Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/384C43AEAC6C11F1A38CA3F3CE1D38B0.roa
File:                     384C43AEAC6C11F1A38CA3F3CE1D38B0.roa (raw, json)
Hash identifier:          foQBcDdKPl0XE4bHk66AO1WTgUHBpWkGV/SMMe1o/1A=
Subject key identifier:   33:07:03:77:5D:15:DD:68:51:72:18:97:57:43:03:C0:A0:93:5E:D1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D486
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/384C43AEAC6C11F1A38CA3F3CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 16:33:43 +0000
ROA not before:           Wed 09 Sep 2026 16:33:39 +0000
ROA not after:            Mon 30 Nov 2026 16:33:39 +0000
asID:                     399077
IP address blocks:        156.240.227.0/24 maxlen: 24
                          156.240.228.0/24 maxlen: 24
                          156.240.229.0/24 maxlen: 24
                          156.240.230.0/24 maxlen: 24
                          156.240.231.0/24 maxlen: 24
                          156.240.232.0/24 maxlen: 24
                          156.240.233.0/24 maxlen: 24
                          156.240.234.0/24 maxlen: 24
                          156.240.235.0/24 maxlen: 24
                          156.240.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119942 (0x1d486)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  9 16:33:39 2026 GMT
            Not After : Nov 30 16:33:39 2026 GMT
        Subject: CN=6aa18a67-f1c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b4:f8:0d:c9:1f:28:5a:5a:ef:e1:25:d2:49:
                    b2:ad:1d:0b:c4:aa:53:d8:0a:ec:e5:4f:ed:42:c7:
                    64:3e:fd:59:82:34:56:a0:8c:a5:75:0a:7e:45:ba:
                    21:f8:25:b1:98:4b:30:5c:47:4d:20:f7:67:45:87:
                    54:03:c8:8d:30:b6:6e:58:64:19:1a:f2:b6:a3:e0:
                    8d:d3:a8:87:87:8b:a5:ee:df:20:32:f0:98:e4:07:
                    99:03:1e:9b:e0:db:e6:bd:9f:1f:95:fd:06:cb:56:
                    bc:de:e5:d7:77:77:83:93:43:98:4c:fa:be:15:5d:
                    58:c9:30:fb:13:c3:2a:59:e2:29:38:da:de:09:c0:
                    70:0a:02:11:7d:41:08:e7:03:0c:ab:06:d6:3c:2c:
                    b7:a5:73:a4:7f:c5:c3:71:12:e0:d1:13:2a:0c:12:
                    83:79:ea:58:76:0e:55:ae:d5:f9:e0:31:c1:79:91:
                    b6:e4:c6:8d:2e:40:71:35:b3:59:e1:59:d7:ac:95:
                    4f:81:e7:23:c9:a3:dd:d6:01:ea:11:f6:91:b0:6c:
                    dd:16:19:a7:c0:e5:26:0e:d5:d5:0f:f6:80:e1:21:
                    64:44:7b:3d:1c:c4:e6:fc:09:9f:d7:59:52:15:78:
                    00:dc:59:7d:8b:d2:33:fa:3c:4e:e8:7b:a1:0e:2d:
                    38:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:07:03:77:5D:15:DD:68:51:72:18:97:57:43:03:C0:A0:93:5E:D1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/384C43AEAC6C11F1A38CA3F3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.240.227.0-156.240.236.255

    Signature Algorithm: sha256WithRSAEncryption
         37:2a:77:aa:c6:b5:97:13:11:0f:46:0c:cd:e4:33:26:16:12:
         df:e9:b5:c7:ff:96:2d:af:e9:56:8c:f9:69:15:f2:7d:65:c3:
         87:7a:b4:d4:b2:0d:66:d0:19:e5:f1:ec:0d:31:87:4a:7a:20:
         8a:ab:21:2e:b4:70:60:66:7c:d5:75:11:1a:de:6b:db:51:10:
         05:91:c2:aa:2a:d3:b5:89:fc:c5:4a:be:40:8a:8d:28:24:06:
         90:36:b8:8d:e9:e3:0c:d6:4e:d0:2e:30:f3:10:3f:4c:2f:fe:
         5e:4d:da:11:04:3e:e2:62:7f:ee:16:e8:39:7a:78:0f:fb:d8:
         3d:cc:ad:b1:38:67:44:e4:d8:c4:39:df:24:53:f7:cd:2c:4d:
         eb:a3:e9:77:5e:30:30:2b:a0:63:27:34:a7:ab:53:b2:b5:20:
         a8:09:dd:35:d4:6c:c0:14:04:57:16:de:8b:89:97:d6:7b:83:
         ca:ac:d7:23:ce:37:c8:7a:b5:4d:fc:f5:4f:8a:a9:3a:45:a0:
         2e:83:8e:a7:d7:85:a7:f1:7b:3a:d3:f9:c0:fb:cf:1e:5e:e1:
         bf:bf:0a:e0:7d:58:57:63:40:42:23:f5:95:61:a2:81:ca:e1:
         50:db:d4:dd:78:d1:a2:d9:64:c9:88:f7:b1:0c:c3:79:bc:e1:
         33:91:ba:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----