Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37ED7614C49D11F19FC42AD2CE1D38B0.roa
File:                     37ED7614C49D11F19FC42AD2CE1D38B0.roa (raw, json)
Hash identifier:          9vkbe/+4Q4mPfPZHH87A1QwMcxvI7Q9pVV2cjyvdrr4=
Subject key identifier:   FD:60:B8:B7:F4:7D:F4:46:6A:9F:72:BC:32:D3:D2:C5:43:A1:AC:E6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC6A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37ED7614C49D11F19FC42AD2CE1D38B0.roa
Signing time:             Sat 10 Oct 2026 11:24:56 +0000
ROA not before:           Sat 10 Oct 2026 11:24:50 +0000
ROA not after:            Tue 17 Nov 2026 11:24:50 +0000
asID:                     22773
IP address blocks:        156.243.109.0/24 maxlen: 24
                          156.243.110.0/24 maxlen: 24
                          156.243.111.0/24 maxlen: 24
                          156.243.196.0/24 maxlen: 24
                          156.243.197.0/24 maxlen: 24
                          156.243.198.0/24 maxlen: 24
                          156.243.199.0/24 maxlen: 24
                          156.243.200.0/24 maxlen: 24
                          156.243.201.0/24 maxlen: 24
                          156.243.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121962 (0x1dc6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 10 11:24:50 2026 GMT
            Not After : Nov 17 11:24:50 2026 GMT
        Subject: CN=6aca2087-5956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e0:13:1d:6c:91:4b:78:a7:55:73:dd:d2:6b:
                    59:1c:43:78:31:f2:a5:7c:ef:56:09:d9:57:b1:ef:
                    8e:0c:54:38:e0:cd:1b:66:4f:7d:87:ae:83:6b:6e:
                    03:fb:2f:44:07:93:6a:cf:f0:60:22:93:c4:f9:85:
                    8d:de:45:db:29:b8:9a:1e:e0:03:69:6c:9a:66:be:
                    8f:05:0c:1e:e2:cb:3e:b7:94:11:34:9f:c3:d6:2f:
                    d2:c5:a6:e7:0c:47:05:e2:c0:6d:06:79:39:0c:65:
                    92:8a:bc:fa:9d:bb:d5:c7:0c:9a:1c:69:f0:a1:35:
                    97:75:8f:d7:4a:2f:97:e5:3d:c8:a4:0c:20:6d:41:
                    99:28:7b:7a:97:4e:a3:1c:77:2b:f6:3a:78:e4:ea:
                    e2:e1:b9:50:59:67:ca:f2:ad:9c:73:59:63:f5:b5:
                    0c:39:88:e6:ff:25:1b:6d:1a:f0:0b:ed:a0:0f:37:
                    34:95:a7:c8:52:97:5c:7e:5d:2d:56:30:54:62:72:
                    8b:47:4c:87:eb:df:fe:66:6b:7f:e7:72:c1:58:9d:
                    70:a7:d6:79:f5:05:ce:2e:71:6d:99:54:02:b5:20:
                    ed:e7:17:2c:9a:a9:b0:90:dd:4c:ae:52:3a:6b:7e:
                    16:59:0e:55:26:fc:9b:05:aa:9e:de:18:01:e4:d5:
                    6b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:60:B8:B7:F4:7D:F4:46:6A:9F:72:BC:32:D3:D2:C5:43:A1:AC:E6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37ED7614C49D11F19FC42AD2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.243.109.0-156.243.111.255
                  156.243.196.0-156.243.202.255

    Signature Algorithm: sha256WithRSAEncryption
         28:0e:59:43:75:e4:ef:c9:5c:ca:da:d3:58:3e:d0:72:86:b5:
         56:ef:8e:40:5f:f7:82:33:11:b7:da:3b:55:97:bf:4a:90:fc:
         7c:33:fc:1e:51:7a:6f:dc:81:dc:e6:e3:29:08:60:e8:34:65:
         58:f3:a8:eb:87:1a:31:d6:b1:78:68:4b:25:bb:f5:07:12:b2:
         67:c1:e4:e8:c8:66:39:cc:6e:ca:1a:2b:11:7b:0f:8a:65:39:
         5c:f1:11:89:36:f2:a0:3f:75:1f:83:7c:f2:7f:ba:8e:3d:db:
         bd:bc:26:77:35:9b:e9:bc:23:e2:d0:cd:db:61:11:5b:c0:fb:
         2c:22:12:76:00:ce:e8:d2:27:44:0f:8f:32:b8:d7:82:d9:8f:
         52:b3:ac:bd:63:a7:f6:8b:2d:11:2b:0e:72:9f:02:63:38:7d:
         93:55:a1:41:58:0c:e8:ee:30:ea:9f:a6:38:b4:ac:5b:73:c7:
         9b:0e:32:6b:60:98:60:60:2d:08:3b:44:c8:23:ea:7a:36:19:
         51:82:1a:7a:b6:42:7d:9f:44:f4:c6:a8:99:fb:30:1e:95:34:
         bb:30:2b:1d:5f:92:df:cd:92:99:fe:99:3a:c6:d2:94:71:04:
         73:c4:ec:1b:d9:d6:53:20:32:9a:f6:23:1c:35:51:5c:56:ed:
         8b:8e:91:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----