Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27E304F89C7211F185699EF9CE1D38B0.roa
File:                     27E304F89C7211F185699EF9CE1D38B0.roa (raw, json)
Hash identifier:          +JdGYAO9w12nEB0HwnFJ28tHWzZgGCwf8BWFAoNwl4g=
Subject key identifier:   10:18:47:39:0E:54:74:0A:FB:79:74:7E:5A:6B:5F:74:88:A1:77:B6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE90
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27E304F89C7211F185699EF9CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 08:35:54 +0000
ROA not before:           Thu 20 Aug 2026 08:35:50 +0000
ROA not after:            Thu 24 Sep 2026 08:35:50 +0000
asID:                     395886
IP address blocks:        156.239.24.0/21 maxlen: 24
                          156.239.32.0/20 maxlen: 24
                          156.239.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118416 (0x1ce90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 08:35:50 2026 GMT
            Not After : Sep 24 08:35:50 2026 GMT
        Subject: CN=6a86bc6a-fdbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:ed:9e:8a:2c:af:81:db:7a:25:b3:f3:26:
                    2a:47:98:0d:a2:ea:c8:f4:9d:bb:bf:bb:70:e7:00:
                    d5:f0:dc:46:bf:3d:f4:94:1e:53:13:78:d2:5d:85:
                    e6:e3:59:46:d6:46:95:15:eb:9e:cd:bb:61:2a:ec:
                    4a:b5:d8:d0:ab:a5:8f:18:9d:6c:3b:3b:78:8e:8b:
                    50:3c:45:8d:19:fb:02:9a:cf:49:e1:9d:56:2a:20:
                    27:4f:33:f2:64:61:90:02:50:e5:0d:59:65:bc:9b:
                    ad:52:53:af:7a:b4:1c:86:d1:f7:02:43:0e:54:09:
                    b6:26:96:5d:6b:95:a0:11:e9:31:72:c6:6d:d3:54:
                    8f:1d:a8:11:1e:ca:01:90:27:1f:a4:79:3f:ff:fc:
                    de:7f:f7:df:f8:f1:d4:e2:a4:a3:21:cf:0b:a0:6d:
                    2d:fc:bf:f3:62:bf:f5:6e:82:2f:e7:38:46:7e:cc:
                    0f:fb:10:50:08:50:ff:d3:1c:8c:9f:68:40:2e:65:
                    50:0b:40:01:38:45:76:54:6a:1e:6e:61:ea:ca:ce:
                    b4:2b:1d:69:d4:59:09:91:dc:da:38:1e:b8:6a:2e:
                    30:80:d9:d2:f2:61:3e:e4:17:02:e6:db:2a:65:f2:
                    8e:ca:2b:95:91:e7:bc:25:56:f5:ac:b9:ac:6b:42:
                    5a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:18:47:39:0E:54:74:0A:FB:79:74:7E:5A:6B:5F:74:88:A1:77:B6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27E304F89C7211F185699EF9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.24.0-156.239.51.255

    Signature Algorithm: sha256WithRSAEncryption
         8b:ad:dc:ab:1f:b7:65:c6:8d:6d:fd:6f:ca:4d:20:20:10:ae:
         9c:4b:44:c1:6e:83:5c:26:78:8b:d8:49:35:f7:26:99:9d:17:
         d2:cd:8d:ec:59:4d:c7:b4:f0:db:8c:02:5b:1b:51:3c:76:cf:
         79:3a:7c:a9:d6:d4:95:2f:93:6a:98:d8:33:11:f8:6e:d8:9b:
         ae:be:2c:d8:c1:5b:1c:08:79:13:df:a1:c4:f3:ab:a7:06:f3:
         c9:33:5f:62:05:42:3f:cf:b0:53:b8:ea:05:ed:36:2c:44:b3:
         1b:d2:f5:0b:36:2a:4f:62:22:d7:1e:5d:91:e9:1b:08:5e:8d:
         84:46:89:a0:15:6c:a9:2b:9a:59:9e:d4:77:3f:68:1a:1c:89:
         cb:30:b3:bc:cc:da:96:81:10:60:ee:41:fb:97:08:35:20:6a:
         8f:6e:ec:01:e5:bd:a2:3b:ae:dc:c0:a1:19:20:cd:18:07:87:
         17:05:44:89:d0:77:5a:ca:b8:59:46:37:b1:84:2c:db:06:12:
         cf:38:81:2f:23:c4:3b:0a:1e:c5:6d:81:1e:ae:5d:e4:af:50:
         d2:43:06:62:3e:d8:95:fd:f4:33:8c:9b:f1:62:a7:b3:93:77:
         57:dc:96:6a:9a:ce:00:8e:c1:b5:52:66:35:bd:df:7e:7c:0d:
         34:7d:b8:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----