Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54987574AC6B11F1ACA8C4EDCE1D38B0.roa
File:                     54987574AC6B11F1ACA8C4EDCE1D38B0.roa (raw, json)
Hash identifier:          42dZ/zZIv7tmyLACyQ8hH/1Q+NNjWHL+f3AIWj1gH20=
Subject key identifier:   E2:1E:7D:D8:1C:86:8A:6A:BF:F5:9A:67:99:2F:EF:D6:5D:B8:B5:CB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D484
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54987574AC6B11F1ACA8C4EDCE1D38B0.roa
Signing time:             Wed 09 Sep 2026 16:27:21 +0000
ROA not before:           Wed 09 Sep 2026 16:27:17 +0000
ROA not after:            Mon 30 Nov 2026 16:27:17 +0000
asID:                     399077
IP address blocks:        156.240.217.0/24 maxlen: 24
                          156.240.218.0/24 maxlen: 24
                          156.240.219.0/24 maxlen: 24
                          156.240.220.0/24 maxlen: 24
                          156.240.221.0/24 maxlen: 24
                          156.240.222.0/24 maxlen: 24
                          156.240.223.0/24 maxlen: 24
                          156.240.224.0/24 maxlen: 24
                          156.240.225.0/24 maxlen: 24
                          156.240.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119940 (0x1d484)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  9 16:27:17 2026 GMT
            Not After : Nov 30 16:27:17 2026 GMT
        Subject: CN=6aa188e9-c07f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:ab:6c:7e:4e:32:64:ec:42:ed:f4:25:ab:
                    1a:e4:94:92:e3:0f:6a:56:f0:b9:c8:b9:5d:39:34:
                    a7:e4:d1:ea:ef:39:08:ac:83:16:eb:0b:f1:cd:2f:
                    f2:e6:1e:f6:34:4c:d2:30:56:c0:1e:82:5b:99:c9:
                    27:4c:f3:c1:a6:d8:5e:e3:87:1a:fc:ad:3b:a3:3f:
                    58:57:04:ff:21:d3:df:f0:8e:09:08:a4:2d:77:82:
                    ed:14:cf:ba:51:9d:dd:23:c7:d8:ea:4b:e4:db:52:
                    e8:f0:d3:b2:c8:af:f9:fe:21:10:10:3a:d7:17:b4:
                    2d:8c:65:67:5b:ed:bf:f9:62:77:f0:80:ec:78:b0:
                    0c:2c:f1:ab:76:9e:15:28:77:ee:16:35:50:11:f4:
                    31:6f:17:23:cb:20:62:5d:38:17:9e:36:6f:dc:81:
                    5f:3f:d8:19:e3:10:ce:1b:b9:a8:7e:72:9a:ca:0b:
                    db:82:4e:20:4a:b1:90:aa:b9:12:6c:18:1b:75:81:
                    b7:63:b7:3c:87:4f:cc:f9:65:d5:f6:68:59:a2:10:
                    ba:fb:eb:21:e5:ac:b8:4a:ac:d2:6b:81:e7:ae:7c:
                    fe:7f:a3:4f:6f:bd:80:66:fa:48:f3:b2:57:f7:85:
                    1c:de:07:ec:7d:2f:7b:db:32:68:8e:6e:ec:e9:61:
                    ae:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1E:7D:D8:1C:86:8A:6A:BF:F5:9A:67:99:2F:EF:D6:5D:B8:B5:CB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54987574AC6B11F1ACA8C4EDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.240.217.0-156.240.226.255

    Signature Algorithm: sha256WithRSAEncryption
         66:60:e8:56:24:06:7a:bf:89:7c:20:d9:85:15:5c:05:aa:20:
         c3:4d:4d:de:f2:c7:d9:f4:73:7a:92:58:be:3f:82:9b:6a:a3:
         e5:44:15:1f:f9:82:45:de:5e:bd:d3:cb:8f:bf:ed:3a:2d:5c:
         a4:42:73:21:c9:96:1d:25:10:5d:0c:b2:e3:bc:1f:58:2c:35:
         f9:3b:52:08:7b:a4:55:1c:88:f8:22:98:bd:29:4e:a3:8f:8e:
         85:ae:2a:9a:98:05:22:67:3e:4e:a6:40:7a:ca:ca:8c:05:d7:
         13:16:1a:bb:7a:a4:43:f3:23:b9:14:e4:7e:f8:42:89:4f:65:
         7f:62:b6:3f:bc:07:30:85:81:e4:c7:f5:42:b7:29:02:35:78:
         37:7b:97:2c:a1:1c:15:85:df:ed:25:a9:22:27:e8:be:97:6c:
         19:65:47:e5:38:5b:55:52:9d:6e:d4:92:e5:0c:71:1d:9b:93:
         a5:fd:5c:f9:0a:70:86:d2:53:7b:5c:c6:d5:6d:e2:9c:f1:ad:
         23:0c:33:3b:64:c6:7a:63:3a:64:3e:46:de:b1:02:63:35:0d:
         f7:c9:c4:71:8b:71:b6:10:e9:0a:fc:4a:58:86:34:07:39:9f:
         0c:6b:f1:99:a9:7f:23:30:97:38:67:2c:57:4c:70:cc:ce:7b:
         6d:7d:2d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----