Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91FBC132A76111F1B280FDF8CE1D38B0.roa
File:                     91FBC132A76111F1B280FDF8CE1D38B0.roa (raw, json)
Hash identifier:          opukxzS0sLaQvsfA4hl8saDAbqcciMbBpB37KcN6IuE=
Subject key identifier:   7B:65:E2:8B:76:8B:40:47:F1:7C:F2:4E:9C:A4:32:BA:19:55:20:9A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D2AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91FBC132A76111F1B280FDF8CE1D38B0.roa
Signing time:             Thu 03 Sep 2026 06:34:53 +0000
ROA not before:           Thu 03 Sep 2026 06:34:49 +0000
ROA not after:            Sat 10 Oct 2026 06:34:49 +0000
asID:                     138915
IP address blocks:        156.244.0.0/24 maxlen: 24
                          156.244.1.0/24 maxlen: 24
                          156.244.2.0/24 maxlen: 24
                          156.244.3.0/24 maxlen: 24
                          156.244.4.0/24 maxlen: 24
                          156.244.5.0/24 maxlen: 24
                          156.244.6.0/24 maxlen: 24
                          156.244.7.0/24 maxlen: 24
                          156.244.8.0/24 maxlen: 24
                          156.244.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119468 (0x1d2ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  3 06:34:49 2026 GMT
            Not After : Oct 10 06:34:49 2026 GMT
        Subject: CN=6a99150d-9c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2a:8c:8d:c6:ad:50:d9:c2:26:57:3d:01:b4:
                    78:9b:a2:0e:4d:d0:75:47:f0:96:1b:f0:b8:6e:6c:
                    97:8d:f3:0e:d6:f2:86:4e:86:85:9e:04:10:7b:e8:
                    55:ab:9d:94:55:96:35:38:48:78:c3:75:ac:fc:8f:
                    4e:f3:7f:d3:ed:80:b9:5c:38:5d:cd:bc:10:d8:7d:
                    bf:6a:38:e7:e2:87:d7:19:7c:b0:44:de:4f:78:49:
                    31:f7:a5:5f:3d:92:04:27:75:8c:c0:3b:69:d5:a6:
                    5a:6b:b4:04:33:f2:31:1b:a9:3d:e1:a4:fd:95:ea:
                    43:eb:2e:c0:7c:b8:16:a1:6f:1c:03:45:58:be:26:
                    31:c7:17:b3:45:55:16:24:7b:62:bb:89:af:56:19:
                    9b:ba:02:b9:6d:ae:67:ad:10:92:17:8f:7a:b9:b4:
                    c0:d2:58:25:ea:5a:06:19:5e:08:08:12:09:0a:12:
                    4c:1f:4d:b0:6f:8e:ac:6a:63:a8:02:d3:f8:01:cf:
                    ae:22:c8:c9:ea:2d:b1:ec:9c:a3:b5:56:12:78:6d:
                    01:11:6a:5b:01:77:75:34:5c:cd:df:0a:d7:0f:38:
                    36:63:41:68:ae:9d:ac:76:2f:c4:b9:3b:60:74:7d:
                    db:03:5f:e3:a7:1f:43:23:bc:5a:32:48:06:c8:a8:
                    8f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:65:E2:8B:76:8B:40:47:F1:7C:F2:4E:9C:A4:32:BA:19:55:20:9A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91FBC132A76111F1B280FDF8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.0.0-156.244.8.255
                  156.244.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:2e:a1:2e:c0:68:ca:68:7a:8c:bf:f2:a5:3c:fa:6e:e0:2b:
         84:2a:e0:41:05:23:1f:8a:30:ee:67:d9:87:28:f1:84:9d:c8:
         90:70:34:25:79:99:6e:45:fc:f9:dd:27:1b:55:03:11:66:05:
         31:5f:bb:46:61:71:3a:04:19:a3:49:0e:17:59:b4:56:df:fb:
         22:a9:db:06:1e:9a:7d:a4:a5:79:13:fe:d8:cd:25:64:9f:b9:
         ce:3a:1c:b7:7d:b3:45:e6:f7:81:f4:05:e2:5c:60:fe:08:db:
         3b:70:3b:f0:62:de:c4:8d:e3:ab:5f:a0:3d:fd:03:09:06:a4:
         9c:6e:46:8f:8b:e4:33:e1:1c:b5:b0:54:45:37:65:74:df:65:
         ad:68:3a:ec:52:0b:2b:8a:98:9e:b2:81:da:02:94:86:4b:0a:
         6f:9b:f7:2f:b3:1c:94:bd:b6:b7:24:47:9b:42:91:86:0a:24:
         4d:58:70:5b:59:e9:77:38:39:0e:e7:e4:b9:24:2c:78:b7:66:
         81:ad:5b:85:5e:21:1b:a9:76:ad:1b:be:97:62:89:9b:a1:c0:
         70:ec:b3:b3:74:68:8b:36:a3:ca:e7:ee:22:a9:40:e8:ee:ec:
         ea:20:e0:5c:50:f4:f5:d0:7f:3d:fe:e7:c6:5d:4d:bf:c3:f5:
         48:0e:37:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----