Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43B2BD70A8EA11F1BB63CEC0CE1D38B0.roa
File:                     43B2BD70A8EA11F1BB63CEC0CE1D38B0.roa (raw, json)
Hash identifier:          jO85B9IzIfx9ItVwyVhindWNpTeG/z7ZBaKLcaPO4vw=
Subject key identifier:   8B:F2:E5:E8:F2:6E:67:9E:A1:16:41:60:BE:FF:D9:48:EA:B9:D8:16
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D359
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43B2BD70A8EA11F1BB63CEC0CE1D38B0.roa
Signing time:             Sat 05 Sep 2026 05:25:54 +0000
ROA not before:           Sat 05 Sep 2026 05:25:50 +0000
ROA not after:            Sat 12 Sep 2026 05:25:50 +0000
asID:                     17497
IP address blocks:        156.255.16.0/20 maxlen: 24
                          156.255.16.0/21 maxlen: 24
                          156.255.16.0/22 maxlen: 24
                          156.255.16.0/23 maxlen: 24
                          156.255.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 11 Sep 2026 00:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119641 (0x1d359)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  5 05:25:50 2026 GMT
            Not After : Sep 12 05:25:50 2026 GMT
        Subject: CN=6a9ba7e2-4607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9b:f0:57:01:0d:e7:6e:b1:d2:91:f5:a6:53:
                    25:86:8e:07:9f:af:b4:53:1f:8a:72:9f:6b:83:cb:
                    22:d0:43:7a:d0:a2:86:10:27:2a:c9:4b:d1:db:7d:
                    6e:17:c8:e0:27:75:8f:09:b7:ed:2a:99:8c:7c:44:
                    df:83:b8:d6:cb:c7:28:7b:05:44:11:95:db:be:69:
                    65:28:73:4f:43:13:a4:cf:a6:58:d2:52:0f:70:1d:
                    7e:2e:bb:cd:64:6c:8b:c5:50:1a:1f:aa:34:0d:a7:
                    92:35:c3:89:d8:3d:dc:d4:26:b0:de:1b:c8:1e:c4:
                    22:37:36:a1:e2:bb:a8:34:a5:99:6e:47:00:93:f3:
                    44:1d:ac:51:df:00:cf:1c:08:af:aa:c2:ad:01:94:
                    82:70:77:19:18:63:b1:dd:45:30:96:8f:f2:59:f8:
                    b9:25:cf:a1:06:bc:66:7c:5a:8a:87:57:2e:38:70:
                    4a:b5:38:d1:cc:29:49:f3:a9:18:bf:70:92:b9:44:
                    23:7e:10:61:ea:ea:c3:2f:30:58:fd:13:31:0d:1a:
                    4e:57:36:1f:20:f0:37:48:f1:18:a4:54:21:6f:e6:
                    ee:c8:60:c3:6c:fd:2b:17:12:08:cf:56:66:52:32:
                    f2:75:68:df:e4:24:65:8c:0e:10:46:3c:b8:5c:98:
                    7e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F2:E5:E8:F2:6E:67:9E:A1:16:41:60:BE:FF:D9:48:EA:B9:D8:16
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/43B2BD70A8EA11F1BB63CEC0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.255.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:23:ab:cb:66:99:57:f8:f3:77:d1:ca:45:b6:92:f6:75:6c:
         c0:78:d3:eb:26:60:9a:80:08:7e:d7:7e:59:dc:cb:e4:21:41:
         9e:66:21:b3:ec:06:7e:fd:0f:52:25:98:34:fd:49:b8:a6:f9:
         01:17:21:b7:5d:91:d1:4d:d4:e0:96:79:e0:c1:34:28:59:c6:
         b5:a0:32:8d:bd:a1:77:76:bd:d5:fd:cf:c4:aa:44:01:2b:72:
         49:93:34:c2:94:1d:ee:1f:23:6f:29:cb:da:4f:db:c0:00:1a:
         ed:29:ce:78:b1:6d:c2:da:eb:b7:4b:5d:9e:91:96:f4:78:1b:
         c1:d7:e9:a2:4f:85:95:68:d0:27:6a:38:76:83:58:62:8f:64:
         3f:da:e3:5e:65:93:d3:ce:00:f7:19:f1:55:0e:29:ad:73:64:
         12:d3:ad:7c:23:0d:dd:4b:3e:fa:8b:5d:83:3d:f8:e3:1a:a6:
         c0:7e:1d:84:7d:6a:5a:b1:c5:86:0a:b7:43:d6:ff:de:4b:7f:
         a4:c2:ea:ef:32:5c:d7:9a:ca:a9:20:5b:84:ae:ec:91:e0:89:
         21:6b:5e:16:7c:f1:1d:ef:e4:2c:9e:08:03:c5:89:9b:f8:bd:
         d4:39:66:41:02:82:b0:ef:64:70:73:be:99:5d:9b:06:80:72:
         fb:7d:aa:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----