Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/046BDDC29F8F11F1A57B7714CF1D38B0.roa
File:                     046BDDC29F8F11F1A57B7714CF1D38B0.roa (raw, json)
Hash identifier:          xtoW3tYFyn96DShXLDqWvTwoealVVJn8qgTpnl0N6T4=
Subject key identifier:   A6:89:05:B4:5A:A3:04:79:8E:35:D9:EE:D4:DD:F6:75:9B:7B:6A:DD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D054
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/046BDDC29F8F11F1A57B7714CF1D38B0.roa
Signing time:             Mon 24 Aug 2026 07:40:03 +0000
ROA not before:           Mon 24 Aug 2026 07:39:59 +0000
ROA not after:            Tue 22 Sep 2026 07:39:59 +0000
asID:                     141159
IP address blocks:        156.233.230.0/24 maxlen: 24
                          156.233.231.0/24 maxlen: 24
                          156.233.236.0/22 maxlen: 24
                          156.233.236.0/24 maxlen: 24
                          156.233.237.0/24 maxlen: 24
                          156.233.238.0/24 maxlen: 24
                          156.233.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118868 (0x1d054)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 24 07:39:59 2026 GMT
            Not After : Sep 22 07:39:59 2026 GMT
        Subject: CN=6a8bf553-5cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ea:0b:23:74:13:a3:47:f0:98:d3:ad:84:84:
                    0a:10:0a:31:c1:f7:ad:65:5e:e8:e5:57:fc:7f:fe:
                    5c:34:2a:63:de:5f:71:53:b5:6b:3f:c0:4d:d9:d9:
                    b2:dc:c2:57:bd:ff:c7:db:1a:51:7d:5c:d0:dc:1c:
                    c4:ab:35:37:d6:8d:60:70:1d:4e:f4:5a:65:8f:4c:
                    d3:86:fe:fe:dd:0a:b9:69:e8:ba:bb:95:4a:f2:16:
                    1b:7e:bd:fe:96:6b:a3:19:c0:16:46:34:c6:3c:87:
                    05:97:ee:f1:05:8a:0b:0c:09:9c:e3:e6:02:42:b1:
                    d0:7e:bb:d2:eb:13:96:4a:eb:15:b6:0c:14:72:69:
                    71:75:b4:56:f1:d2:67:12:70:87:74:2c:11:e4:30:
                    43:e1:94:c4:00:61:ce:ae:7b:f1:48:33:1f:72:51:
                    81:56:0b:8d:04:9a:ec:8e:ca:1d:fb:70:65:a9:80:
                    43:d6:cb:eb:74:8d:bd:c4:86:d2:12:9e:b7:9a:03:
                    45:6a:cd:f3:80:55:d7:22:94:ec:21:27:11:e1:9a:
                    97:20:d1:52:85:e4:42:1d:2a:29:a6:39:95:d6:89:
                    d0:70:6e:be:94:a4:3a:71:23:57:97:bb:6b:09:6b:
                    06:2e:ba:68:ba:29:56:14:f5:0a:b8:19:52:30:f8:
                    b0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:89:05:B4:5A:A3:04:79:8E:35:D9:EE:D4:DD:F6:75:9B:7B:6A:DD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/046BDDC29F8F11F1A57B7714CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.230.0/23
                  156.233.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:93:54:9e:69:4f:65:2c:54:cb:37:8d:e9:54:a5:58:39:cd:
         58:44:7a:b9:77:d2:53:c7:4f:76:3a:a7:0c:bc:b5:00:f3:ba:
         59:ac:1b:6e:b8:93:0a:2f:f4:cf:d0:a5:bc:a5:27:9c:88:56:
         91:3b:35:23:db:6b:69:2e:04:09:59:97:bd:9e:dc:4d:df:ed:
         2d:c1:69:e9:ef:2f:a7:59:1f:9d:1e:8a:00:de:a1:83:bd:19:
         51:b0:7f:b1:13:f6:fc:34:cb:f6:f1:00:49:e2:30:47:13:33:
         5c:d2:cd:92:58:c1:1a:da:64:25:0a:2a:88:19:6d:76:51:d0:
         47:9b:b5:a9:c5:c8:78:37:2f:01:32:ff:ba:5e:49:44:d6:2c:
         5e:0a:a7:54:11:3d:fe:55:c8:0f:a0:e5:05:37:26:c7:e3:11:
         25:bf:75:45:91:a5:f0:89:0e:cc:9b:20:e5:72:df:ad:a6:c4:
         1b:09:2f:aa:00:02:ec:54:36:5f:2e:2d:b5:8b:fd:fc:12:0c:
         df:43:00:4e:4c:0f:6f:df:e0:5e:00:b8:85:38:9a:72:86:4f:
         30:39:8a:9b:59:2f:57:29:d3:2f:3a:88:a5:e4:e4:6a:f9:53:
         2b:d6:70:2a:6e:9f:1f:f3:f1:55:46:d2:bc:14:ba:51:d5:8c:
         95:52:7e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----