Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24926FCC966011F1952568A6CE1D38B0.roa
File:                     24926FCC966011F1952568A6CE1D38B0.roa (raw, json)
Hash identifier:          0kdD2MJyxRCvFl40rolw6X6X4Tmkne3/Ao8WBYUr35k=
Subject key identifier:   59:FB:E9:03:84:72:A3:8D:86:02:7F:67:E1:92:B8:47:6A:BD:8C:B7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC2C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24926FCC966011F1952568A6CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 15:11:50 +0000
ROA not before:           Wed 12 Aug 2026 15:11:46 +0000
ROA not after:            Sun 12 Aug 2029 15:11:46 +0000
asID:                     17561
IP address blocks:        156.235.81.0/24 maxlen: 24
                          156.235.82.0/24 maxlen: 24
                          156.235.83.0/24 maxlen: 24
                          156.235.84.0/24 maxlen: 24
                          156.235.85.0/24 maxlen: 24
                          156.235.86.0/24 maxlen: 24
                          156.235.87.0/24 maxlen: 24
                          156.235.88.0/24 maxlen: 24
                          156.235.92.0/24 maxlen: 24
                          156.235.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117804 (0x1cc2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 15:11:46 2026 GMT
            Not After : Aug 12 15:11:46 2029 GMT
        Subject: CN=6a7c8d36-1a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1e:04:c3:c7:e8:b9:be:37:27:d6:db:f3:c7:
                    e1:33:6f:06:19:fc:62:24:04:a2:67:a8:bd:20:d3:
                    f8:84:a3:2b:74:00:09:62:61:d9:b0:34:14:77:16:
                    87:4a:b6:bc:5d:71:80:da:ec:27:59:22:88:a5:0d:
                    2b:c3:09:5a:48:d9:4e:d2:d1:01:e3:a4:fc:ca:85:
                    1b:a4:35:df:b9:7d:f6:0b:47:57:41:15:ac:6e:29:
                    19:cb:e3:4f:e9:da:f7:16:75:a9:2d:3b:e1:b6:42:
                    eb:ff:f8:f1:7c:d0:e1:a6:81:32:63:ca:56:e5:c5:
                    55:e0:a6:5c:39:40:76:60:30:73:dc:c8:49:04:59:
                    54:ee:b9:5e:21:e3:17:ab:5b:9e:8e:1a:2b:a3:e7:
                    9e:44:29:d2:8e:22:d0:94:74:a0:ce:fb:a9:69:c5:
                    91:ac:00:d5:e0:e9:2d:6b:3e:29:50:f5:c8:bf:c1:
                    7f:50:2f:a8:13:bf:60:f8:23:12:b5:c3:4a:f8:61:
                    59:53:f3:ce:2e:6a:ec:66:a1:24:db:3c:fb:6b:de:
                    37:41:71:28:e7:79:e5:f4:7b:cb:92:c8:21:e1:cb:
                    99:a8:c6:3e:b2:e8:6c:f1:a6:cb:2d:a5:fc:81:c1:
                    8d:54:1f:a8:42:69:b0:8f:77:50:c1:b0:23:fb:82:
                    48:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FB:E9:03:84:72:A3:8D:86:02:7F:67:E1:92:B8:47:6A:BD:8C:B7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24926FCC966011F1952568A6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.81.0-156.235.88.255
                  156.235.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:c2:94:9f:a8:84:4c:f3:0a:b7:fc:52:f7:fe:a9:ee:b5:08:
         b3:e1:f4:4b:5b:59:61:17:28:66:18:11:f8:eb:08:08:f2:12:
         27:87:ec:2b:c6:4b:6a:6e:eb:34:33:c7:42:1e:70:b9:5d:91:
         66:13:3c:20:fd:d7:7c:e9:9f:b5:ea:c4:ab:a0:10:8b:52:22:
         1f:00:58:1e:7c:14:6d:60:6b:6e:f8:6c:d0:7d:77:e6:aa:da:
         45:c4:3e:ed:ec:72:ab:db:59:39:0e:1d:8a:cf:a3:82:57:d6:
         29:7a:58:1d:b4:d7:96:95:7b:44:ec:24:85:f1:99:c9:81:50:
         66:93:dd:83:21:9e:01:5b:a0:f2:0a:78:da:a8:5e:06:a5:3a:
         f0:16:56:7c:1f:90:43:52:eb:9e:01:0c:ff:0c:c3:4b:27:bd:
         e4:ec:59:ef:68:8e:0b:05:77:b9:c3:12:48:06:a3:42:3e:82:
         c6:71:5d:01:f4:2a:7f:1f:32:6a:c5:06:a1:14:3e:6e:ce:9f:
         98:fe:e5:a5:e2:a5:e8:7f:9b:0d:7b:2d:79:60:37:de:cf:b3:
         2c:15:f2:98:3d:67:ff:95:47:a2:85:bd:e2:ef:e7:26:ac:19:
         a2:44:dd:62:ac:05:2f:b2:07:f7:99:9e:1a:b3:bc:8d:86:ce:
         82:f5:5f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----