Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0A793A2B65011F1A5A7D0F7CE1D38B0.roa
File:                     F0A793A2B65011F1A5A7D0F7CE1D38B0.roa (raw, json)
Hash identifier:          wlxtpo0KrORDDDTLg6aP/wHqWr8+sJ6FiC12ekCEXNU=
Subject key identifier:   E4:0B:3A:3B:FE:9E:99:39:82:86:33:FE:FA:2E:08:84:46:D5:BA:75
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D7AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0A793A2B65011F1A5A7D0F7CE1D38B0.roa
Signing time:             Tue 22 Sep 2026 06:43:38 +0000
ROA not before:           Tue 22 Sep 2026 06:43:34 +0000
ROA not after:            Tue 20 Oct 2026 06:43:34 +0000
asID:                     6079
IP address blocks:        156.229.172.0/24 maxlen: 24
                          156.233.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120749 (0x1d7ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 06:43:34 2026 GMT
            Not After : Oct 20 06:43:34 2026 GMT
        Subject: CN=6ab2239a-344b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:35:4d:94:87:c1:d8:ed:be:b0:21:2d:3f:fe:
                    04:94:35:8e:97:9b:78:f7:f2:45:58:c9:21:14:69:
                    8e:8d:7d:d6:63:a8:9c:11:94:6f:47:a5:97:db:45:
                    71:d9:3a:e0:c8:1f:53:51:b7:26:e0:0d:02:d4:92:
                    4c:a6:29:26:d0:60:96:aa:0f:91:7e:45:8d:10:21:
                    77:fb:89:a4:a3:00:a6:19:ab:98:8b:89:3f:21:5f:
                    42:97:c1:b4:2b:c3:df:7a:d3:b0:ce:e2:96:86:7e:
                    26:68:8e:68:5b:7f:36:21:1f:8f:69:8c:32:28:f9:
                    d6:1d:a9:62:81:c8:5c:49:eb:84:2d:b7:bc:bd:05:
                    8f:85:ca:ea:39:14:af:33:10:7a:40:30:c3:cd:46:
                    bc:f0:a0:37:5e:bd:43:2c:ad:f4:f6:d0:a2:0d:e8:
                    c8:80:73:45:85:1d:e8:a5:86:82:19:2b:9a:f9:43:
                    28:91:b2:bd:b2:5e:6f:50:ae:17:83:69:7b:d6:9b:
                    4f:cf:c9:0c:91:0d:5b:31:fc:20:79:e9:d5:44:47:
                    86:fd:ed:20:fe:a9:26:de:60:1f:13:cb:1d:65:7e:
                    12:99:fa:f6:d6:50:c4:88:2c:f9:83:d5:7d:0d:c0:
                    8c:3e:d9:4a:87:20:fa:1a:4c:8b:97:d6:bb:00:cd:
                    34:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0B:3A:3B:FE:9E:99:39:82:86:33:FE:FA:2E:08:84:46:D5:BA:75
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0A793A2B65011F1A5A7D0F7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.172.0/24
                  156.233.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:c3:b0:36:53:05:e1:4e:b7:13:77:6b:2a:8d:86:03:8f:3f:
         f5:1c:e2:13:9e:07:bd:7b:7a:12:6b:5d:43:f4:d3:5e:63:d1:
         f0:2a:e2:b2:13:f8:71:af:36:c3:ee:ee:82:ea:1d:ba:98:00:
         34:6d:05:c8:73:96:79:28:89:7d:36:e3:69:62:84:97:20:12:
         f3:21:a7:03:5b:74:5f:5d:95:9c:55:a7:b9:01:65:0b:fb:44:
         02:72:f3:f1:55:c2:ec:eb:79:da:b6:68:38:31:cf:97:78:b8:
         34:36:79:c6:a1:09:34:4d:a1:15:76:25:1a:3c:ea:85:ec:1c:
         91:6c:ba:16:3d:cd:55:27:bf:a3:87:e6:26:6d:04:ec:5e:69:
         40:b6:bd:af:f0:1b:fc:f5:b9:5b:ca:cf:41:d6:86:06:aa:16:
         9e:05:9f:b2:1a:96:3a:af:94:d4:01:62:57:22:85:05:09:0a:
         74:7f:b0:17:86:88:27:35:6a:cf:2d:13:19:1e:bd:89:14:97:
         a8:b5:81:fa:2e:be:a4:1d:43:fc:88:f9:20:2e:d5:58:f3:c9:
         39:68:55:68:25:cc:75:87:64:ca:02:c8:11:b7:89:ba:a8:20:
         6b:34:67:3e:7e:51:b9:86:8b:eb:dc:f9:86:f5:81:05:cc:a9:
         b5:f6:13:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----