Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8823EA86BB1111F1B23B8EF7CE1D38B0.roa
File:                     8823EA86BB1111F1B23B8EF7CE1D38B0.roa (raw, json)
Hash identifier:          KSxbM8B766gssehjqGzg0NNxAR9NDMNNMEe637BWhlw=
Subject key identifier:   B9:10:0E:B2:D5:BE:61:A9:E7:93:45:3D:7A:68:55:15:7F:2F:65:CB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D94A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8823EA86BB1111F1B23B8EF7CE1D38B0.roa
Signing time:             Mon 28 Sep 2026 07:52:20 +0000
ROA not before:           Mon 28 Sep 2026 07:52:16 +0000
ROA not after:            Wed 04 Nov 2026 07:52:16 +0000
asID:                     138195
IP address blocks:        156.234.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121162 (0x1d94a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 28 07:52:16 2026 GMT
            Not After : Nov  4 07:52:16 2026 GMT
        Subject: CN=6aba1cb4-67fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1e:30:c4:b7:79:70:ed:39:25:7d:bb:1b:ed:
                    00:f1:f2:ea:a9:d5:28:f0:3c:c4:99:57:6f:bf:38:
                    d0:18:8b:a2:99:e8:c6:3c:92:49:00:9c:8a:e3:b7:
                    bb:77:c9:69:6b:65:ea:de:9b:d5:2d:90:6f:2d:40:
                    82:4b:2d:3b:91:66:23:69:b1:bb:1a:c2:7b:60:18:
                    49:7a:a3:3f:ed:e4:dd:38:1b:23:b1:20:c2:28:6b:
                    41:24:fa:56:6d:88:a5:44:6f:5b:0f:be:b3:da:6b:
                    11:99:05:5f:9f:16:ee:55:7f:56:70:9c:a1:cd:96:
                    2b:c3:42:e7:d7:98:64:34:55:db:70:ac:52:fe:1c:
                    71:d7:ae:e3:ee:01:54:d6:9e:30:26:7d:e7:4b:cd:
                    41:38:1e:8c:65:5d:68:66:7c:a5:af:ed:3d:17:7c:
                    0d:36:c3:76:3f:ad:22:46:e8:54:e4:fb:e0:9f:90:
                    f6:b7:02:6f:8f:8d:f5:92:ae:c5:68:e3:76:be:a9:
                    e3:24:87:2a:c5:af:b5:60:a9:e8:e3:9b:4f:c1:68:
                    81:30:df:7f:1a:e9:09:ab:6d:3b:aa:ae:eb:d8:d6:
                    f1:92:51:d4:49:92:29:14:cd:f9:da:cb:ac:1c:f7:
                    53:a9:05:2b:7f:df:a4:5b:16:89:35:6b:c6:57:71:
                    68:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:10:0E:B2:D5:BE:61:A9:E7:93:45:3D:7A:68:55:15:7F:2F:65:CB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8823EA86BB1111F1B23B8EF7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         14:09:0d:a5:c4:bd:88:7d:55:7c:12:29:d2:c3:1a:48:ba:49:
         e3:28:06:c4:85:ae:e6:c4:df:1f:ac:be:6e:a3:df:65:05:d2:
         03:8e:25:e3:aa:33:a5:0e:74:5c:5b:47:14:f5:22:2a:a4:7b:
         32:06:e2:bc:22:e6:cf:4e:db:8d:52:53:6a:7b:82:9e:0c:68:
         00:a9:c5:f5:f4:3f:67:43:11:6b:ec:df:25:04:1c:a6:17:b8:
         9a:31:87:f2:6f:67:26:19:9a:32:11:95:81:fd:e0:f7:61:be:
         39:38:7c:4d:02:1b:ae:55:87:09:f1:ca:e5:22:83:40:52:9d:
         fd:b6:5c:89:ce:4f:47:62:4d:51:f7:1f:36:c1:22:b3:79:b2:
         f8:3d:0a:00:08:7a:03:c3:73:44:c5:ae:ec:2f:92:42:1a:4a:
         59:f7:cb:4b:73:89:d7:65:8b:8e:93:42:b8:3a:79:b6:1f:98:
         25:f3:41:aa:c8:82:df:a3:3a:de:38:b6:63:7f:b5:e8:db:8c:
         07:55:e0:40:a1:ff:e5:f2:f5:76:08:5d:fb:0c:ed:07:00:0d:
         02:87:50:b6:51:c7:d4:21:00:02:81:f6:52:ef:22:2f:8f:9c:
         1b:9d:60:5c:e8:ec:25:2c:94:09:75:3e:8d:4f:0b:c4:d5:20:
         0f:80:a2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----