Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/238048D0C61611F1924538F2CE1D38B0.roa
File:                     238048D0C61611F1924538F2CE1D38B0.roa (raw, json)
Hash identifier:          RgEn8Q8726mRSUeYzzk0A4jAdsoM9PsytEQFjkLq+qU=
Subject key identifier:   63:A6:86:3D:78:3F:7A:39:56:AA:90:E4:70:E1:CD:69:21:B9:06:A8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DCF6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/238048D0C61611F1924538F2CE1D38B0.roa
Signing time:             Mon 12 Oct 2026 08:23:02 +0000
ROA not before:           Mon 12 Oct 2026 08:22:56 +0000
ROA not after:            Sat 22 May 2027 08:22:56 +0000
asID:                     63199
IP address blocks:        156.255.6.0/23 maxlen: 24
                          156.255.6.0/24 maxlen: 24
                          156.255.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122102 (0x1dcf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 12 08:22:56 2026 GMT
            Not After : May 22 08:22:56 2027 GMT
        Subject: CN=6acc98e5-cc25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:63:4d:ea:81:a5:9f:38:93:f4:d8:26:35:e9:
                    38:50:e1:a7:1d:2b:ad:d0:35:65:c6:63:8b:d8:19:
                    5c:2b:ac:5f:3b:ee:5e:d3:b8:92:b1:d8:1b:93:ca:
                    53:c2:c8:07:a2:50:9a:38:2a:e5:54:c1:3c:f3:60:
                    40:f6:24:c2:26:9c:47:a3:e5:b9:4d:3c:f8:35:8a:
                    02:37:83:fd:7c:eb:06:31:38:9e:34:83:0b:a8:74:
                    df:15:68:d5:6e:23:70:91:3f:74:bc:73:f2:c0:3f:
                    ca:63:63:90:d4:23:f5:1b:68:f0:db:95:d7:b0:b8:
                    e0:d3:5b:e9:ab:48:e3:ea:4d:1e:95:a1:73:e4:8c:
                    9b:d6:55:78:ca:92:00:12:fe:d6:26:97:46:25:f0:
                    ae:62:63:87:ef:c3:3f:af:95:9f:6b:57:a9:03:8c:
                    c9:c9:d1:d8:4b:01:87:3a:f4:06:4d:de:95:5d:20:
                    d8:97:ec:00:37:88:ea:9d:98:bb:cf:35:99:cb:12:
                    6e:9c:a6:8a:75:58:89:7f:dd:a7:9c:fb:1f:df:d6:
                    a6:fe:51:7d:45:e1:84:14:55:18:f8:e4:0f:1e:a1:
                    c3:3c:de:df:1c:8c:38:72:53:4f:32:24:32:53:38:
                    25:69:d5:1b:fb:c1:4d:76:c1:ae:14:80:85:f1:92:
                    42:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A6:86:3D:78:3F:7A:39:56:AA:90:E4:70:E1:CD:69:21:B9:06:A8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/238048D0C61611F1924538F2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.255.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:24:18:a7:0a:cc:b2:3f:16:5b:b7:c2:b9:8e:02:10:df:ce:
         4f:5f:95:7f:14:61:8e:66:38:72:c9:17:82:76:21:7e:08:2b:
         f0:2c:07:d0:2b:43:f6:e8:56:01:54:20:35:31:ac:cb:13:54:
         3a:c0:80:b6:5d:52:f8:82:18:1f:9d:ee:2e:c3:f8:dd:1f:5d:
         b7:48:91:7c:d1:da:90:3c:02:a7:a3:e2:88:a3:11:2b:32:f7:
         f2:86:a5:1b:c4:f1:5a:fd:7e:4f:85:27:a6:23:41:6a:78:04:
         b8:5b:f4:2f:fc:2a:6c:53:03:f1:5a:05:cc:99:f4:6d:9e:f1:
         f8:db:c9:39:bc:64:3f:d7:c0:e9:ab:dc:ec:7c:2f:9b:81:76:
         bc:23:f8:7f:92:8e:96:49:b1:5d:bf:dc:1a:10:89:7e:d7:8f:
         2a:ed:6d:9b:69:c5:3b:c6:ef:1f:98:bd:01:ab:89:a8:76:41:
         1f:b0:5f:e1:46:12:d3:ba:78:fa:b8:80:57:a0:22:5f:60:bd:
         9d:93:c5:4d:a6:59:4a:89:ff:c3:67:b9:ac:27:95:a3:47:39:
         c1:e3:6b:0f:dd:33:ea:c4:42:de:d8:17:40:0b:b8:49:83:71:
         ba:c5:50:6a:55:83:ab:92:91:de:a4:dd:20:3b:97:5b:85:15:
         b2:d4:66:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----