Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94DAE99EA79011F1B28BE010CF1D38B0.roa
File:                     94DAE99EA79011F1B28BE010CF1D38B0.roa (raw, json)
Hash identifier:          qDMUTCNqYqxsLI8q+PvIPpBbjd5tT1hI9yFVkrm4l3A=
Subject key identifier:   26:1D:17:EC:99:D6:09:FA:B8:75:F7:5C:6B:1A:70:B6:8D:51:05:3C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D312
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94DAE99EA79011F1B28BE010CF1D38B0.roa
Signing time:             Thu 03 Sep 2026 12:11:24 +0000
ROA not before:           Thu 03 Sep 2026 12:11:20 +0000
ROA not after:            Sat 10 Oct 2026 12:11:20 +0000
asID:                     138915
IP address blocks:        156.244.31.0/24 maxlen: 24
                          156.244.32.0/24 maxlen: 24
                          156.244.33.0/24 maxlen: 24
                          156.244.34.0/24 maxlen: 24
                          156.244.35.0/24 maxlen: 24
                          156.244.37.0/24 maxlen: 24
                          156.244.38.0/24 maxlen: 24
                          156.244.39.0/24 maxlen: 24
                          156.244.40.0/24 maxlen: 24
                          156.244.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119570 (0x1d312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  3 12:11:20 2026 GMT
            Not After : Oct 10 12:11:20 2026 GMT
        Subject: CN=6a9963ec-a25a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:45:1d:1a:33:e3:26:11:b6:b8:9f:a7:f3:5a:
                    72:f7:d9:0c:93:14:57:9b:4b:6c:b5:76:5e:2b:70:
                    60:e5:72:0f:dc:57:69:2e:90:5a:a1:cd:ec:05:66:
                    dd:f2:a9:95:7a:62:8a:e8:3c:0b:40:8c:cc:23:f4:
                    64:a2:d8:b3:d6:b4:6c:ab:8b:bd:fe:fa:55:fe:74:
                    62:bd:59:5b:7c:5a:d7:97:3e:ce:82:d3:61:f0:a2:
                    5b:fa:a6:ea:13:24:49:f0:23:f7:cf:2f:3c:59:95:
                    b0:ce:7e:c6:0f:01:d8:62:11:95:fe:56:73:db:18:
                    95:41:50:1b:6d:92:0d:8e:d8:9b:d9:98:8d:84:a3:
                    c2:e8:35:f7:1d:06:80:9f:74:3c:92:7e:41:b4:5f:
                    4a:af:10:82:03:17:16:58:d8:cd:99:9d:23:e9:30:
                    47:b0:f3:9d:56:dd:37:23:a4:6c:44:92:3e:e9:e1:
                    ad:11:ee:74:41:83:c7:f6:b8:42:4a:21:c8:40:04:
                    3c:a5:b4:94:3d:70:93:34:55:cc:30:1a:fc:ef:b6:
                    63:d6:1d:a9:4f:a9:70:62:15:7a:dc:26:03:0a:8b:
                    65:33:26:75:71:57:3d:37:e1:56:d6:ca:8c:68:bd:
                    c7:a1:9e:b1:26:a6:b7:15:28:2b:0a:cb:02:11:96:
                    f3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1D:17:EC:99:D6:09:FA:B8:75:F7:5C:6B:1A:70:B6:8D:51:05:3C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94DAE99EA79011F1B28BE010CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.31.0-156.244.35.255
                  156.244.37.0-156.244.40.255
                  156.244.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:0b:d1:8f:6c:64:5e:c1:c4:56:c4:6b:61:2e:c8:fb:42:70:
         a5:37:83:39:63:ed:ea:2b:3c:a0:0a:41:fb:a7:c4:4e:56:0b:
         93:15:53:1a:56:9d:89:6c:cb:1b:20:eb:cc:8b:28:f0:f8:e0:
         e6:e0:59:52:d3:b5:7e:8b:2f:49:e6:cb:33:cd:17:2c:ce:52:
         5b:30:f4:eb:68:b4:2d:67:c5:2a:9b:ad:c7:f7:de:1e:a8:b9:
         ba:9a:b4:86:10:fc:6b:61:22:5d:8a:b1:24:26:e8:3f:d4:7c:
         17:20:56:10:e0:4b:37:39:83:c3:37:d2:ad:1f:4a:00:4f:a1:
         52:b9:bc:2e:fc:08:b3:db:a5:03:33:bb:d3:a0:e3:7c:15:f8:
         9c:2a:0b:b7:bd:0c:af:c4:a9:57:64:e2:19:77:3a:98:55:d5:
         f9:b7:b1:16:90:89:d5:29:1e:c2:31:b4:77:bf:42:dd:84:18:
         f6:29:60:e4:9e:de:dd:5c:8a:b1:d4:d6:6d:79:5a:ee:1b:08:
         b2:ff:3f:2f:c3:1d:71:0e:00:76:95:06:64:f0:80:55:d4:8f:
         24:67:fd:80:66:e9:aa:f7:84:f4:63:47:21:10:cf:6e:5c:d2:
         62:45:5b:b8:87:04:81:67:b1:e4:cb:95:7f:2e:39:6e:9a:f8:
         8d:85:89:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----