Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8C9F71EB71511F1A60D04FDCE1D38B0.roa
File:                     D8C9F71EB71511F1A60D04FDCE1D38B0.roa (raw, json)
Hash identifier:          K7t5sUInoiZWU4hylEYDpW0A/q1m2x86YNUV3TBmoHQ=
Subject key identifier:   BE:99:9A:F4:AF:33:CC:1C:C6:EC:CC:93:73:9C:12:A3:07:C4:71:7E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D854
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8C9F71EB71511F1A60D04FDCE1D38B0.roa
Signing time:             Wed 23 Sep 2026 06:13:09 +0000
ROA not before:           Wed 23 Sep 2026 06:13:04 +0000
ROA not after:            Mon 05 Oct 2026 06:13:04 +0000
asID:                     271355
IP address blocks:        156.236.192.0/19 maxlen: 24
                          156.236.192.0/24 maxlen: 24
                          156.236.193.0/24 maxlen: 24
                          156.236.249.0/24 maxlen: 24
                          156.236.250.0/24 maxlen: 24
                          156.236.251.0/24 maxlen: 24
                          156.236.252.0/24 maxlen: 24
                          156.236.253.0/24 maxlen: 24
                          156.236.254.0/24 maxlen: 24
                          156.236.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 07:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120916 (0x1d854)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 23 06:13:04 2026 GMT
            Not After : Oct  5 06:13:04 2026 GMT
        Subject: CN=6ab36df5-9417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:72:2a:44:bd:bd:e5:24:92:d1:83:ff:95:d5:
                    fa:68:eb:25:db:02:e7:f4:f6:f8:38:98:92:30:76:
                    8e:f8:51:6b:82:43:f2:60:2c:92:18:c8:db:d0:d3:
                    e3:22:1e:16:83:79:4d:89:3b:91:f8:11:b0:2b:3f:
                    5f:00:e7:0b:0f:6f:c6:3f:11:8a:f1:71:2d:14:3e:
                    5f:2e:40:a8:8b:19:59:ad:aa:05:74:d7:80:ef:59:
                    78:44:e1:46:43:70:9f:50:42:25:3b:71:a2:f7:e0:
                    9d:9a:79:ac:8e:40:43:aa:12:04:f3:14:e0:39:66:
                    b5:3d:6c:c2:93:67:7d:1f:56:66:e3:7b:6d:b0:8c:
                    cc:09:57:72:bd:49:0c:73:52:ae:89:0c:11:f8:3a:
                    d4:73:bb:22:11:93:8c:23:25:1e:37:7a:13:70:01:
                    43:14:ed:19:08:11:84:86:ac:af:63:6c:8f:96:6f:
                    38:ed:d3:37:c7:01:e2:db:73:44:0c:b3:30:33:69:
                    46:c7:bb:4f:b4:9b:bf:df:95:c5:4b:e5:70:c0:9d:
                    ad:57:28:b6:6a:14:22:ba:74:d8:1f:50:ab:e0:a1:
                    50:e5:8f:57:62:66:6d:37:40:2b:ed:a4:18:a6:ff:
                    70:be:a4:49:be:e5:78:f7:1a:14:34:40:75:4e:61:
                    08:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:99:9A:F4:AF:33:CC:1C:C6:EC:CC:93:73:9C:12:A3:07:C4:71:7E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8C9F71EB71511F1A60D04FDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.192.0/19
                  156.236.249.0-156.236.255.255

    Signature Algorithm: sha256WithRSAEncryption
         37:0e:4c:25:43:97:26:cd:e6:b7:94:0d:48:84:cd:21:1a:7a:
         84:ae:0f:0d:bf:7d:d6:15:6d:06:d5:a3:dc:0d:9a:83:80:b3:
         67:8f:14:67:06:bd:6d:28:fa:3b:6e:99:8f:d7:29:ea:d8:5e:
         c9:63:78:9b:e7:d3:fc:fa:26:57:f1:aa:6d:2f:5d:91:c1:d4:
         78:7a:1c:de:6c:60:18:94:51:44:cd:b3:17:8a:e7:9a:e3:00:
         e3:84:1a:80:81:83:04:e7:19:70:b9:8e:2c:d2:b6:8b:2b:5c:
         e7:d6:40:7a:4c:aa:28:6f:96:38:86:a0:b8:69:42:a1:2b:a9:
         ea:c1:74:71:0a:b6:7e:bc:4c:cc:c3:d2:39:5c:63:74:51:ef:
         ac:ba:05:e4:0c:bd:f3:b0:62:82:6b:00:60:cc:bd:73:40:ce:
         29:48:c3:f6:77:c0:b3:99:3a:b2:78:3c:5f:18:43:d2:f2:5a:
         ec:32:f9:aa:7c:45:36:14:da:b7:a9:03:30:8d:c7:5d:74:36:
         f0:85:ea:4d:5a:7d:b3:f9:30:f7:10:e4:75:22:08:d3:63:ef:
         c9:43:44:45:2e:3b:1c:7c:ea:8d:82:b8:f9:f5:a1:c1:8e:21:
         17:dc:80:52:5d:39:82:34:7f:55:48:50:21:a3:49:64:ab:1f:
         43:5b:34:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----