Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/389C8030C48111F19414391ECF1D38B0.roa
File:                     389C8030C48111F19414391ECF1D38B0.roa (raw, json)
Hash identifier:          aWGvIqEbAJEaXlywYq54HDiE1ctCSCLwF0F/GVYmZZo=
Subject key identifier:   BC:A3:84:42:C0:E7:44:AD:DF:AA:ED:CC:97:AE:03:CF:9D:67:A9:64
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC56
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/389C8030C48111F19414391ECF1D38B0.roa
Signing time:             Sat 10 Oct 2026 08:04:31 +0000
ROA not before:           Sat 10 Oct 2026 08:04:26 +0000
ROA not after:            Thu 05 Nov 2026 08:04:26 +0000
asID:                     149440
IP address blocks:        156.227.0.0/24 maxlen: 24
                          156.236.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121942 (0x1dc56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 10 08:04:26 2026 GMT
            Not After : Nov  5 08:04:26 2026 GMT
        Subject: CN=6ac9f18f-d253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:12:23:8e:5e:b1:2a:37:50:a4:6e:c6:0b:a3:
                    cc:aa:12:3f:6f:ae:f7:8d:6d:21:63:6c:6a:dc:38:
                    44:98:39:67:da:98:da:c6:55:78:e9:62:b8:b3:9c:
                    65:d9:81:c0:45:ea:81:dc:81:37:90:7e:c6:ab:ef:
                    c9:22:92:1b:5b:7e:21:2b:e6:50:c2:45:52:ed:50:
                    8b:10:d5:d3:cc:6d:00:4c:eb:a7:d1:06:c7:1a:16:
                    96:df:23:f3:6c:97:4b:21:34:bb:a3:8c:b5:1e:cd:
                    e6:b7:57:d0:66:46:cf:f2:9e:a3:1b:36:fe:7b:f3:
                    9e:18:aa:a8:62:86:ed:13:85:ec:9b:df:13:49:cb:
                    8e:d3:e7:13:93:d3:43:99:65:7b:45:81:70:e8:42:
                    59:0d:35:83:2f:75:47:e9:a6:e1:39:68:34:9e:17:
                    e6:37:b0:08:a9:2e:88:ed:a3:ce:13:f3:cd:be:e3:
                    3b:4c:fb:01:df:ed:3f:82:7d:8e:2d:6a:22:ad:e9:
                    71:ea:8e:d2:6c:01:e6:b7:39:3c:c4:17:9f:1c:76:
                    01:ab:82:0b:49:a1:78:81:b0:4c:bb:30:2f:3d:a2:
                    06:dd:c3:8b:e4:ed:dc:65:d5:67:07:01:72:b8:c7:
                    b3:aa:47:aa:74:c8:5d:61:0c:25:31:4a:77:76:07:
                    1c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A3:84:42:C0:E7:44:AD:DF:AA:ED:CC:97:AE:03:CF:9D:67:A9:64
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/389C8030C48111F19414391ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.227.0.0/24
                  156.236.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:8d:d2:6c:62:b3:ae:3a:ce:71:75:c8:dc:6d:15:30:ee:fd:
         9b:1e:e9:56:4d:b1:3e:77:9d:50:d9:88:dd:a7:46:91:e7:78:
         ca:69:06:e1:49:9f:65:fe:92:ca:b8:34:f0:5a:58:a8:82:dd:
         ec:15:99:c9:dd:b8:8e:6b:fc:9c:67:bf:8a:20:81:f9:53:6f:
         53:9f:6b:bd:32:3f:dd:28:ca:ac:77:61:a0:4b:47:0d:da:5b:
         4f:14:a2:b1:2d:3d:b9:51:de:6d:2a:33:6c:b3:fa:9f:9f:ab:
         85:b0:6b:78:ee:88:0f:88:a3:b5:8e:32:d2:fe:6b:2e:95:f0:
         46:aa:f8:5e:8e:05:b2:41:98:8b:37:04:d3:e1:74:1e:6a:11:
         b6:76:19:72:fa:16:c2:74:d0:a7:07:ed:6e:31:81:98:4a:83:
         45:5b:4b:78:cf:e8:d9:25:ae:fb:5e:1f:68:0e:da:d3:27:7a:
         d1:10:76:06:7a:7a:96:5a:e7:1f:11:03:a0:04:2d:39:b3:7d:
         c7:72:21:cf:c1:01:50:62:5a:90:ea:e9:e6:ee:02:8c:19:bd:
         a6:e0:7d:20:c9:33:55:3e:30:d9:98:81:44:0d:be:75:ec:c9:
         c0:bb:67:f5:ff:1a:58:3b:d3:20:ff:f0:0d:d7:1c:27:7f:97:
         5d:a9:e5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----