Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08280ABCB98911F1BB5037F5CE1D38B0.roa
File:                     08280ABCB98911F1BB5037F5CE1D38B0.roa (raw, json)
Hash identifier:          zetHMVlTnHZP/34m/DfJJYetO5ueZnKlgTW64+r+2Yo=
Subject key identifier:   B8:6E:9F:01:F9:B7:16:F5:ED:A9:B5:CF:55:BE:5C:35:3E:E2:8E:06
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D8DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08280ABCB98911F1BB5037F5CE1D38B0.roa
Signing time:             Sat 26 Sep 2026 09:02:43 +0000
ROA not before:           Sat 26 Sep 2026 09:02:38 +0000
ROA not after:            Sun 01 Nov 2026 09:02:38 +0000
asID:                     202656
IP address blocks:        156.233.9.0/24 maxlen: 24
                          156.233.96.0/24 maxlen: 24
                          156.233.97.0/24 maxlen: 24
                          156.233.106.0/24 maxlen: 24
                          156.233.116.0/24 maxlen: 24
                          156.233.117.0/24 maxlen: 24
                          156.233.127.0/24 maxlen: 24
                          156.238.180.0/24 maxlen: 24
                          156.238.182.0/24 maxlen: 24
                          156.239.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121054 (0x1d8de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 26 09:02:38 2026 GMT
            Not After : Nov  1 09:02:38 2026 GMT
        Subject: CN=6ab78a33-fe82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fd:0c:62:24:03:cf:3c:da:43:65:b9:bc:cd:
                    4f:c1:a8:b2:de:a9:97:81:e6:e3:51:1d:db:41:69:
                    14:ff:b7:76:2c:3d:45:88:25:8b:bb:c4:20:03:e9:
                    8a:7a:9d:ba:ec:5d:51:11:77:32:56:c1:d4:2d:1c:
                    77:9c:d8:70:8a:03:79:fc:a9:73:9e:ad:03:5a:d4:
                    01:c5:23:0b:f5:7e:ff:ff:b7:b3:67:3f:8e:99:26:
                    66:6c:41:a6:73:67:7c:b9:1a:00:73:30:79:92:4f:
                    fb:0e:dc:9e:da:b9:7b:a3:4d:74:f4:e6:fa:6e:eb:
                    a2:0e:be:36:74:fc:f3:21:07:63:68:cb:f1:cd:46:
                    12:87:a6:89:8c:40:95:41:8a:01:62:ba:90:ea:b9:
                    f8:06:d4:da:83:68:0f:02:28:89:ea:84:7e:16:98:
                    31:86:d2:fd:04:a3:e7:7f:2d:26:e5:ff:7a:4b:9f:
                    c9:dd:ad:84:a1:66:28:8e:14:3b:1f:1c:73:3d:d1:
                    65:2a:4f:80:7f:00:9f:9a:bc:b6:e7:82:06:17:63:
                    24:ff:a8:78:c3:24:52:a4:70:6d:ce:4c:25:10:71:
                    e5:b8:bc:a3:16:0a:f8:b5:02:02:af:57:c9:b6:9e:
                    29:0f:9c:17:e8:f3:5e:72:20:5d:37:17:2e:67:3e:
                    95:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6E:9F:01:F9:B7:16:F5:ED:A9:B5:CF:55:BE:5C:35:3E:E2:8E:06
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/08280ABCB98911F1BB5037F5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.9.0/24
                  156.233.96.0/23
                  156.233.106.0/24
                  156.233.116.0/23
                  156.233.127.0/24
                  156.238.180.0/24
                  156.238.182.0/24
                  156.239.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:b8:9f:9a:b6:2c:0d:99:db:9c:2c:3b:04:f9:1a:50:83:01:
         8d:fe:6f:85:db:0f:9f:32:5a:60:48:43:03:1b:62:b4:5c:e0:
         c1:56:8b:7d:9a:0b:ba:42:d6:df:f2:7a:8a:56:df:e2:1f:b0:
         3c:c6:cd:e6:28:e9:73:dc:db:ae:b4:9d:23:f0:47:dc:82:52:
         4b:bf:ac:9a:b3:89:01:2f:e4:96:37:fb:d9:bc:22:8a:55:f1:
         9b:b6:80:b3:32:74:c8:49:ad:7d:c2:03:97:aa:a6:ce:ff:af:
         00:86:a4:38:dc:40:d7:e5:51:d8:1a:c7:ca:75:46:d8:8a:dc:
         20:b9:17:74:d0:13:21:d0:e2:9f:1a:b2:1a:39:a0:8f:96:6d:
         76:bb:81:a8:fb:95:78:cf:c7:2a:19:1c:a5:23:78:9d:06:4a:
         71:1d:5b:f7:a9:de:51:95:1a:b3:5e:ca:c9:92:71:e7:b9:ae:
         12:38:ae:0d:60:df:5e:49:95:af:53:eb:51:52:1d:b9:d8:ef:
         7d:aa:2c:47:65:9e:b4:f7:a1:e3:2e:fe:31:76:70:72:f9:da:
         bb:d5:9e:37:d5:f2:af:67:29:d4:3f:e7:08:c8:47:8b:1d:00:
         a5:32:ec:05:1f:88:3c:9b:2d:20:4f:7c:70:69:a2:9d:d2:25:
         dc:e0:8e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----