Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/218A45C0961F11F1881AF91CCF1D38B0.roa
File:                     218A45C0961F11F1881AF91CCF1D38B0.roa (raw, json)
Hash identifier:          HPNG1SU7FgQp5q/jPnLdc33cGhqs+9lBtA2X9ikMgH8=
Subject key identifier:   07:91:C4:35:3F:0D:BB:E0:EE:E7:30:54:67:49:84:1E:23:EF:7B:BC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CBB1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/218A45C0961F11F1881AF91CCF1D38B0.roa
Signing time:             Wed 12 Aug 2026 07:26:29 +0000
ROA not before:           Wed 12 Aug 2026 07:26:24 +0000
ROA not after:            Sat 19 Sep 2026 07:26:24 +0000
asID:                     6079
IP address blocks:        156.229.172.0/24 maxlen: 24
                          156.233.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117681 (0x1cbb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 07:26:24 2026 GMT
            Not After : Sep 19 07:26:24 2026 GMT
        Subject: CN=6a7c2025-d29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cb:54:51:2f:d6:ad:18:b7:eb:6f:ee:b9:71:
                    be:90:20:33:89:f6:bc:0e:3d:08:4a:ad:70:cd:7c:
                    aa:5a:f3:1a:b3:0a:fd:f3:2b:92:08:c7:1b:92:9f:
                    1f:5c:c7:d2:9b:08:b6:4e:37:b6:89:ef:60:6e:c1:
                    13:b8:2c:dc:38:6a:2b:c0:31:65:48:83:56:f9:d0:
                    ee:2c:35:32:46:65:2c:65:2f:27:76:c3:3d:9b:ef:
                    e2:58:37:78:58:cf:b2:7f:4f:94:95:e2:ee:e4:50:
                    b2:a5:05:53:ca:10:17:e3:ef:75:25:8c:d3:47:da:
                    30:ff:d7:a7:eb:30:63:3d:25:9a:eb:cb:4d:78:b5:
                    f4:a9:f0:ef:39:3e:80:5c:cf:d6:0b:0d:69:b9:26:
                    a6:11:5c:0f:d3:12:99:16:d5:c3:3e:bc:14:9a:cb:
                    78:eb:2c:d4:66:9d:86:25:b8:f2:dc:58:15:29:6d:
                    88:6d:cf:72:6b:1f:13:34:af:8c:5f:3c:17:54:ba:
                    44:40:17:5f:b9:74:06:15:51:13:f0:38:42:00:f3:
                    2d:81:f6:00:63:8d:cc:1f:a0:c1:7c:5f:f9:17:79:
                    43:d1:69:0f:70:8c:21:a9:8b:6a:69:5b:41:1f:33:
                    d6:6b:d5:2b:44:02:5a:17:8a:a6:41:e0:3c:de:dd:
                    80:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:91:C4:35:3F:0D:BB:E0:EE:E7:30:54:67:49:84:1E:23:EF:7B:BC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/218A45C0961F11F1881AF91CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.172.0/24
                  156.233.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:fa:43:15:a8:49:fa:d1:8d:2e:5c:6a:68:91:7a:8a:c8:82:
         57:3e:91:22:f4:97:59:60:de:29:ed:88:87:7f:3f:f3:e8:6b:
         4f:23:66:ca:ce:0d:c3:7a:dd:9b:78:d7:7b:8b:fe:ac:63:b2:
         62:9a:69:a9:15:49:1d:e4:99:14:20:b5:64:c3:aa:7f:0b:df:
         49:ed:aa:71:ff:d2:6d:5b:aa:22:ca:c9:d6:d1:1a:d3:3c:b4:
         c6:00:57:02:01:b4:f1:48:17:f6:8e:e9:a3:7f:18:06:71:15:
         e5:da:57:22:fa:98:af:9c:ee:94:94:27:1e:ca:74:0e:27:c4:
         a0:b6:66:96:f8:fd:ff:98:62:2a:98:6b:d4:c6:12:4b:cb:98:
         4b:d9:a7:8d:8b:a8:96:83:33:90:82:61:f0:59:87:9d:0a:ed:
         df:7e:7f:08:75:c8:01:ba:7f:04:e3:4e:9e:c2:6a:40:bd:97:
         66:74:e3:4e:0b:4f:49:89:c4:89:53:71:9d:a3:20:d2:66:87:
         55:d0:4b:db:6c:98:a4:5a:98:ed:82:ae:47:50:01:86:c2:e4:
         ea:bf:3a:a6:b5:23:4d:ae:6b:5e:cd:f2:ec:3b:1d:a8:2d:0f:
         3e:3c:f1:97:8c:74:9a:e7:9e:cf:68:b9:a5:b8:6b:7c:ca:c1:
         98:a2:b6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----