Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2115F288A44D11F197376DD8CE1D38B0.roa
File:                     2115F288A44D11F197376DD8CE1D38B0.roa (raw, json)
Hash identifier:          huTcTwFop3OMEd9qHYLodvd0fDuU0UGbZ6eb1w/kpK0=
Subject key identifier:   74:7D:F3:DC:FF:B2:AA:A3:08:A6:B6:28:1A:82:4E:B6:00:80:72:0F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D1EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2115F288A44D11F197376DD8CE1D38B0.roa
Signing time:             Sun 30 Aug 2026 08:31:00 +0000
ROA not before:           Sun 30 Aug 2026 08:30:56 +0000
ROA not after:            Wed 07 Oct 2026 08:30:56 +0000
asID:                     48031
IP address blocks:        156.236.22.0/24 maxlen: 24
                          156.236.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119279 (0x1d1ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 30 08:30:56 2026 GMT
            Not After : Oct  7 08:30:56 2026 GMT
        Subject: CN=6a93ea44-d694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:63:97:b0:60:f9:3f:92:c1:54:25:a7:89:
                    fa:c0:f9:6c:47:68:e7:94:a8:45:57:6e:8e:cf:78:
                    03:47:42:27:54:1a:07:4e:31:2b:f1:a9:59:cc:7d:
                    82:29:a7:67:11:b8:9a:ca:13:40:e8:71:03:7a:52:
                    9a:f2:05:82:16:e4:ce:4e:bd:0a:c4:66:db:2e:ac:
                    54:c2:e7:31:7b:69:15:6b:b6:8e:7c:b0:28:af:a8:
                    31:23:21:0c:8d:be:7e:5b:84:2b:c8:55:b8:58:42:
                    6c:09:2f:60:dc:d8:a0:4d:0a:c4:bd:7d:8e:b6:1c:
                    fe:0d:33:21:51:56:e3:5d:3c:9c:6f:a1:a7:d4:f8:
                    3c:c3:b8:09:e9:66:7d:75:1a:41:37:54:f9:fc:6b:
                    09:ab:98:1c:bc:60:b6:b3:3a:50:73:83:4d:33:9d:
                    2d:98:4d:0c:d0:b4:f4:64:1d:61:eb:b7:39:c5:22:
                    b8:dc:24:b8:11:da:6a:ee:91:0f:4f:27:57:4f:1f:
                    c0:88:8a:ef:57:50:4b:b9:ca:59:e3:e5:38:1d:0a:
                    f9:3e:4f:e8:2b:45:69:10:25:52:a3:43:1b:e2:e0:
                    e9:04:d4:e4:4b:a4:46:31:fb:c5:fb:67:2a:61:83:
                    0a:d5:91:15:ee:37:be:72:a6:e1:86:d8:ae:1d:9d:
                    82:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7D:F3:DC:FF:B2:AA:A3:08:A6:B6:28:1A:82:4E:B6:00:80:72:0F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2115F288A44D11F197376DD8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:62:60:3c:39:85:c0:1f:aa:f7:77:d0:39:f0:57:d0:d1:87:
         bb:72:2f:0a:cb:b7:a9:75:f6:81:47:11:d1:8d:66:b0:9f:90:
         98:f0:98:00:44:20:f0:78:7c:55:23:c2:f2:7b:3c:17:31:c3:
         0a:c2:70:73:fb:df:50:80:9c:9e:69:c6:22:78:52:26:04:4c:
         5f:25:59:93:51:c2:81:39:0a:16:3e:9b:64:50:7d:ef:4b:c8:
         8a:10:e7:a9:d7:60:9a:d5:34:aa:05:fb:2a:a1:c6:c8:73:cd:
         07:20:66:32:78:64:1e:bd:76:0e:c0:0f:97:d6:80:b7:45:ba:
         02:49:f8:66:6b:10:59:79:4a:53:31:15:52:7f:a4:71:05:c2:
         99:ae:60:7f:f2:0d:d8:a3:9f:68:3b:2d:b5:23:d2:6e:87:2a:
         83:f3:e0:e2:e7:d1:9d:e6:b0:96:b6:d3:0d:66:96:67:4a:29:
         50:12:7a:8c:3f:ea:d2:8d:7d:ce:76:1b:05:96:d1:11:32:57:
         21:6e:49:ba:eb:d0:d8:11:9a:56:3c:0b:78:04:d1:bb:23:08:
         52:c4:44:69:9b:86:2f:d5:64:e6:2a:cc:28:46:95:64:db:18:
         44:f4:ec:b8:97:27:76:14:a9:11:d9:cd:40:b5:f0:38:70:49:
         34:a1:39:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----