Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A5A11ACBB1011F187A4D2EECE1D38B0.roa
File:                     1A5A11ACBB1011F187A4D2EECE1D38B0.roa (raw, json)
Hash identifier:          mgW1tKmT9GhsV1iX68BFur+VH6wU91MkVDbOU/sWdXI=
Subject key identifier:   18:5D:C3:72:60:37:CE:33:BC:5C:C6:81:AE:9F:EB:F1:00:B3:4B:62
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D946
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A5A11ACBB1011F187A4D2EECE1D38B0.roa
Signing time:             Mon 28 Sep 2026 07:42:06 +0000
ROA not before:           Mon 28 Sep 2026 07:42:02 +0000
ROA not after:            Wed 04 Nov 2026 07:42:02 +0000
asID:                     216047
IP address blocks:        156.234.118.0/24 maxlen: 24
                          156.234.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121158 (0x1d946)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 28 07:42:02 2026 GMT
            Not After : Nov  4 07:42:02 2026 GMT
        Subject: CN=6aba1a4e-7854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fe:91:37:c2:69:43:65:4d:09:b6:05:fa:65:
                    6a:fc:56:20:c6:67:51:a0:db:1c:19:2a:ed:07:5c:
                    bf:ad:80:ec:19:19:3c:57:f5:7f:07:a3:86:ee:cf:
                    e7:47:c1:9e:a5:44:21:18:b6:fb:6c:a1:54:06:82:
                    c0:88:c9:87:97:77:61:15:73:a1:a4:bf:84:61:bd:
                    92:ed:1e:62:08:f9:14:2a:83:92:17:7a:51:21:40:
                    c7:41:74:a5:2a:34:90:fb:1c:67:30:7e:92:fe:37:
                    cc:34:bc:da:df:8e:ee:98:52:76:26:4a:16:b8:84:
                    a3:c0:38:20:ed:2f:7b:89:8d:15:96:87:c0:6f:02:
                    b8:bf:08:70:51:ed:44:18:2d:7c:d2:62:a0:7d:67:
                    97:24:b1:37:dd:a3:94:e0:13:27:b8:be:10:3d:9f:
                    35:f7:e0:e0:f3:cb:ef:47:89:64:bd:43:b7:51:6b:
                    75:c1:c8:c4:55:46:77:b2:62:4b:19:7e:84:b9:e9:
                    fa:0c:72:be:23:7c:40:d2:d6:a2:d0:65:2b:91:c8:
                    81:bc:1b:c9:35:17:5d:18:4d:15:21:67:73:dc:e4:
                    30:31:dd:5f:f9:a9:e2:ae:d1:0f:f5:86:cd:78:95:
                    3a:6b:66:58:ec:6c:c1:b9:dd:5b:f5:30:30:54:55:
                    71:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:5D:C3:72:60:37:CE:33:BC:5C:C6:81:AE:9F:EB:F1:00:B3:4B:62
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A5A11ACBB1011F187A4D2EECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.118.0/24
                  156.234.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:9f:41:95:30:6f:25:c8:1d:cb:53:4a:6d:82:c0:bb:4b:3c:
         16:ff:d7:61:f3:be:0a:74:02:35:86:c7:66:fb:b7:d0:01:43:
         9f:91:9c:96:ce:85:73:a4:cb:28:b4:4d:21:07:65:07:64:4b:
         22:f1:a9:a4:7e:00:00:9f:0d:25:fd:f1:be:c4:fc:2b:fb:d8:
         c1:89:f2:2b:2d:fb:f6:9a:64:6c:ef:14:13:5e:3d:cd:68:2e:
         d5:cd:4a:28:a6:d0:b7:68:84:2b:08:63:54:7a:5d:3a:4f:de:
         bd:b9:c3:a1:35:22:78:0e:c7:d1:5b:03:d8:4b:a4:bd:7a:39:
         44:3f:af:38:6b:7a:03:7a:6d:d0:7a:fc:87:eb:c1:65:e0:a3:
         e9:6f:88:16:fa:97:4e:26:cc:0f:42:63:9e:5c:3b:e1:a5:c6:
         a1:cb:9f:43:a3:6e:63:45:37:08:fb:5d:63:93:b0:2a:0d:03:
         54:8b:e2:98:cb:17:1f:a8:ea:86:10:0c:2a:64:d3:de:19:61:
         14:e8:7c:1e:55:ab:31:11:fb:40:05:00:07:08:7e:d7:81:04:
         d2:92:e7:f0:e6:58:f3:5d:96:11:76:0f:a8:ff:62:9a:76:11:
         c9:e9:09:6c:61:df:be:ef:27:a2:58:de:47:51:60:5a:ba:27:
         e1:8d:69:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----