Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B1F4202933911F18006CC0CCF1D38B0.roa
File:                     4B1F4202933911F18006CC0CCF1D38B0.roa (raw, json)
Hash identifier:          WEPPqT31lgH8nDFNchqHvRVm2TAsA9CQ/FUxatq8U58=
Subject key identifier:   F1:BC:F1:53:E0:CF:75:CA:B5:D2:2B:C2:78:9B:BD:52:4E:CF:38:4B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CA82
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B1F4202933911F18006CC0CCF1D38B0.roa
Signing time:             Sat 08 Aug 2026 14:56:11 +0000
ROA not before:           Sat 08 Aug 2026 14:56:07 +0000
ROA not after:            Mon 14 Sep 2026 14:56:07 +0000
asID:                     135377
IP address blocks:        156.229.16.0/24 maxlen: 24
                          156.229.17.0/24 maxlen: 24
                          156.229.18.0/24 maxlen: 24
                          156.229.19.0/24 maxlen: 24
                          156.229.20.0/24 maxlen: 24
                          156.229.21.0/24 maxlen: 24
                          156.229.22.0/24 maxlen: 24
                          156.229.23.0/24 maxlen: 24
                          156.229.24.0/23 maxlen: 24
                          156.229.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117378 (0x1ca82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  8 14:56:07 2026 GMT
            Not After : Sep 14 14:56:07 2026 GMT
        Subject: CN=6a77438b-c5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dd:3f:10:67:d5:b4:a0:a0:8e:f8:1c:48:0a:
                    9f:29:01:c2:78:47:49:a9:49:05:46:ec:4d:13:89:
                    f9:fd:0a:7a:92:96:6c:5c:31:46:00:e0:90:a1:c8:
                    3f:c5:20:f9:68:9c:3d:86:19:be:3d:34:d1:75:13:
                    f5:f6:c8:40:2e:16:6e:d4:95:e0:49:5b:bb:56:88:
                    1b:6c:5d:7c:bc:29:06:31:9e:ed:4e:4f:1c:f7:62:
                    61:eb:88:1c:94:60:67:f4:2d:14:37:a7:c4:17:d7:
                    ff:9b:df:fd:46:21:d6:ab:c0:20:0f:78:39:19:39:
                    75:4d:8b:a9:be:20:0c:e5:f3:fa:49:89:09:86:77:
                    35:90:20:56:f2:25:79:b5:47:af:02:0e:5b:ab:cc:
                    f1:fa:f0:84:cc:d9:c5:4f:77:23:45:30:4c:37:f4:
                    47:41:89:8b:9a:67:1d:d0:92:81:c3:d6:87:8f:45:
                    b6:ae:63:b3:d3:6d:32:2b:8e:59:34:ed:43:da:e0:
                    4a:3a:ae:e4:cb:fb:80:b8:aa:05:70:a6:5c:3d:34:
                    67:f1:f6:79:00:6e:a6:c3:9a:7a:65:5c:49:77:59:
                    93:fc:ea:cb:4f:d9:18:3c:89:f2:1a:79:ca:da:fb:
                    98:90:3f:e9:1d:ca:a5:19:07:f0:2a:51:3a:b5:e2:
                    f1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BC:F1:53:E0:CF:75:CA:B5:D2:2B:C2:78:9B:BD:52:4E:CF:38:4B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B1F4202933911F18006CC0CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.16.0-156.229.25.255

    Signature Algorithm: sha256WithRSAEncryption
         70:df:2e:4e:83:70:40:22:b0:cd:02:39:26:df:41:a9:75:e5:
         57:91:92:8c:8b:f7:2f:ab:60:d1:49:00:68:31:6a:d7:f4:a3:
         5c:95:ee:ce:b2:8f:d0:96:56:4a:52:d7:1c:b6:af:92:2d:14:
         2f:8c:ef:a6:ad:f7:2f:2d:48:44:09:b0:15:c0:d3:2e:d5:a7:
         47:42:71:ed:0a:f6:40:46:8c:32:1d:57:c6:b1:a2:01:c4:91:
         36:66:a6:b8:fa:6a:e7:1e:b3:d7:aa:2b:7f:fa:07:c2:7f:ea:
         7e:ef:67:80:a1:a4:94:29:15:b3:a9:72:12:78:b1:9d:fe:02:
         00:1b:0a:10:b3:ed:9b:1d:90:4d:99:73:6f:1c:da:38:59:93:
         b5:24:e8:22:50:a0:cf:00:dd:74:84:bf:a0:dd:23:b3:b7:5a:
         78:bf:04:3b:f4:02:44:f9:24:12:2a:d2:b3:54:79:a0:fc:5b:
         fe:bc:40:c5:71:d2:81:53:6e:20:4a:7e:af:1a:4f:ec:40:c9:
         7a:f8:71:c2:5c:ea:7a:58:ea:db:d0:d5:1c:d6:8a:19:75:09:
         e9:9b:8c:05:e5:1a:71:27:46:8e:fd:ef:41:de:a9:62:15:67:
         4e:f8:5f:00:f3:76:d2:93:b2:fa:79:c9:fc:63:87:79:fa:d7:
         ea:0c:bb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----