Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/369A35C4B29911F1A78439DFCE1D38B0.roa
File:                     369A35C4B29911F1A78439DFCE1D38B0.roa (raw, json)
Hash identifier:          UQafIuHt2PWe2o4kUuv3asbxd2f9XbLazBspWi2qUKo=
Subject key identifier:   4C:D7:22:4D:78:E4:43:90:21:A6:F9:AD:57:E3:A1:58:6C:C7:EF:9E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D6CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/369A35C4B29911F1A78439DFCE1D38B0.roa
Signing time:             Thu 17 Sep 2026 13:10:54 +0000
ROA not before:           Thu 17 Sep 2026 13:10:49 +0000
ROA not after:            Thu 24 Sep 2026 13:10:49 +0000
asID:                     131618
IP address blocks:        156.230.14.0/24 maxlen: 24
                          156.250.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 13:10:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120522 (0x1d6ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 17 13:10:49 2026 GMT
            Not After : Sep 24 13:10:49 2026 GMT
        Subject: CN=6aabe6de-3b3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:36:6f:cd:fe:c0:2b:78:11:91:fc:03:9a:27:
                    bb:2c:ac:40:a2:9d:d6:03:87:f3:a7:4a:67:78:36:
                    4a:c1:fa:34:11:a0:85:c1:6d:b7:59:c5:64:ba:75:
                    05:b9:8b:ad:3e:5a:e3:11:16:db:9b:47:a8:0e:8d:
                    62:01:56:19:8f:d0:b3:86:e7:ad:a2:d3:6d:f6:8f:
                    83:25:cd:db:5c:e7:b4:a6:45:29:0f:f5:3c:4f:d9:
                    4a:ab:f8:9e:f8:1c:ae:1e:0a:dd:c4:bd:df:9c:6b:
                    52:43:44:8a:8b:fd:9f:c1:80:07:52:1d:8d:21:67:
                    c1:27:db:32:d2:be:2b:46:eb:7a:a3:b0:84:f7:ce:
                    e5:74:96:01:2d:f1:a4:4e:0f:c8:77:f2:24:01:59:
                    0a:b5:4c:a6:d9:bd:96:32:dd:cd:9e:50:0c:ad:88:
                    ba:0a:28:8d:2d:ba:6f:fa:44:e2:a1:4a:e6:46:8c:
                    80:6a:e8:c5:1f:cc:5c:3e:fe:d1:a5:5a:b0:71:7c:
                    3a:9c:23:d2:c9:e4:85:8b:6e:cf:1f:58:72:71:ba:
                    6c:1d:7d:e8:9a:d4:09:1c:06:9d:28:55:11:7d:82:
                    4a:73:e7:4d:d5:10:9d:37:20:52:27:bd:45:6c:3a:
                    76:8d:a7:eb:75:84:8f:f5:11:ff:7f:0f:8b:ce:f4:
                    bc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D7:22:4D:78:E4:43:90:21:A6:F9:AD:57:E3:A1:58:6C:C7:EF:9E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/369A35C4B29911F1A78439DFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.230.14.0/24
                  156.250.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:3b:0f:bb:ee:05:e9:b8:d7:3e:43:e1:5b:02:39:f9:5d:7b:
         97:25:a8:35:c3:e9:09:d8:1d:17:6f:b1:09:0f:32:b6:a3:6a:
         6c:45:0b:c4:ac:d5:a7:14:ca:5d:4e:9c:bc:5c:95:a5:b5:f4:
         b4:58:8c:4d:14:1d:dd:99:16:3f:dc:e0:b3:0a:54:0b:17:3a:
         eb:08:68:3d:e8:22:5f:73:98:d0:f3:7f:7d:4b:88:f5:2f:2c:
         cc:66:a6:38:9b:ce:2a:f2:78:83:28:18:13:1b:0c:a9:29:a6:
         98:f0:d1:97:29:a6:b7:31:c9:7a:24:ae:f1:75:c2:64:48:ea:
         df:ce:50:c7:dc:93:8e:46:63:45:96:5c:b5:5c:fc:cd:31:3f:
         dc:93:ec:8e:bd:c9:7e:d5:c2:4a:c1:72:2e:74:82:48:31:6b:
         f0:7c:bf:99:3e:87:63:bb:9c:4c:35:81:16:4d:47:fe:1f:0a:
         51:55:7f:19:39:04:08:78:de:0a:4d:6c:2c:72:d7:e5:e9:ac:
         6e:da:39:bf:6c:d5:3c:62:24:c2:13:a1:3a:6e:85:6a:02:5e:
         57:c3:4c:7a:b7:68:34:78:80:3c:85:e5:14:b3:e6:d0:d0:86:
         b6:6f:06:d8:c5:1a:4e:ca:df:fb:b9:52:de:d9:20:db:a5:1a:
         aa:af:e3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----