Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA41E6BAAD0011F19F503E00CF1D38B0.roa
File:                     EA41E6BAAD0011F19F503E00CF1D38B0.roa (raw, json)
Hash identifier:          xmDsHKEgqHQ0CMznarWPdS41HxkaBwFFm/KUzL1GU0M=
Subject key identifier:   B3:88:14:60:54:9D:BC:1D:66:AB:C1:7F:48:41:D0:4E:23:12:63:2D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D4CE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA41E6BAAD0011F19F503E00CF1D38B0.roa
Signing time:             Thu 10 Sep 2026 10:18:12 +0000
ROA not before:           Thu 10 Sep 2026 10:17:59 +0000
ROA not after:            Sat 17 Oct 2026 10:17:59 +0000
asID:                     22773
IP address blocks:        156.243.48.0/20 maxlen: 24
                          156.243.205.0/24 maxlen: 24
                          156.243.206.0/24 maxlen: 24
                          156.243.207.0/24 maxlen: 24
                          156.243.218.0/24 maxlen: 24
                          156.248.1.0/24 maxlen: 24
                          156.248.2.0/24 maxlen: 24
                          156.248.3.0/24 maxlen: 24
                          156.248.22.0/24 maxlen: 24
                          156.248.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120014 (0x1d4ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 10 10:17:59 2026 GMT
            Not After : Oct 17 10:17:59 2026 GMT
        Subject: CN=6aa283e4-520f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:ea:b9:5b:2b:4b:43:19:be:c6:19:70:37:
                    00:8f:4f:dd:cf:05:54:9a:a6:52:b4:fc:ae:ec:d4:
                    86:42:ef:29:92:4e:1b:70:a5:df:32:d3:e1:36:4c:
                    ae:df:a1:63:26:77:9f:98:c3:2e:06:2e:a7:af:71:
                    cc:39:1e:0a:93:6f:25:3d:19:26:61:c1:c9:2d:55:
                    a6:d8:ea:0b:09:5a:86:79:59:83:38:1b:18:69:85:
                    82:36:47:4d:c4:36:0f:f8:60:37:be:b7:4d:01:0f:
                    34:89:c5:21:eb:93:35:87:af:02:bc:cf:21:42:5f:
                    0c:fc:33:08:13:84:db:6b:47:72:88:8c:0a:a6:0f:
                    ab:97:17:84:19:2c:bd:0f:36:2a:4b:e4:b2:b1:e4:
                    cc:24:f0:b5:3b:f8:9d:7d:54:c4:ba:80:70:c6:41:
                    25:60:78:fd:b2:f0:81:1a:f1:08:36:19:04:2e:0a:
                    62:04:8c:b7:27:48:ab:df:70:8f:fb:1e:e9:f6:d5:
                    68:a0:29:45:8c:d0:db:36:62:de:58:17:14:28:e7:
                    8c:8e:07:1e:c4:d8:0a:ca:bc:b0:cd:49:6e:16:2f:
                    29:28:09:e1:5f:06:68:4c:14:52:49:7a:0f:a0:4f:
                    7f:9f:c1:0f:cc:04:6e:c8:5b:c6:5a:6b:c1:0d:77:
                    cc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:88:14:60:54:9D:BC:1D:66:AB:C1:7F:48:41:D0:4E:23:12:63:2D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA41E6BAAD0011F19F503E00CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.243.48.0/20
                  156.243.205.0-156.243.207.255
                  156.243.218.0/24
                  156.248.1.0-156.248.3.255
                  156.248.22.0/24
                  156.248.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:0b:19:e1:04:2d:51:66:8f:0d:d8:9a:fd:d3:b4:b3:09:9e:
         9a:5d:13:38:82:c7:65:ce:ac:b1:53:78:75:62:58:22:a3:ae:
         eb:6b:14:9a:99:0a:0a:21:a8:92:ed:05:61:22:76:5c:20:b4:
         09:31:e6:2c:7b:0e:66:e2:91:70:bc:da:2d:a2:f1:45:97:63:
         63:e7:2e:fa:a6:4f:88:0c:24:6b:b0:88:69:c9:92:1f:0e:13:
         9c:58:21:3a:34:52:f6:37:ed:2e:ca:03:ac:b5:5b:fe:a9:3f:
         0b:f2:79:40:9d:01:c7:2a:67:50:55:3e:02:44:b1:45:5f:c3:
         ea:ea:e5:77:d5:f9:0f:d2:6a:d3:eb:75:4f:ac:e3:f1:35:c3:
         7f:ec:7f:f6:d6:53:2a:9c:6d:ce:c0:8a:86:d9:06:17:e9:0b:
         30:94:ec:85:ec:f6:05:8c:70:da:96:38:98:ad:5e:57:ad:27:
         c6:78:0c:e0:bd:4a:2e:36:47:9f:c6:1b:10:4d:3c:db:03:4f:
         b0:54:6d:a1:d3:8a:dd:bb:a0:30:24:fa:51:90:81:96:d5:c0:
         bc:aa:05:df:e5:7d:b3:2a:d0:f8:e5:84:e3:eb:53:ff:7d:53:
         20:06:2a:44:ef:ac:07:5d:9e:54:db:03:44:45:4e:07:0f:1e:
         9f:f6:a1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----