Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BF39F369C8011F1AF9082CCCE1D38B0.roa
File:                     2BF39F369C8011F1AF9082CCCE1D38B0.roa (raw, json)
Hash identifier:          CWzofbMs8HlwM+nu2vtSkjoWq6Q0UKY5WoI6YfKQjtg=
Subject key identifier:   44:8A:DC:84:0E:23:76:52:FA:2E:7F:34:2E:24:F6:5D:6D:06:2A:92
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CEBC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BF39F369C8011F1AF9082CCCE1D38B0.roa
Signing time:             Thu 20 Aug 2026 10:16:14 +0000
ROA not before:           Thu 20 Aug 2026 10:16:10 +0000
ROA not after:            Thu 24 Sep 2026 10:16:10 +0000
asID:                     54600
IP address blocks:        156.239.24.0/21 maxlen: 24
                          156.239.32.0/20 maxlen: 24
                          156.239.48.0/22 maxlen: 24
                          156.239.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118460 (0x1cebc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 10:16:10 2026 GMT
            Not After : Sep 24 10:16:10 2026 GMT
        Subject: CN=6a86d3ed-ab97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:99:2c:09:f3:87:12:a0:37:6e:d3:8e:ba:f2:
                    6b:00:55:ec:44:4d:62:34:2a:7a:37:3b:a4:c1:54:
                    48:e6:14:03:11:c7:34:c8:0b:13:01:32:a7:40:73:
                    bd:de:68:fc:85:f4:f9:c2:7f:74:b1:81:6b:61:c7:
                    64:23:88:eb:09:8d:8d:32:04:69:0f:5a:0a:8e:ec:
                    e1:26:d9:39:7a:6d:10:6b:83:40:05:14:44:41:58:
                    3c:30:1e:c5:d6:59:99:12:28:f2:be:e8:2f:d1:9e:
                    f2:c6:bc:49:9e:47:53:df:55:a2:f7:de:ec:8d:89:
                    b1:4b:d9:0a:56:a3:51:35:ee:5e:af:46:da:1a:61:
                    76:68:d2:e3:6f:7d:69:ee:7e:6e:41:3b:df:e4:91:
                    c7:20:f5:80:f3:30:b2:2e:77:33:0b:18:4f:57:93:
                    a9:3f:bd:28:82:ed:a3:e5:0c:3e:72:93:ea:13:64:
                    c0:e6:e9:e5:71:de:8b:5f:77:67:a7:d0:fa:ad:9d:
                    1c:f1:7a:1a:e1:c5:66:32:5a:3b:bf:b0:19:18:b6:
                    a6:ad:69:8a:e4:ee:63:c1:10:61:ad:56:f0:97:53:
                    6e:af:03:c5:11:cb:c0:f7:8e:8d:c9:20:49:06:25:
                    60:1f:b8:7c:b0:58:66:56:0d:9c:1f:56:3a:7f:97:
                    2b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8A:DC:84:0E:23:76:52:FA:2E:7F:34:2E:24:F6:5D:6D:06:2A:92
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BF39F369C8011F1AF9082CCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.24.0-156.239.53.255

    Signature Algorithm: sha256WithRSAEncryption
         88:b1:ab:c1:32:70:a8:0b:06:f9:09:41:54:73:91:19:9e:cd:
         4d:ce:fb:0b:78:54:8f:1f:47:95:31:99:dc:71:23:32:dc:3a:
         72:2b:c6:67:f6:80:bc:43:a0:cc:85:52:42:16:8c:65:7a:a8:
         04:a0:0f:fa:08:77:05:4c:b0:30:0b:b3:94:85:d3:49:d0:81:
         35:03:6f:16:eb:33:ea:1b:b5:ef:bc:d0:ec:a8:8a:92:29:62:
         ec:9a:2c:2f:cf:1d:e3:9c:46:08:4a:47:7f:b5:69:25:52:40:
         70:43:5b:5a:98:6f:49:aa:21:e8:20:5b:30:75:16:c9:0a:e5:
         a7:f4:a2:e0:14:6d:68:84:73:76:31:62:b8:68:69:2d:a8:ed:
         d8:d9:21:bc:68:08:ab:88:c3:eb:c1:de:e7:8b:e7:15:e3:68:
         d8:f4:bf:86:c9:ab:28:2d:9b:be:74:8d:17:1d:52:f2:7f:24:
         ea:bb:fc:22:a9:34:6d:1f:49:28:47:11:11:95:30:7e:8e:90:
         a1:28:e4:76:73:e4:8e:e8:7d:89:fc:57:17:af:e6:95:20:ef:
         43:34:7a:cb:89:f4:2e:99:9d:1d:04:03:f3:bb:4c:93:89:9c:
         e0:00:33:e7:e0:eb:8f:c6:7d:b6:c8:55:d0:14:da:3a:e7:aa:
         4f:fe:e1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----