Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/183A6C8EA2F911F1915384C6CE1D38B0.roa
File:                     183A6C8EA2F911F1915384C6CE1D38B0.roa (raw, json)
Hash identifier:          IJw7TpHDnGHMWHCnKxS9ZcCXR9Shjtob/ZdEOhRVKps=
Subject key identifier:   A2:7B:EF:4A:7B:5C:9D:A9:87:B0:AA:70:E0:F6:10:AF:30:38:95:34
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D1A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/183A6C8EA2F911F1915384C6CE1D38B0.roa
Signing time:             Fri 28 Aug 2026 15:56:56 +0000
ROA not before:           Fri 28 Aug 2026 15:56:53 +0000
ROA not after:            Mon 05 Oct 2026 15:56:53 +0000
asID:                     138415
IP address blocks:        156.234.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119207 (0x1d1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 28 15:56:53 2026 GMT
            Not After : Oct  5 15:56:53 2026 GMT
        Subject: CN=6a91afc8-836c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:42:b6:df:0d:ac:da:30:be:d2:b6:c6:e8:c1:
                    e3:da:29:65:28:8a:0d:bc:5c:cd:bc:d3:47:4b:f0:
                    45:cb:92:83:dd:fe:e7:ec:61:cf:0f:5b:29:5a:01:
                    7c:19:1e:0c:1a:06:3b:fb:31:6f:be:08:f7:49:eb:
                    6e:01:65:c7:38:58:2d:1c:cd:8f:cc:49:8e:af:e5:
                    45:8f:04:7b:b6:0a:d6:74:23:57:2a:88:88:50:f8:
                    6e:df:49:de:c5:91:d0:32:39:b8:be:f9:e6:d1:d8:
                    cc:4e:bf:4b:03:16:ea:3f:c4:af:bd:0e:a6:3d:b5:
                    c1:29:55:63:5e:e7:45:d2:4b:f0:3b:20:c5:45:44:
                    8a:af:48:81:bc:ce:4e:d9:0f:ce:4b:92:b9:e7:5a:
                    23:aa:81:ca:7d:15:e5:b1:f8:d1:b3:38:c0:70:0d:
                    b6:0f:f5:c5:24:db:33:6b:cd:81:84:aa:fa:c1:b8:
                    f0:b9:8a:f2:8e:ba:7f:f3:7e:be:f5:bb:6e:a2:d5:
                    bc:ea:1b:c4:4f:db:29:15:d6:79:c1:50:fb:12:af:
                    3b:99:5c:75:94:09:89:af:ee:47:d3:bf:68:ce:2e:
                    c1:c2:87:5d:61:8f:60:58:a1:eb:fd:ea:52:d3:71:
                    13:8d:92:c8:7f:e1:94:61:b5:26:3f:67:a6:66:9e:
                    5e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7B:EF:4A:7B:5C:9D:A9:87:B0:AA:70:E0:F6:10:AF:30:38:95:34
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/183A6C8EA2F911F1915384C6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         33:42:4a:d6:c9:14:2c:4a:73:06:f9:2c:19:3e:13:33:bb:93:
         df:6f:1b:c9:45:b9:52:fd:8d:17:69:07:9f:d2:4f:49:17:09:
         14:01:9e:a5:ff:26:83:7c:91:bd:9b:3e:9f:cf:df:71:20:b9:
         58:fa:68:ae:b2:75:f7:a0:ad:ef:94:a4:81:2e:c6:91:0e:8c:
         5f:b0:55:cd:53:63:ca:78:81:13:9e:8f:5f:d9:f7:09:5a:13:
         59:4c:43:d4:94:23:29:52:e5:e9:73:26:7a:a6:81:f5:9f:d6:
         99:b5:9b:ef:73:2a:2b:59:4a:13:bf:12:cf:67:98:fa:a0:bf:
         92:d9:a7:c6:f4:d0:26:ec:20:2d:cf:dd:67:7e:12:0e:3d:a7:
         a6:b1:11:1c:b0:5d:c9:3e:e4:9c:58:de:73:e0:4a:5d:0d:22:
         86:3a:f8:2a:9b:a1:a5:c9:a2:f4:43:42:82:db:16:ec:b2:3b:
         70:07:e4:67:f2:8c:79:5f:bc:3d:dd:ab:bc:9f:ff:4d:82:a1:
         49:48:a3:0a:6d:2f:2c:95:a7:ee:40:a3:84:a9:66:cb:60:61:
         62:0b:03:1c:94:fa:83:7f:e6:35:23:c9:d4:f3:fc:c5:1c:2d:
         ac:58:91:2f:db:59:f0:d7:a5:69:16:f9:05:52:e8:f3:40:63:
         2b:dd:8d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----