Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EB138B8AB9011F1922077C2CE1D38B0.roa
File:                     2EB138B8AB9011F1922077C2CE1D38B0.roa (raw, json)
Hash identifier:          p6y0qL9DGGpE7pkR4AjOp672lNculvTeNUs0XvsIKI4=
Subject key identifier:   FB:AE:90:AF:F2:BB:0B:5A:88:FA:43:0B:09:17:EB:CE:E6:FC:C8:97
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D41D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EB138B8AB9011F1922077C2CE1D38B0.roa
Signing time:             Tue 08 Sep 2026 14:18:37 +0000
ROA not before:           Tue 08 Sep 2026 14:18:34 +0000
ROA not after:            Wed 04 Nov 2026 14:18:34 +0000
asID:                     63099
IP address blocks:        156.228.62.0/24 maxlen: 24
                          156.228.210.0/24 maxlen: 24
                          156.228.211.0/24 maxlen: 24
                          156.243.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119837 (0x1d41d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  8 14:18:34 2026 GMT
            Not After : Nov  4 14:18:34 2026 GMT
        Subject: CN=6aa0193d-41a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f7:0c:e3:e9:5a:06:d2:33:fb:96:0e:62:f3:
                    60:58:c0:fc:7c:f7:5d:81:2f:d8:b7:e9:7f:2e:40:
                    1b:19:49:af:bf:53:24:a6:2c:48:a1:ca:08:16:f1:
                    a2:66:e3:dc:c8:1b:70:89:15:ba:35:26:d5:86:a0:
                    63:87:a8:7a:13:13:73:b6:fd:31:9f:00:19:be:ae:
                    4e:ad:dd:60:8d:4c:dd:68:b3:16:ea:73:80:aa:5d:
                    cf:b5:4e:50:1c:45:ce:d4:7f:6f:8f:78:9b:3e:2d:
                    1b:ad:6e:a3:5a:dd:d4:bb:ff:49:be:6c:fc:2b:f5:
                    9f:c8:b9:46:c9:1d:0d:20:80:77:c1:55:49:5f:fe:
                    84:a4:ba:ac:73:19:98:64:9b:72:fd:d3:ce:00:6d:
                    1e:90:9a:dd:8e:fc:59:fb:7c:7f:1d:79:9c:81:9e:
                    9d:55:19:6e:eb:f6:fd:30:23:d8:17:3f:a1:93:da:
                    89:fe:8e:5a:e4:c2:cf:e0:cf:8a:eb:22:25:6a:71:
                    3f:dc:10:84:f7:85:87:1c:80:96:37:21:21:ea:3c:
                    a7:0e:6d:50:18:30:f9:23:c6:65:ae:d5:b4:e9:85:
                    72:d6:60:13:1b:70:15:83:02:09:83:29:2b:5b:25:
                    72:25:6e:82:f5:14:c1:cf:5a:47:3e:cd:1b:07:6a:
                    b3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AE:90:AF:F2:BB:0B:5A:88:FA:43:0B:09:17:EB:CE:E6:FC:C8:97
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EB138B8AB9011F1922077C2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.228.62.0/24
                  156.228.210.0/23
                  156.243.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:7f:b6:f5:83:f8:62:b4:0f:f6:4e:84:db:e8:3f:26:f4:69:
         d0:eb:2e:2a:6d:54:83:44:ff:90:12:64:08:16:59:6f:be:7a:
         1a:2d:9d:4b:51:2c:e7:02:f1:8b:cc:02:ca:fc:c7:e3:91:78:
         0b:c5:36:a6:f9:3a:b3:08:c4:61:be:fd:50:05:67:02:e7:cd:
         9a:38:bf:e9:00:9c:38:3d:a3:b0:7f:5f:29:d5:43:da:68:f1:
         5c:bc:aa:a6:0b:24:79:d2:14:86:ab:01:27:1b:9e:33:c4:7a:
         3c:af:7f:ee:b3:ae:c9:18:5e:eb:11:25:ff:c1:a5:52:3c:06:
         c6:7b:bb:94:e0:34:84:9a:11:32:d3:96:05:e1:a8:34:84:d3:
         ee:71:c7:ae:89:68:c7:c0:e2:43:b2:af:47:db:5b:e3:89:df:
         db:de:20:42:33:b4:25:ac:35:3a:72:b0:25:54:97:f5:80:ef:
         3a:3b:e4:c7:00:be:b4:67:af:92:b9:86:0e:21:4f:b9:ad:c8:
         c2:91:00:68:24:f5:6e:f1:19:53:a5:68:34:9f:c6:23:ee:64:
         69:62:5b:7c:a1:e0:c8:b2:3b:f7:ba:da:14:cd:f7:b6:eb:09:
         a9:2f:f1:7e:e0:23:6e:f2:29:5d:38:94:75:bf:c5:c9:c7:ed:
         ab:60:09:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----