Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E2BA262933A11F18051EE10CF1D38B0.roa
File:                     1E2BA262933A11F18051EE10CF1D38B0.roa (raw, json)
Hash identifier:          zLS7BWV+jLZRQ2VwPRnACNzs3zQrSwPAa3YD60xtIrw=
Subject key identifier:   C6:D3:93:5A:69:85:CB:93:E8:9C:63:A8:7F:BF:85:FF:1C:91:C6:BF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CA84
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E2BA262933A11F18051EE10CF1D38B0.roa
Signing time:             Sat 08 Aug 2026 15:02:05 +0000
ROA not before:           Sat 08 Aug 2026 15:02:01 +0000
ROA not after:            Mon 14 Sep 2026 15:02:01 +0000
asID:                     135377
IP address blocks:        156.229.25.0/24 maxlen: 24
                          156.229.28.0/24 maxlen: 24
                          156.229.50.0/24 maxlen: 24
                          156.229.54.0/24 maxlen: 24
                          156.229.236.0/24 maxlen: 24
                          156.229.247.0/24 maxlen: 24
                          156.242.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117380 (0x1ca84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  8 15:02:01 2026 GMT
            Not After : Sep 14 15:02:01 2026 GMT
        Subject: CN=6a7744ed-deff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:69:10:e5:29:07:54:72:5e:a2:99:ae:e0:c1:
                    80:30:15:91:5d:5b:5e:8d:cd:ca:2d:ab:b1:f2:2c:
                    89:07:b2:d8:ce:19:42:12:e7:65:75:8b:fb:16:40:
                    65:b6:64:0c:d7:3d:15:4c:37:0f:5c:b2:ce:11:53:
                    15:cd:d6:10:6a:5b:71:f4:6f:14:b5:5f:f8:7b:12:
                    b5:dd:90:b9:5f:0c:03:7c:1f:98:9a:5d:94:19:09:
                    0c:80:aa:5d:3e:c9:2a:48:eb:89:49:62:31:56:ca:
                    c5:67:7a:64:18:ea:4f:1b:91:48:32:dc:a1:83:e6:
                    12:39:74:cf:51:ce:ce:55:a9:3c:61:38:69:65:bf:
                    ff:7f:1f:f9:d4:af:c6:f3:78:c9:d3:eb:6d:07:fd:
                    20:cb:69:dd:f6:f5:3d:eb:a8:5c:92:44:09:bd:6e:
                    c4:75:95:41:e5:16:03:8f:a4:59:fb:66:ff:c0:47:
                    bf:29:5e:93:41:f5:aa:54:d9:d7:b2:89:c9:a5:8b:
                    8a:35:9d:7d:17:ef:bb:cb:42:7a:63:63:12:1c:07:
                    7f:4b:d3:0b:fe:c0:33:5f:d4:28:ea:d3:aa:87:a3:
                    b5:0a:0a:df:c4:2b:45:66:14:86:49:0f:aa:d6:07:
                    e2:9b:82:20:6c:b8:d7:9f:49:c9:c9:4e:cc:bb:9a:
                    63:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D3:93:5A:69:85:CB:93:E8:9C:63:A8:7F:BF:85:FF:1C:91:C6:BF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E2BA262933A11F18051EE10CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.25.0/24
                  156.229.28.0/24
                  156.229.50.0/24
                  156.229.54.0/24
                  156.229.236.0/24
                  156.229.247.0/24
                  156.242.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:43:27:cd:30:80:96:6a:61:dd:98:20:92:1e:b6:ec:b2:9f:
         cb:57:1e:6d:96:56:e8:4c:0d:8a:e5:52:96:70:59:32:e9:8c:
         6e:e5:de:e8:b2:b2:96:18:08:70:6e:0b:69:49:bc:b4:c1:e1:
         b7:83:6a:91:df:74:68:d3:5e:60:a7:78:c6:64:ce:95:3d:43:
         3a:9a:bc:3a:3d:f3:f8:24:18:4f:74:e4:79:36:4e:c1:97:84:
         70:58:11:be:7c:cc:a4:a4:49:53:2b:b5:12:27:80:04:b1:42:
         25:85:a9:00:f6:98:3a:a7:79:f7:50:3b:82:2f:53:59:78:00:
         48:0f:93:c4:52:e7:37:7f:9c:74:cf:15:dc:f0:9d:37:94:d9:
         3b:18:07:ae:70:61:78:8f:44:df:e7:e2:71:49:45:90:bf:54:
         23:21:b1:cb:0c:cc:a1:63:be:16:a1:12:10:9e:dd:7a:6f:1a:
         f9:ad:5d:da:be:54:0e:2c:09:d4:a0:fa:e7:57:c3:19:e0:35:
         40:63:f6:f0:aa:ee:74:4b:f4:51:b3:c3:0a:86:22:d3:dc:ff:
         29:a9:63:82:11:dd:80:89:57:b6:7f:34:b0:95:59:8e:94:b2:
         36:63:f6:02:61:c6:df:7c:48:1c:15:72:19:63:9c:3f:47:ca:
         20:21:27:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----