Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AF5131A8B2B11F19EEACC1CCF1D38B0.roa
File:                     1AF5131A8B2B11F19EEACC1CCF1D38B0.roa (raw, json)
Hash identifier:          9uHvK52kP7FZxAYzlXsEZmM1tuObDHQzPpq+IJp1wwo=
Subject key identifier:   7F:3C:86:BB:15:51:4F:90:40:E0:06:8D:9D:AE:61:93:E7:F1:1B:AC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C899
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AF5131A8B2B11F19EEACC1CCF1D38B0.roa
Signing time:             Wed 29 Jul 2026 08:54:28 +0000
ROA not before:           Wed 29 Jul 2026 08:54:24 +0000
ROA not after:            Tue 01 Sep 2026 08:54:24 +0000
asID:                     44559
IP address blocks:        156.249.83.0/24 maxlen: 24
                          156.249.97.0/24 maxlen: 24
                          156.249.98.0/24 maxlen: 24
                          156.249.99.0/24 maxlen: 24
                          156.249.112.0/24 maxlen: 24
                          156.249.113.0/24 maxlen: 24
                          156.249.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 01 Sep 2026 08:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116889 (0x1c899)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 29 08:54:24 2026 GMT
            Not After : Sep  1 08:54:24 2026 GMT
        Subject: CN=6a69bfc4-c4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8d:cc:b1:99:4f:59:99:6a:52:1a:d2:39:da:
                    2e:eb:5a:db:68:a0:ff:33:66:87:6d:20:32:d5:f7:
                    8d:b0:01:03:be:d3:96:38:0f:df:c8:c4:9b:70:8d:
                    e4:c1:6e:3d:16:a4:86:2d:bc:0d:c4:7d:3a:28:8e:
                    ba:d1:44:eb:53:2e:a8:ca:58:4b:d6:64:16:76:b0:
                    45:b7:65:df:03:b0:1f:91:ca:e5:9e:8e:86:19:d3:
                    6b:d8:f4:f5:b1:91:41:fa:37:53:da:3d:e3:dd:de:
                    e1:65:f3:a2:db:cf:68:7a:4c:a4:9d:b4:fb:d3:e6:
                    3c:2b:58:01:9c:6d:fe:7b:2e:a9:a3:57:2d:09:ed:
                    34:96:19:b3:20:bb:6f:8d:2e:47:04:d8:6e:44:dd:
                    e0:71:aa:01:47:af:d2:ee:e4:ce:92:a1:13:50:8a:
                    0a:b2:87:7c:92:5d:b2:c6:3a:a1:d9:fb:39:02:58:
                    29:8f:0a:c0:0f:d4:18:6a:0a:70:80:9e:d2:b9:4a:
                    03:81:05:98:dd:96:c3:7e:6b:79:cb:e9:a5:c3:a5:
                    89:13:d3:49:2e:53:d5:cb:f7:16:26:cd:9b:29:01:
                    85:22:6e:02:22:f3:ff:52:78:5a:fe:08:70:3e:39:
                    8a:3d:60:9a:ca:c3:06:f3:d2:a5:cb:d4:04:b0:4a:
                    0a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3C:86:BB:15:51:4F:90:40:E0:06:8D:9D:AE:61:93:E7:F1:1B:AC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AF5131A8B2B11F19EEACC1CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.249.83.0/24
                  156.249.97.0-156.249.99.255
                  156.249.112.0-156.249.114.255

    Signature Algorithm: sha256WithRSAEncryption
         15:b9:ee:e9:1f:3f:a9:ce:89:80:d3:a3:2a:4d:01:28:3d:94:
         9e:37:bf:d4:bb:18:49:76:6b:39:9a:6d:2b:71:71:77:24:0a:
         c2:67:68:6a:54:a8:57:b9:79:9d:c5:d6:12:40:75:a3:58:ea:
         53:8e:94:c8:2f:2d:c0:ba:a8:d5:68:35:c4:ba:17:bd:7e:fc:
         60:33:4e:4d:da:71:27:e3:0c:bf:a9:7f:aa:3d:eb:7c:3c:93:
         e8:41:f8:02:c7:cd:8e:3a:15:84:82:ce:6e:99:ae:95:89:e3:
         21:1c:8e:13:34:f0:35:81:f2:d0:46:80:c3:52:5e:74:5f:ea:
         f2:0e:c0:33:47:84:12:0b:88:72:0c:94:e8:95:72:10:72:89:
         05:e6:84:97:94:d3:99:41:da:fb:6a:f8:38:5f:ed:f8:10:7d:
         7a:da:e6:c7:0f:49:a8:c8:68:e2:2f:8a:7a:53:d2:6f:75:13:
         e9:ef:a3:60:fe:e5:cb:5e:a7:26:d5:a9:26:fd:74:c0:8b:55:
         06:40:eb:72:e4:6a:79:82:cb:17:12:1c:e6:ff:83:fa:ea:d3:
         46:e4:cb:fe:a5:37:48:0a:71:0f:06:72:2f:60:bc:0b:f7:59:
         8c:35:80:61:b8:6e:6c:d1:06:5d:ae:6c:e9:22:f9:89:6f:71:
         2e:87:36:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----