Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14F8324E9BB111F1A94BF1E9CE1D38B0.roa
File:                     14F8324E9BB111F1A94BF1E9CE1D38B0.roa (raw, json)
Hash identifier:          mtghQtbG+W8kP1v3j/Kxi9/gOvDL54xWJFP1A9JSWCc=
Subject key identifier:   7A:86:F6:D0:5D:34:72:D8:6E:CD:5C:19:C0:2B:6D:CF:E8:9A:E3:9B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE5D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14F8324E9BB111F1A94BF1E9CE1D38B0.roa
Signing time:             Wed 19 Aug 2026 09:33:49 +0000
ROA not before:           Wed 19 Aug 2026 09:33:45 +0000
ROA not after:            Thu 19 Nov 2026 09:33:45 +0000
asID:                     400619
IP address blocks:        156.224.16.0/23 maxlen: 24
                          156.224.18.0/23 maxlen: 24
                          156.224.20.0/22 maxlen: 24
                          156.224.24.0/22 maxlen: 24
                          156.224.28.0/23 maxlen: 24
                          156.224.30.0/23 maxlen: 24
                          156.224.63.0/24 maxlen: 24
                          156.235.96.0/21 maxlen: 24
                          156.235.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118365 (0x1ce5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 19 09:33:45 2026 GMT
            Not After : Nov 19 09:33:45 2026 GMT
        Subject: CN=6a85787d-fe55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e8:37:76:6a:d2:1a:b6:1b:fc:87:36:d0:07:
                    04:2d:34:7c:fc:0d:95:95:63:73:fc:81:d4:8d:8d:
                    fa:ad:58:bf:d2:4d:a5:15:fc:d6:49:9e:48:da:53:
                    d7:ea:90:68:0c:62:c7:91:61:a3:e5:72:f0:df:99:
                    d6:00:63:e9:06:41:62:04:ea:52:67:f9:67:7c:b4:
                    23:06:67:99:ed:10:63:3b:48:6c:83:a0:1e:20:03:
                    c0:46:6c:46:b4:3d:a8:ee:d2:c6:02:85:d8:f4:86:
                    29:3f:9a:49:b6:8f:ff:27:c1:6f:65:ed:29:83:99:
                    31:9a:1e:ed:36:b4:90:4b:e0:0d:8a:89:de:94:69:
                    73:ba:63:af:53:60:4c:c8:d9:fb:28:1e:93:70:fb:
                    3d:80:c4:e9:40:ea:b0:1a:ab:db:90:24:09:be:05:
                    a7:21:ca:c8:60:70:0b:34:08:af:69:a3:5f:58:e7:
                    b7:d3:cf:6a:af:85:40:ae:87:d6:d7:26:b7:33:56:
                    52:33:41:31:e7:cf:e1:b7:fa:a7:9c:4a:5a:e9:62:
                    99:31:e4:63:2d:eb:4f:e3:5b:71:12:a7:b9:f9:7b:
                    b3:22:6d:68:8f:5d:9c:d0:10:76:68:72:dd:d6:34:
                    e0:c0:0a:97:3e:3e:49:30:91:cf:8b:77:f6:ab:ae:
                    a8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:86:F6:D0:5D:34:72:D8:6E:CD:5C:19:C0:2B:6D:CF:E8:9A:E3:9B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14F8324E9BB111F1A94BF1E9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.224.16.0/20
                  156.224.63.0/24
                  156.235.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:08:c2:6f:cb:cd:aa:27:05:ee:50:d9:0c:e1:6a:08:fa:67:
         93:22:3e:10:35:ca:94:e8:d5:67:df:45:07:56:ce:27:db:85:
         8e:f6:c9:14:48:b4:8d:5d:94:8c:6e:16:a0:84:48:89:31:05:
         8a:3a:96:82:82:a9:66:03:8c:d4:41:19:95:fc:30:2a:ed:ad:
         5b:8a:3b:07:b0:fa:18:39:8e:31:a4:6c:43:f2:8b:cc:1e:a6:
         3b:5e:6f:23:a8:ee:6f:ec:2e:f8:a8:93:bf:ba:41:60:76:b1:
         ba:9d:c7:c9:f6:eb:63:29:3e:a8:a2:a9:c4:eb:58:b5:96:30:
         9d:9e:1b:9e:1e:fc:cc:b6:0f:e1:08:a9:5d:fa:25:6b:80:52:
         e3:bf:48:91:35:b7:9e:94:e7:91:4d:d9:46:99:ac:3d:19:98:
         4d:87:44:4a:f7:bf:22:c9:ff:d5:95:61:d7:25:fc:ca:f8:24:
         10:e5:d3:c4:79:01:7b:ce:7b:60:fd:0b:a5:e5:42:1c:16:83:
         63:61:e0:d8:d7:b8:cd:63:c7:1d:f7:b7:a0:52:b5:e8:fe:1d:
         5c:61:47:b2:10:b7:7f:af:d8:3b:86:27:2c:05:4a:09:76:8e:
         38:ec:a6:18:37:14:0b:25:d5:73:db:2a:89:c6:20:ac:42:f3:
         59:49:8b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----