1d71c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 20 09:01:04 2026 GMT
            Not After : Oct 24 09:01:04 2026 GMT
        Subject: CN=6aafa0d5-ab6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:42:4b:a7:3a:af:0e:85:9a:2e:46:d6:43:bf:
                    1d:da:d7:8f:7d:28:ff:b9:bf:1f:95:3c:3f:91:0a:
                    14:b8:18:65:45:43:0d:eb:e6:6d:b9:42:af:cc:40:
                    0b:3d:77:1e:2c:68:02:f3:8d:be:b5:9b:ac:a6:1a:
                    15:8f:35:7c:f7:df:7f:7f:12:e7:c8:f0:29:92:98:
                    7f:63:05:36:98:04:29:3a:4d:6c:30:3f:0b:7d:f4:
                    b9:5e:9c:5e:c0:55:3b:00:1a:3c:8f:f6:5a:cf:52:
                    fe:c0:42:f1:3f:99:be:6e:3f:1f:56:f2:d2:c9:51:
                    57:3f:e0:32:e3:da:0f:45:cd:97:98:04:55:df:19:
                    1a:50:80:c9:9b:22:85:a5:5e:29:4b:44:01:bf:b6:
                    7a:ee:4e:b3:48:ed:72:d6:d3:ed:6e:45:62:af:00:
                    40:7e:ed:d4:d5:30:ea:07:d7:77:15:00:14:3c:75:
                    59:62:2c:60:9d:72:75:8c:f1:b4:1b:e7:a2:a1:4d:
                    1f:4e:d1:dc:0b:f1:fd:f8:10:3a:5e:ca:55:ef:84:
                    68:eb:18:8f:0a:4f:27:a8:17:15:50:1f:d0:95:1d:
                    0c:f7:25:52:75:a4:32:bc:8d:e9:69:f4:20:11:d6:
                    5f:42:3d:f9:db:9a:42:2e:7d:0d:0d:a7:31:f6:1f:
                    e8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7D:FC:B0:2A:AA:20:0D:5E:B1:3E:8E:28:8A:EB:13:64:3F:99:F3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1A52382B4D111F1B10D7AB1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.24.0-156.239.53.255

    Signature Algorithm: sha256WithRSAEncryption
         7b:07:ba:4d:aa:25:f0:a0:df:d0:62:d3:4e:9e:2f:b5:25:f3:
         dd:df:2d:92:da:e1:aa:af:9f:3c:b8:95:8c:5a:cd:52:28:0b:
         24:c5:2f:a9:21:d3:b9:74:84:17:db:bd:f8:91:7a:89:f0:e7:
         7f:15:e7:d0:ea:a9:10:ff:92:fb:2f:38:05:8f:62:cb:d2:12:
         00:a8:f4:6b:a3:7f:87:a3:c0:9e:dd:28:75:09:9f:99:f3:a1:
         a7:9c:53:a8:5c:9e:c0:56:be:f3:17:38:b5:1f:05:72:9b:95:
         18:f0:24:34:2b:b2:d6:97:8c:f3:bc:76:de:3f:66:c8:65:0e:
         9d:11:e5:cc:29:32:7f:14:99:4b:43:2b:da:92:fd:75:ef:a9:
         29:da:36:6e:e3:59:15:23:d5:e4:7e:ec:db:ca:63:1e:39:eb:
         95:56:fd:01:31:f7:b1:ae:78:7e:b1:c4:9c:b1:52:7d:dd:ef:
         3e:32:36:f6:14:6c:5e:20:76:15:2d:26:de:6d:84:14:e3:2f:
         95:12:a3:fb:e6:16:e1:ba:13:55:0d:13:28:00:f1:bc:ba:e5:
         39:30:d1:14:8a:48:43:2b:dd:21:e5:11:ae:dd:2d:ae:51:55:
         47:a1:16:88:87:b6:88:7b:b4:98:44:1a:af:1c:b9:20:8b:ba:
         6b:b7:e6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----