Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FA2F2A2909C11F18ABEECBDCE1D38B0.roa
File:                     2FA2F2A2909C11F18ABEECBDCE1D38B0.roa (raw, json)
Hash identifier:          mayrUxPbdUn5xqs5HFa/oos+xIzbkoncEchR0vXM0Aw=
Subject key identifier:   E4:18:F1:3E:40:48:99:41:1A:D2:6B:97:CF:99:D2:92:11:B2:A9:29
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C9B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FA2F2A2909C11F18ABEECBDCE1D38B0.roa
Signing time:             Wed 05 Aug 2026 07:06:32 +0000
ROA not before:           Wed 05 Aug 2026 07:06:28 +0000
ROA not after:            Thu 12 Aug 2027 07:06:28 +0000
asID:                     9318
IP address blocks:        156.235.112.0/21 maxlen: 24
                          156.235.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117177 (0x1c9b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  5 07:06:28 2026 GMT
            Not After : Aug 12 07:06:28 2027 GMT
        Subject: CN=6a72e0f8-9763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d1:b0:1e:8b:00:c6:0a:dd:26:30:55:22:1d:
                    70:10:bb:c2:32:be:a4:ad:8d:91:a3:a0:54:0c:f2:
                    77:b2:9b:a7:de:9d:ea:d7:f5:f3:f5:aa:a4:72:d9:
                    63:fd:95:77:86:ef:1c:c5:91:20:02:be:32:f4:08:
                    94:16:cc:06:68:80:8e:6b:2c:f9:a8:a0:56:41:9b:
                    87:b6:37:f5:4b:5a:ad:e0:a2:c1:c1:8c:49:11:d7:
                    2c:45:f9:72:75:89:9e:de:b2:47:f5:13:ac:a9:a7:
                    15:61:99:3d:ae:96:d9:9a:a8:e3:b1:94:a7:b8:e6:
                    07:74:8b:47:e7:1c:88:c8:ce:5b:aa:ad:17:a4:b8:
                    1f:80:75:0f:be:9c:2f:64:b9:d4:70:88:1e:87:41:
                    78:f5:97:83:3b:5c:d9:ec:22:b3:bc:90:61:61:82:
                    58:92:33:cd:ba:1f:47:f7:1e:f3:c2:42:5e:79:f7:
                    45:aa:d1:e3:87:f5:d1:c6:11:66:66:c7:e7:a0:58:
                    9b:ab:f5:61:b2:e6:d2:7b:e2:bf:54:1b:a7:f5:e8:
                    1a:96:2d:02:6f:dc:eb:13:57:ba:f6:1f:30:fb:4b:
                    78:f6:a4:df:14:cd:e8:01:e4:ae:df:e2:43:e9:7c:
                    a4:84:8d:81:58:eb:d1:ea:6f:1f:ba:5e:73:a9:50:
                    d3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:18:F1:3E:40:48:99:41:1A:D2:6B:97:CF:99:D2:92:11:B2:A9:29
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FA2F2A2909C11F18ABEECBDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.112.0-156.235.121.255

    Signature Algorithm: sha256WithRSAEncryption
         51:0b:01:8e:8e:81:e3:56:e7:23:af:a7:f9:95:ca:18:6c:5d:
         da:77:3f:fd:e6:20:28:65:bd:38:1b:2f:ee:9e:ef:c1:de:62:
         5a:7d:9f:a1:f4:00:e7:8b:43:92:b6:d3:da:96:8d:c4:57:f5:
         57:c7:b2:e2:26:f5:2c:33:61:2c:bc:52:bd:55:5f:1e:37:26:
         8f:05:f7:04:7d:d5:83:df:2f:21:ea:39:01:97:7f:a9:c9:3e:
         7f:4b:e1:89:5e:9a:32:2e:9c:ed:73:6f:c5:26:64:63:e3:f8:
         ef:5a:5a:e0:9a:b5:dd:35:10:5d:dd:01:8c:bc:ef:76:ef:0d:
         83:a7:1c:df:6f:da:55:c6:81:13:f6:bb:69:11:dc:a9:e0:d9:
         c1:df:cc:af:46:29:48:1d:7a:13:d0:38:92:7c:43:3f:19:b6:
         d7:e8:e3:25:01:98:e2:75:4c:a3:e3:32:f6:03:c7:14:75:27:
         6f:5b:1f:b7:9e:d7:b3:c1:77:01:1f:89:57:b9:45:cb:30:6b:
         1b:c5:53:84:29:dd:82:82:16:73:d6:bc:32:02:27:33:76:78:
         17:91:e3:e1:c9:2f:06:bb:d8:01:3a:e6:0d:ac:21:2f:51:aa:
         93:2c:c9:5c:ef:44:94:8e:4b:a9:60:6f:e7:b8:b0:90:f6:72:
         a7:5f:59:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----