Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83DC836CAE8B11F1B805C3DACE1D38B0.roa
File:                     83DC836CAE8B11F1B805C3DACE1D38B0.roa (raw, json)
Hash identifier:          0w30IpUQOkGq7HC23l5ganJRWSkRGGkj3M+EEmt9X9o=
Subject key identifier:   08:5F:BB:D5:A2:7B:FD:23:F6:7C:45:3B:ED:FB:1B:1F:BC:AE:4D:21
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D592
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83DC836CAE8B11F1B805C3DACE1D38B0.roa
Signing time:             Sat 12 Sep 2026 09:22:46 +0000
ROA not before:           Sat 12 Sep 2026 09:22:42 +0000
ROA not after:            Tue 22 Sep 2026 09:22:42 +0000
asID:                     398478
IP address blocks:        156.245.64.0/18 maxlen: 24
                          156.245.64.0/20 maxlen: 24
                          156.245.80.0/20 maxlen: 24
                          156.245.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120210 (0x1d592)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 12 09:22:42 2026 GMT
            Not After : Sep 22 09:22:42 2026 GMT
        Subject: CN=6aa519e6-0221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:44:04:81:44:30:e8:a1:cd:aa:cc:c0:2d:01:
                    58:82:ff:0e:c6:9c:a2:98:16:93:e3:06:5c:0a:72:
                    ef:5c:7a:ae:b3:6e:6b:14:ac:7b:9f:ee:89:ee:d2:
                    51:7b:4f:67:0e:5f:ef:b6:39:63:7f:c0:42:1f:0a:
                    04:2f:a9:42:83:d0:de:1a:9e:0c:fe:3d:13:2a:83:
                    4c:b8:c6:b3:cb:ac:dd:7e:04:be:d0:73:16:6a:ee:
                    98:18:4a:7d:c3:74:cb:8d:81:3a:ca:d6:16:0f:e5:
                    9d:f6:c6:2f:10:f9:9f:8d:f1:f1:4e:92:0d:f5:5a:
                    d8:92:5b:d7:0d:aa:2b:a6:01:64:09:2a:b7:dd:d6:
                    f0:bc:e6:5a:4e:3d:35:2b:ac:24:91:db:fa:f7:9c:
                    bb:5d:41:70:ef:b9:a3:0c:28:63:74:3b:a1:d5:1c:
                    29:99:5b:f4:78:35:a3:43:07:b7:22:02:c3:83:2d:
                    6b:45:6d:67:19:81:28:d1:2a:6f:09:85:09:75:05:
                    96:e2:54:3f:44:76:65:0b:4a:d0:76:9d:49:94:2d:
                    89:69:97:cf:f3:d6:c0:13:eb:07:48:fd:aa:cc:d3:
                    e1:30:f9:b9:21:d5:05:b7:fb:48:29:a2:98:1a:64:
                    4c:5f:fb:63:ae:b0:9c:c0:8a:38:78:45:d7:08:2a:
                    e2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5F:BB:D5:A2:7B:FD:23:F6:7C:45:3B:ED:FB:1B:1F:BC:AE:4D:21
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83DC836CAE8B11F1B805C3DACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3e:77:00:21:8d:5d:b2:24:99:75:7a:1c:22:92:55:5a:e9:57:
         d4:c0:91:62:91:ba:31:b1:5b:5e:4c:20:82:13:cd:44:42:96:
         44:68:7e:da:f5:63:f1:51:9d:fa:3f:e5:2b:2a:38:a6:4f:66:
         71:bb:f3:fe:35:2a:9f:bb:3a:95:f5:7e:13:9a:c4:9d:68:a9:
         ad:6b:9a:d1:d8:56:ba:dc:86:61:42:65:08:51:ec:46:be:f6:
         e0:c5:82:c7:43:ca:0c:02:99:d3:61:51:6b:34:37:46:85:b2:
         67:b6:77:c0:bf:e2:ef:cc:48:de:9a:e5:34:68:3d:1b:17:6f:
         ce:77:4e:1b:81:19:21:fd:42:16:bc:81:29:07:d7:3c:3f:98:
         40:42:a2:14:c5:ef:75:e6:cb:d7:21:f5:f7:e2:6c:ee:1c:32:
         f1:b7:3c:3c:4b:86:0c:fb:91:7b:45:52:63:5b:04:13:c8:76:
         f1:d0:da:15:1f:c8:0f:ff:03:99:55:5e:84:5b:1f:79:00:3a:
         a6:79:2d:78:ed:a0:dd:6b:27:c5:d3:14:3c:b6:59:3b:01:fe:
         27:1a:15:91:e7:7a:3b:3f:03:a0:12:9b:1b:50:b8:8f:a5:d2:
         d7:fd:35:b2:5b:16:d1:65:c8:a2:eb:99:3f:3f:73:ee:d6:e2:
         b5:eb:02:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----