Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59165164A76311F1BB5B0605CF1D38B0.roa
File:                     59165164A76311F1BB5B0605CF1D38B0.roa (raw, json)
Hash identifier:          K4WY71zTSaIWRByeO3qU7m8HAc+3CaiVgssRywlE4t4=
Subject key identifier:   E7:E0:43:3C:07:DC:75:03:87:AF:63:30:C9:DF:03:F5:7B:C1:2A:EF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D2B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59165164A76311F1BB5B0605CF1D38B0.roa
Signing time:             Thu 03 Sep 2026 06:47:37 +0000
ROA not before:           Thu 03 Sep 2026 06:47:33 +0000
ROA not after:            Sat 10 Oct 2026 06:47:33 +0000
asID:                     138915
IP address blocks:        156.244.9.0/24 maxlen: 24
                          156.244.10.0/24 maxlen: 24
                          156.244.11.0/24 maxlen: 24
                          156.244.12.0/24 maxlen: 24
                          156.244.13.0/24 maxlen: 24
                          156.244.14.0/24 maxlen: 24
                          156.244.15.0/24 maxlen: 24
                          156.244.16.0/24 maxlen: 24
                          156.244.17.0/24 maxlen: 24
                          156.244.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119476 (0x1d2b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  3 06:47:33 2026 GMT
            Not After : Oct 10 06:47:33 2026 GMT
        Subject: CN=6a991808-459b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:41:e0:fb:58:eb:1c:31:59:7d:a9:28:06:72:
                    6f:85:0b:40:ad:29:e9:a3:7f:6a:b4:0d:2e:ad:39:
                    9c:2e:d8:30:f9:74:f8:47:c9:98:0e:c0:d4:5c:ff:
                    aa:be:31:5a:5c:07:fc:cb:c6:6f:ce:45:29:1c:8f:
                    28:45:e0:da:7b:1b:6a:d6:ea:1c:f4:16:60:12:ff:
                    b2:59:c3:6a:c3:dc:04:61:6c:3b:9e:be:07:cc:b3:
                    bf:0e:e8:67:41:bd:ed:81:1f:21:87:16:58:27:70:
                    9c:01:62:98:6d:0a:ab:d8:a0:bd:d6:8c:1b:7e:97:
                    f5:3a:42:4a:a9:8c:96:3f:20:2d:f4:f2:0d:d6:c6:
                    35:02:27:21:5f:0b:df:21:82:ef:2f:10:52:f6:ea:
                    dd:b1:cc:67:7c:cf:65:f3:3a:e5:0b:ff:96:e2:0b:
                    45:25:74:6e:e0:60:b1:cb:13:00:c9:ab:31:13:3f:
                    9b:ea:93:1a:59:fc:86:c0:35:1f:d4:1d:e8:b2:2b:
                    47:9f:a9:7b:d5:1d:4f:53:03:07:dc:d5:5f:2e:10:
                    50:de:dd:1d:9c:52:de:05:21:47:2a:20:e8:c3:22:
                    31:4c:bb:c7:db:13:1d:3e:db:b4:77:6e:71:79:62:
                    ca:7c:1a:43:fb:fd:2c:d9:ea:98:7e:dd:69:61:c1:
                    59:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E0:43:3C:07:DC:75:03:87:AF:63:30:C9:DF:03:F5:7B:C1:2A:EF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59165164A76311F1BB5B0605CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.9.0-156.244.18.255

    Signature Algorithm: sha256WithRSAEncryption
         24:16:ca:3f:27:a6:56:7d:9d:2e:4f:ac:50:a0:c3:8e:da:db:
         71:9b:a6:15:45:f4:fd:ac:c9:b0:41:27:da:b1:2a:2a:fb:b2:
         24:12:8b:a3:d3:f6:fd:cf:19:f5:0a:a1:17:cd:cd:7c:a6:31:
         6e:98:db:ea:27:ca:65:9a:ed:10:c3:34:48:e9:fa:4d:0f:16:
         3d:f3:dc:fc:73:3a:5d:b7:a8:9c:a8:af:c6:c4:92:27:06:4f:
         48:c6:a6:24:3d:d6:49:20:50:96:c5:07:1e:c7:bc:74:84:56:
         42:bf:b5:32:92:f2:c4:ea:89:44:8a:09:b9:10:7a:98:29:6d:
         66:af:8f:3d:36:87:d9:18:ad:74:58:3e:ab:ea:02:25:4f:f5:
         e0:d9:5e:de:d2:47:24:a3:77:9d:10:ae:40:4f:9e:75:78:fe:
         54:a2:c7:7f:cc:7f:91:47:23:4d:7f:81:c0:83:b2:8a:3a:26:
         67:6b:45:90:60:55:e6:78:63:b6:c2:66:a0:e8:db:65:4c:ca:
         37:2f:c4:ae:69:ad:8f:b4:19:56:73:6e:4a:12:89:3d:f1:5c:
         75:47:df:6e:91:7f:eb:3f:2a:f0:b2:c7:51:32:e4:ef:0f:4e:
         1c:40:13:13:96:cf:2c:8f:1e:d3:65:5d:69:7e:75:61:d6:3b:
         e0:bb:b3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----