Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/091D63E0A6AB11F1B8CAA9A6CE1D38B0.roa
File:                     091D63E0A6AB11F1B8CAA9A6CE1D38B0.roa (raw, json)
Hash identifier:          RldlSQQ/+n3D7rwSv1NkY4mVWEiYLfkHigfY1uC0NSM=
Subject key identifier:   72:96:14:BB:AF:13:B7:0E:9A:EE:AC:46:06:19:0E:F5:2D:2F:B1:BE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D268
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/091D63E0A6AB11F1B8CAA9A6CE1D38B0.roa
Signing time:             Wed 02 Sep 2026 08:48:15 +0000
ROA not before:           Wed 02 Sep 2026 08:48:11 +0000
ROA not after:            Fri 09 Oct 2026 08:48:11 +0000
asID:                     44559
IP address blocks:        156.246.21.0/24 maxlen: 24
                          156.246.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119400 (0x1d268)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  2 08:48:11 2026 GMT
            Not After : Oct  9 08:48:11 2026 GMT
        Subject: CN=6a97e2cf-cc98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c8:29:5a:e2:79:67:57:de:43:55:cc:99:e6:
                    8a:e0:61:e0:ec:27:ea:87:db:bb:04:b3:87:a2:21:
                    cf:69:11:1e:82:6f:32:dc:7a:ec:49:9a:95:e1:9f:
                    e9:69:94:61:f7:18:14:d0:14:67:42:03:4b:d3:b6:
                    70:09:a3:89:c7:5c:de:89:e8:94:2d:85:5b:c6:d9:
                    ab:71:3b:57:b5:dc:43:b7:c7:88:39:19:5a:2e:77:
                    ef:1c:8a:6d:4a:09:52:1e:c9:05:7d:26:dc:c4:0d:
                    be:88:74:9a:04:a5:65:b1:cd:64:24:69:8c:08:43:
                    83:75:60:ad:1a:48:9d:f2:34:5f:12:6d:26:e6:72:
                    a8:67:a9:29:b2:50:da:85:f5:80:48:30:8a:ec:3a:
                    3f:96:81:7a:11:e0:95:33:26:de:c4:6c:6e:4a:eb:
                    ae:bb:e9:75:61:70:e4:32:cd:05:fb:4f:ac:20:42:
                    b5:d4:10:f5:ad:a0:76:e4:e7:73:2e:0b:63:f3:f7:
                    dc:f5:a4:92:93:72:6a:cd:c2:86:22:a6:91:bc:d1:
                    e6:1a:24:ba:ab:1c:ef:ec:92:dc:f6:a6:c8:ed:74:
                    c9:04:9f:9a:9f:3f:dc:9a:ca:a0:a6:3d:22:4c:43:
                    f5:83:0d:80:71:9c:f3:19:2d:3a:28:ce:b4:97:61:
                    ae:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:96:14:BB:AF:13:B7:0E:9A:EE:AC:46:06:19:0E:F5:2D:2F:B1:BE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/091D63E0A6AB11F1B8CAA9A6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.21.0/24
                  156.246.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:03:3c:60:6d:7d:3d:60:89:64:75:6e:11:74:c3:03:b7:ae:
         6c:ac:42:b2:80:38:a4:8e:91:fa:a5:2a:e7:91:93:6c:cb:17:
         be:35:00:26:fe:35:8c:63:40:cb:5f:27:c9:4a:01:82:ad:69:
         f3:bd:a4:2a:4f:4e:b6:95:da:ae:f7:17:86:b0:11:a4:7a:17:
         15:2b:43:69:c5:be:69:33:95:02:9d:83:8c:42:c3:21:49:aa:
         33:9f:84:ad:0d:1d:e6:4a:e6:a7:19:46:f3:c4:84:61:a0:de:
         82:fe:e0:db:fd:cd:72:35:3b:18:d5:92:bc:0b:a4:db:8b:53:
         4a:5e:14:ca:e2:be:0f:89:ed:e8:6a:77:24:7d:36:54:2c:e1:
         6c:74:b8:cb:8a:74:f6:f2:2f:a1:68:6d:80:6f:4d:9f:5e:a2:
         eb:d7:50:b7:13:a4:fc:66:3c:b4:64:7f:33:c6:17:af:f4:20:
         3d:a1:e9:62:c7:24:2c:a6:36:20:de:40:6e:50:95:c0:80:e3:
         c3:da:4b:71:a1:2e:12:e1:d5:7b:7f:af:82:71:5c:f9:f2:e4:
         92:23:26:cb:b1:5f:13:52:12:f9:7a:0a:a6:d8:4d:e4:e0:8c:
         b4:05:62:1a:f6:87:b7:79:12:d3:8f:96:e6:93:08:bb:68:cf:
         f8:41:b8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----