Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1383110AC48711F1BC91D3C7CE1D38B0.roa
File:                     1383110AC48711F1BC91D3C7CE1D38B0.roa (raw, json)
Hash identifier:          67MkIQKDZ+on3w9k/hhOSaYfv2LbeG6fWeO1ltUdgpE=
Subject key identifier:   90:40:C4:9F:3D:DB:98:F0:14:BA:8C:C3:0E:46:28:CA:95:D6:E8:FE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC5E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1383110AC48711F1BC91D3C7CE1D38B0.roa
Signing time:             Sat 10 Oct 2026 08:46:25 +0000
ROA not before:           Sat 10 Oct 2026 08:46:21 +0000
ROA not after:            Mon 16 Nov 2026 08:46:21 +0000
asID:                     401615
IP address blocks:        156.226.170.0/23 maxlen: 24
                          156.231.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121950 (0x1dc5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 10 08:46:21 2026 GMT
            Not After : Nov 16 08:46:21 2026 GMT
        Subject: CN=6ac9fb61-5eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:47:37:d4:43:dd:9f:96:5a:2f:a0:1f:cf:
                    b2:a9:44:18:0b:52:a5:93:da:65:45:4e:0a:d5:f1:
                    5f:80:12:52:fb:c5:95:63:62:78:25:90:df:5d:d0:
                    31:e1:e7:c2:ee:67:30:eb:90:60:5c:76:3e:5d:01:
                    9a:ff:8d:0b:10:b0:40:81:b7:8c:bf:1f:2b:3c:89:
                    57:0a:3a:5a:86:bf:da:28:6c:31:1b:0d:77:1b:4a:
                    84:9e:e1:46:a0:de:15:73:63:d2:ab:30:f3:7c:0c:
                    c2:23:ed:d7:41:77:97:d8:de:c8:5b:1c:ae:4d:68:
                    84:8b:12:32:37:8f:cd:b1:97:24:f8:54:17:49:1f:
                    d8:a3:90:6a:47:b5:93:89:28:81:0a:05:43:dd:21:
                    88:14:8d:df:35:70:29:ad:ec:02:2e:7b:1e:3d:a2:
                    f2:c5:7f:39:41:15:d5:03:aa:ca:07:66:4b:15:28:
                    a8:a6:42:80:87:63:6d:75:f3:34:6f:02:3a:df:a5:
                    8c:81:88:bd:7b:1c:f4:b9:40:65:77:48:b5:a6:2b:
                    21:12:fe:a6:9a:12:2b:eb:de:84:61:57:4a:88:9b:
                    10:aa:11:eb:1e:23:db:6e:87:29:de:15:9b:84:55:
                    fa:29:af:c2:a0:7c:1f:8c:1d:0f:ca:f2:00:3c:29:
                    f9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:40:C4:9F:3D:DB:98:F0:14:BA:8C:C3:0E:46:28:CA:95:D6:E8:FE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1383110AC48711F1BC91D3C7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.170.0/23
                  156.231.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:be:e1:5c:7d:f9:c3:db:a9:ce:9f:9f:38:94:34:c7:1e:96:
         db:06:bf:23:46:52:96:7e:b1:dc:c1:7b:a8:c0:dd:2c:bd:6d:
         0b:ae:76:be:dd:62:0c:6f:9a:02:67:63:45:9c:18:67:9d:8e:
         b6:2f:ed:cc:e5:34:3a:50:91:e9:8d:25:64:46:f4:4d:2d:2d:
         6a:15:00:20:6f:58:9b:08:f0:17:6f:4c:9c:8e:1a:b4:9e:c1:
         b5:8c:ce:f0:a9:5a:0e:b8:52:98:eb:68:43:b1:db:66:c6:b5:
         49:3c:fc:84:dc:76:9d:02:67:58:dc:6b:58:2e:27:27:cb:f2:
         18:bb:3c:9d:d7:db:ce:f1:b1:a0:b3:8d:84:6d:fb:42:d9:9d:
         9c:78:43:39:11:22:a4:f8:e6:18:b8:25:a3:0f:8c:98:99:46:
         fc:f7:2a:79:1c:af:7c:ab:40:0a:c9:db:bb:bd:0b:ad:13:fe:
         a0:03:b1:73:32:ed:07:59:aa:72:fb:f8:bd:11:6e:7a:e6:ce:
         e0:6b:1f:58:94:59:43:18:00:8c:53:9a:88:4a:3b:2b:66:df:
         3e:35:9a:f8:93:a8:54:53:15:0f:35:45:bc:79:0e:a8:95:12:
         25:5f:d0:fc:14:f7:4e:aa:d0:f4:4f:d1:cd:52:aa:8d:11:7d:
         d6:a9:0d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----