Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CDAAFBAAC6D11F1875AE9F7CE1D38B0.roa
File:                     1CDAAFBAAC6D11F1875AE9F7CE1D38B0.roa (raw, json)
Hash identifier:          V/QJKvbxUjLvIFXb+DtAuY6F/jZ3OtpG15fHjE7TeYI=
Subject key identifier:   AA:EE:F0:7F:F3:33:81:99:E2:93:C1:32:B1:49:42:D0:F3:E4:F1:7D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D488
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CDAAFBAAC6D11F1875AE9F7CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 16:40:06 +0000
ROA not before:           Wed 09 Sep 2026 16:40:02 +0000
ROA not after:            Mon 30 Nov 2026 16:40:02 +0000
asID:                     399077
IP address blocks:        156.240.237.0/24 maxlen: 24
                          156.240.238.0/24 maxlen: 24
                          156.240.239.0/24 maxlen: 24
                          156.240.240.0/24 maxlen: 24
                          156.240.241.0/24 maxlen: 24
                          156.240.242.0/24 maxlen: 24
                          156.240.243.0/24 maxlen: 24
                          156.240.244.0/24 maxlen: 24
                          156.240.245.0/24 maxlen: 24
                          156.240.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119944 (0x1d488)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  9 16:40:02 2026 GMT
            Not After : Nov 30 16:40:02 2026 GMT
        Subject: CN=6aa18be6-e4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b5:c4:ec:f9:72:68:40:56:cf:e0:38:8b:d1:
                    a3:49:3e:f8:51:eb:e1:49:c6:0a:54:5d:73:fb:7e:
                    64:8e:24:b3:8f:74:73:5a:93:09:49:80:97:c6:99:
                    34:bb:d7:8b:0a:d6:b7:d1:66:ff:c1:8e:87:cb:44:
                    f3:0d:b4:4a:aa:90:89:82:4b:da:79:de:ae:e9:d4:
                    d8:3c:c6:31:92:44:11:18:88:4c:3c:95:0d:7b:ec:
                    34:f8:9b:d7:d5:a3:e3:e0:db:b8:8f:4f:47:ff:30:
                    61:ff:5d:25:5b:f8:85:5b:03:a3:aa:b3:c5:d4:b4:
                    f5:64:69:df:af:9d:46:83:58:2d:c1:a1:7c:4f:1e:
                    57:d2:2b:8c:71:93:06:b9:ab:19:e7:5a:62:85:e2:
                    ca:b9:fa:30:0f:be:15:20:96:83:e6:a9:7e:ef:97:
                    62:9e:6c:e3:21:44:bf:de:73:81:14:c0:04:ee:75:
                    b0:6d:fe:08:db:c4:8f:21:6a:ae:46:fa:e9:09:ed:
                    b8:a7:cc:e7:68:47:b4:e0:74:be:00:70:ac:23:b5:
                    18:a2:25:8d:84:46:9d:84:18:59:d4:d2:fc:42:41:
                    20:76:0b:d5:d9:d9:b5:6c:6d:61:45:1c:3e:e9:4d:
                    39:03:0a:78:d1:50:66:39:b4:99:2f:3a:df:1d:f9:
                    41:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EE:F0:7F:F3:33:81:99:E2:93:C1:32:B1:49:42:D0:F3:E4:F1:7D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CDAAFBAAC6D11F1875AE9F7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.240.237.0-156.240.246.255

    Signature Algorithm: sha256WithRSAEncryption
         99:6d:00:35:24:20:12:f0:a2:d0:c5:6a:1e:86:86:a2:80:66:
         31:99:0b:3b:0f:6c:e3:b8:08:ae:39:da:4b:c7:9b:9b:46:86:
         1a:00:9b:d8:2c:8c:1e:dc:8f:2f:e9:c1:61:81:a7:b2:fb:ac:
         d5:2f:d2:d7:4b:cf:68:3a:08:ba:79:02:62:cc:dc:02:61:70:
         20:5b:d5:10:47:8b:45:2f:cd:ea:eb:87:21:14:03:df:2e:ba:
         af:a9:08:11:b7:0e:17:c1:78:9c:ad:9b:f9:9f:be:91:87:db:
         0c:94:b4:b5:27:22:f6:39:2c:47:fd:45:ca:6a:a5:2a:84:11:
         a6:ea:26:1d:ab:75:39:92:46:c4:7a:13:5d:7b:92:f9:02:1d:
         f8:d9:b9:69:cf:80:11:e4:e2:90:2d:12:03:4f:d9:6f:1d:ff:
         33:1d:ac:cf:c6:75:76:01:46:cd:aa:f1:93:20:49:81:25:7d:
         60:94:e8:eb:07:54:e0:35:1c:f8:7b:23:1f:90:9e:f8:c1:c2:
         b2:0a:6d:98:df:e0:8b:2d:05:b1:f9:46:78:28:0a:81:35:ce:
         d9:b2:13:09:7c:48:af:31:1b:9f:5b:02:b4:6d:c5:22:08:20:
         fc:d9:6f:2e:14:3e:ed:47:5b:f5:bb:d8:7b:3d:c1:88:77:52:
         f0:d2:10:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----