Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84B07720A05411F1A5DC50C7CE1D38B0.roa
File:                     84B07720A05411F1A5DC50C7CE1D38B0.roa (raw, json)
Hash identifier:          RG4l+1ADEUgFxDY6+OAiHZdo6okeMXwl6sL6M4CGPbw=
Subject key identifier:   DA:DF:77:3F:EE:C4:20:E1:85:D4:66:5F:72:C5:1F:56:24:74:5F:22
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D0BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84B07720A05411F1A5DC50C7CE1D38B0.roa
Signing time:             Tue 25 Aug 2026 07:13:49 +0000
ROA not before:           Tue 25 Aug 2026 07:13:45 +0000
ROA not after:            Wed 16 Sep 2026 07:13:45 +0000
asID:                     17497
IP address blocks:        156.245.8.0/22 maxlen: 24
                          156.245.8.0/24 maxlen: 24
                          156.245.9.0/24 maxlen: 24
                          156.245.10.0/24 maxlen: 24
                          156.245.11.0/24 maxlen: 24
                          156.255.48.0/22 maxlen: 24
                          156.255.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118975 (0x1d0bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 25 07:13:45 2026 GMT
            Not After : Sep 16 07:13:45 2026 GMT
        Subject: CN=6a8d40ad-c8b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9f:19:ae:6c:8d:04:1e:6f:08:92:98:04:b7:
                    f7:d9:3c:06:f8:39:76:0f:fb:d2:a6:8b:f5:bb:e7:
                    95:9e:1b:18:73:17:00:01:b1:62:20:a8:d7:9b:23:
                    96:6c:12:89:5a:81:3a:f8:63:5b:bf:cc:a9:f5:84:
                    60:cc:f1:44:bc:d8:43:81:11:b2:41:c0:bf:0b:86:
                    b5:30:51:e2:16:5e:0f:7d:8e:90:c5:cb:bb:af:48:
                    b1:34:b3:a4:16:32:75:1b:ac:9b:2e:68:fa:76:34:
                    5f:fa:66:b6:df:09:c5:b8:db:2d:b8:9b:49:d2:1b:
                    c4:a1:3b:f0:ba:e0:a4:88:2d:b8:54:15:91:1f:ec:
                    b3:4b:f4:e4:b5:ee:e0:77:fd:a7:bf:94:d5:60:f5:
                    a6:4a:f5:c8:53:4b:39:02:e1:2e:49:f6:60:49:82:
                    33:ba:0b:8b:46:fa:bd:3b:a8:97:42:cf:cf:c9:82:
                    a8:18:60:83:d0:0f:06:9a:d1:08:bd:02:9e:26:de:
                    3b:80:cb:4a:62:27:4b:94:fb:19:fc:91:d8:ab:df:
                    21:6f:ca:99:a0:5d:fc:33:dd:b2:44:f3:2f:8a:7c:
                    f2:52:88:b8:39:df:89:74:73:6f:b2:aa:8e:e2:e2:
                    79:de:7d:9d:2b:55:28:08:16:2f:f6:35:93:ba:24:
                    9d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DF:77:3F:EE:C4:20:E1:85:D4:66:5F:72:C5:1F:56:24:74:5F:22
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84B07720A05411F1A5DC50C7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.8.0/22
                  156.255.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         55:31:89:77:8b:29:3e:d9:f7:b0:35:2b:08:08:bd:0d:14:f0:
         a0:12:b3:65:21:d1:e3:43:68:55:02:8a:e3:bf:03:2a:aa:e8:
         f0:93:15:6d:c9:51:3b:da:f5:8c:f6:7e:4a:14:a4:e2:75:8b:
         d8:8f:d7:0b:7a:f5:b5:35:2d:4e:c3:ae:e7:c9:e1:0c:00:03:
         cc:43:37:83:8d:9c:45:21:60:7b:3b:96:23:12:03:06:03:ee:
         6b:f0:65:31:1d:59:02:1b:65:ec:62:b6:4f:d0:4b:46:5f:6a:
         31:6b:e9:40:1d:c0:bb:49:a1:b1:2d:65:16:11:9e:f5:d4:59:
         91:cf:a0:91:a8:f0:17:88:b7:7a:7f:42:a7:de:14:2f:d1:43:
         c4:ad:53:35:5b:92:3c:3a:1c:b4:96:54:38:e9:19:f2:a6:0d:
         dd:b7:a4:6e:0b:d9:74:d4:06:98:3a:15:34:46:17:68:1f:cc:
         87:b3:57:57:c4:be:f7:f1:9e:a3:40:24:cb:36:0d:07:6b:7c:
         56:84:99:b1:2a:12:5c:59:8a:2b:b0:7c:ac:b7:f7:57:f8:61:
         82:b4:6b:b3:bf:75:d2:7e:40:db:dd:42:36:51:c2:9e:02:0d:
         da:c8:e1:74:01:93:34:43:b1:83:b5:fd:ab:7e:56:e6:b2:78:
         49:c5:a2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----