Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F342447AB64D11F1AF5B58E6CE1D38B0.roa
File:                     F342447AB64D11F1AF5B58E6CE1D38B0.roa (raw, json)
Hash identifier:          l89xqqTn32K3I01TKV7mEl8JO0gMHC/kpangRBRxWEI=
Subject key identifier:   7A:DE:6D:0A:F0:F3:20:1C:94:9B:49:43:25:68:BB:09:09:C9:6A:B6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D7A9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F342447AB64D11F1AF5B58E6CE1D38B0.roa
Signing time:             Tue 22 Sep 2026 06:22:14 +0000
ROA not before:           Tue 22 Sep 2026 06:22:10 +0000
ROA not after:            Tue 27 Oct 2026 06:22:10 +0000
asID:                     402390
IP address blocks:        156.236.12.0/24 maxlen: 24
                          156.252.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120745 (0x1d7a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 06:22:10 2026 GMT
            Not After : Oct 27 06:22:10 2026 GMT
        Subject: CN=6ab21e96-d2b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:20:06:4f:fe:9a:63:45:3a:ea:f4:bd:63:22:
                    34:6a:77:02:8c:e3:a4:ce:ea:ba:0f:01:d6:7a:19:
                    54:6b:5e:25:53:90:4d:5b:eb:83:ca:39:9f:38:3c:
                    0f:c3:7a:87:8a:92:65:c6:5f:61:62:df:ff:d7:a4:
                    7f:be:55:e9:89:5a:4c:99:b3:ec:d7:3c:98:e7:57:
                    fa:f2:82:5a:bd:61:f4:47:67:ee:75:99:ff:c6:d3:
                    ae:0f:a4:b9:20:29:c4:79:1f:20:6e:b6:25:13:af:
                    77:3b:e1:41:4c:87:7d:ef:3f:0a:96:f5:ac:61:2e:
                    a6:e7:b5:2a:44:25:d2:1d:ec:49:ae:ff:9c:94:dc:
                    c9:7e:db:69:8d:88:9c:99:88:74:0b:ee:82:49:49:
                    b4:40:e8:cb:b1:28:2e:cc:c7:9c:c4:40:63:8e:bf:
                    1b:a7:d6:ac:58:ea:f7:79:7b:aa:aa:72:24:ed:ba:
                    07:dd:0d:79:29:e6:b2:25:42:f2:97:8f:34:ac:e0:
                    6c:b0:56:fc:d9:ab:3e:c0:28:38:e4:af:a1:f2:c5:
                    a4:9c:14:63:38:04:de:7a:43:23:7d:7b:25:d4:1b:
                    16:08:04:ff:c6:03:65:97:9c:15:63:d8:d2:a9:af:
                    f8:2b:f3:7f:74:a9:c6:81:5f:45:8c:c1:15:f2:c9:
                    a1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DE:6D:0A:F0:F3:20:1C:94:9B:49:43:25:68:BB:09:09:C9:6A:B6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F342447AB64D11F1AF5B58E6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.12.0/24
                  156.252.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:59:4b:e7:d0:3c:d9:36:c8:ef:5f:f6:b6:33:32:25:08:4a:
         b8:89:1f:67:c8:4e:c9:26:a9:b5:02:97:28:fb:ef:e7:18:78:
         a6:e4:0a:26:0e:bf:a6:6c:71:58:8c:d1:bc:f5:49:c8:15:93:
         f9:6d:ee:4b:3c:4f:56:b0:51:39:8b:db:86:9a:f9:59:12:00:
         33:c9:ff:28:55:f7:fb:97:d6:9b:5b:88:4e:b2:a3:88:76:c1:
         28:68:5b:74:91:74:38:6b:97:53:fb:c2:b0:65:1b:a8:ae:05:
         16:c8:dc:59:60:d0:c6:84:ea:15:38:dc:46:de:85:c3:0c:69:
         75:6f:c2:4f:f2:4e:0f:38:f0:48:0e:a3:72:a3:de:05:ae:04:
         83:50:3d:c5:ae:e9:ac:05:29:7b:b3:7c:5f:7a:bb:8b:13:a4:
         78:81:a3:08:f1:c9:01:49:76:e6:55:fc:a6:19:59:9c:97:11:
         65:0f:55:fc:41:21:a2:50:80:cc:28:ef:43:1d:85:bb:73:39:
         8c:0c:eb:00:ac:cc:74:ce:ef:53:4a:46:be:79:9e:64:95:a4:
         5c:5b:10:37:2d:ae:64:0f:e7:e6:ef:6a:d1:6f:1c:28:35:c3:
         b6:67:d4:3a:f9:9e:d6:fe:b5:e5:55:48:fb:33:b8:0f:51:fb:
         7d:90:1b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----