Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84B318BAA2E611F1956CBCD6CE1D38B0.roa
File:                     84B318BAA2E611F1956CBCD6CE1D38B0.roa (raw, json)
Hash identifier:          No0cx4AIKlVpA+CvgCB91zf0GUFMTukbuf/KgdkOt9Y=
Subject key identifier:   CD:C5:96:71:7D:87:F4:87:C6:98:FA:DC:38:F7:15:F5:DC:C2:F9:6B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D197
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84B318BAA2E611F1956CBCD6CE1D38B0.roa
Signing time:             Fri 28 Aug 2026 13:43:58 +0000
ROA not before:           Fri 28 Aug 2026 13:43:54 +0000
ROA not after:            Sat 04 Sep 2027 13:43:54 +0000
asID:                     398704
IP address blocks:        156.245.192.0/23 maxlen: 24
                          156.245.192.0/24 maxlen: 24
                          156.245.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119191 (0x1d197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 28 13:43:54 2026 GMT
            Not After : Sep  4 13:43:54 2027 GMT
        Subject: CN=6a91909e-3516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:91:c3:d4:f5:f7:09:8e:f6:59:fd:ef:a8:95:
                    f2:c6:98:d0:82:48:ce:c2:a9:e3:92:44:11:78:d7:
                    53:ce:d8:91:f6:2c:e3:2f:1b:e7:33:e0:b7:02:7b:
                    9d:2e:ca:7c:4e:e2:77:5b:bc:35:81:4f:82:f3:e2:
                    70:03:95:34:2b:d8:4c:67:ac:a4:49:7b:73:2a:91:
                    d2:8d:d1:b3:bb:12:59:9c:b3:14:a0:87:c3:a7:87:
                    14:5a:86:92:36:87:14:22:2b:ac:a7:37:b8:64:41:
                    c0:0f:6b:9e:ed:a5:08:9b:80:79:2a:47:b7:8e:16:
                    56:36:d1:9b:91:fb:ff:33:0c:b6:d3:ce:b2:75:f5:
                    79:d5:58:79:55:f4:fb:a4:aa:e6:ed:66:39:91:75:
                    5e:26:12:84:58:e4:fc:44:ea:89:a5:dd:96:4e:6a:
                    b2:bd:1d:1f:2e:79:83:a8:0c:aa:15:c0:be:79:ed:
                    3e:99:a5:2f:98:f8:47:15:c2:e6:f2:d0:34:bc:dd:
                    75:0b:f7:78:19:f3:eb:ce:f5:61:ee:f3:b8:bd:b0:
                    97:d0:c4:f5:bf:17:ef:4e:27:20:60:1f:42:66:b9:
                    69:d8:52:0b:8b:12:93:f1:b9:4e:31:96:cb:dc:03:
                    ee:c4:e6:23:e3:96:a5:67:a1:8a:79:57:16:63:c8:
                    7a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C5:96:71:7D:87:F4:87:C6:98:FA:DC:38:F7:15:F5:DC:C2:F9:6B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84B318BAA2E611F1956CBCD6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:85:41:24:71:52:3c:4d:73:6f:a6:c3:67:ff:94:1d:1e:60:
         ec:02:1e:6f:7f:65:22:d1:79:f7:38:c1:d9:fd:98:49:e7:5c:
         55:8b:f6:fa:fa:d6:2b:d7:80:9e:c8:50:f1:36:0c:ec:8f:3f:
         2c:a0:b5:23:be:6f:c3:07:6d:ae:b6:be:fa:0b:bf:81:8d:fc:
         1e:27:b1:7f:7d:ce:a5:b1:ad:23:ae:c4:a1:7c:31:d6:c6:52:
         c6:03:44:37:33:0a:3c:24:59:57:97:43:b6:ec:e6:36:11:24:
         c5:d5:a2:8f:f8:a5:17:70:9e:ee:7e:77:0b:08:08:01:4c:be:
         10:9a:4b:00:a3:9e:f4:9b:c7:9e:42:37:ef:6d:01:ee:41:6d:
         7f:7f:75:a5:2a:05:7b:ca:62:8b:df:09:0a:8c:83:bd:7a:da:
         3f:d5:bc:52:5e:89:23:26:67:e8:e5:eb:bb:5a:6b:da:49:52:
         fc:8c:bf:e8:54:df:da:b6:15:6e:59:24:2f:55:ec:81:c6:19:
         5e:5b:21:77:ea:3c:28:3a:1d:6b:c3:c2:f7:60:cd:78:5f:81:
         24:c0:b5:55:38:72:2d:ef:0f:1c:ce:af:95:31:33:77:88:a7:
         da:b0:0d:4f:80:b6:23:f5:1d:65:1b:87:b0:18:9a:13:fd:2f:
         09:8a:b6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----