Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B424DCCAC6911F1B0DD7FE3CE1D38B0.roa
File:                     8B424DCCAC6911F1B0DD7FE3CE1D38B0.roa (raw, json)
Hash identifier:          kn1Pyt2DTF17GIOBdgOZuDVMQ6l0macXd5Busg5EIcM=
Subject key identifier:   87:E0:BE:6E:85:64:9B:E2:67:29:A9:E8:BB:24:51:40:13:0D:EB:A0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D480
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B424DCCAC6911F1B0DD7FE3CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 16:14:33 +0000
ROA not before:           Wed 09 Sep 2026 16:14:30 +0000
ROA not after:            Mon 30 Nov 2026 16:14:30 +0000
asID:                     399077
IP address blocks:        156.240.197.0/24 maxlen: 24
                          156.240.198.0/24 maxlen: 24
                          156.240.199.0/24 maxlen: 24
                          156.240.200.0/24 maxlen: 24
                          156.240.201.0/24 maxlen: 24
                          156.240.202.0/24 maxlen: 24
                          156.240.203.0/24 maxlen: 24
                          156.240.204.0/24 maxlen: 24
                          156.240.205.0/24 maxlen: 24
                          156.240.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119936 (0x1d480)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  9 16:14:30 2026 GMT
            Not After : Nov 30 16:14:30 2026 GMT
        Subject: CN=6aa185e9-3996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7b:a3:4e:61:87:2d:f8:d0:d3:7d:cd:c4:15:
                    43:11:a7:9e:08:dd:7a:16:54:cb:8f:bf:6c:7b:eb:
                    db:a0:c5:8b:44:c1:ce:e3:d8:b0:f3:e5:c8:c3:25:
                    e9:20:11:8c:18:02:35:bd:e8:de:ab:6c:bd:18:3e:
                    76:33:e5:a8:c9:ae:eb:47:48:92:7f:9e:34:93:72:
                    0e:b9:b7:41:59:6a:a1:96:76:a3:d3:9c:af:2d:7f:
                    84:92:01:1c:b6:9e:27:58:e9:d6:74:c4:03:7b:d4:
                    d8:c2:f3:84:34:12:a8:99:0a:dc:a9:56:5e:b1:1e:
                    a0:07:48:37:82:6d:4f:a9:fa:1c:6b:ed:1e:e4:6a:
                    8e:9a:53:11:9d:58:65:98:53:f0:b5:cc:bb:2c:05:
                    9f:a4:b1:22:54:a3:1a:4e:31:ae:9f:0f:7d:5d:f7:
                    65:d0:fd:ec:ad:9c:ab:ef:ed:68:09:c5:49:d9:d3:
                    17:18:51:6d:81:2e:8f:5d:e2:3f:b9:42:9f:b9:6a:
                    0a:78:4a:90:7e:39:a2:78:8f:da:fa:fa:19:d2:b7:
                    67:2e:56:2e:40:58:71:46:3e:95:67:88:d1:76:cc:
                    c3:52:2f:a1:18:02:73:8d:4e:7f:9e:01:d6:38:38:
                    00:9c:ae:d2:d1:e5:c7:43:c9:8e:56:c7:fa:44:39:
                    29:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E0:BE:6E:85:64:9B:E2:67:29:A9:E8:BB:24:51:40:13:0D:EB:A0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B424DCCAC6911F1B0DD7FE3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.240.197.0-156.240.206.255

    Signature Algorithm: sha256WithRSAEncryption
         ba:6d:50:d9:3d:4d:10:bf:16:81:74:d8:ff:c6:a8:a4:a9:d9:
         c0:1f:47:bb:2a:8f:f1:b6:27:31:3e:1c:af:cb:9f:04:a5:53:
         83:b2:17:a3:78:f7:a5:cd:3c:fc:e6:63:59:8f:d3:e4:19:34:
         bf:bb:a6:28:f2:d0:59:28:2d:12:52:4c:94:17:25:a1:97:6d:
         84:d9:ad:81:02:72:66:52:ae:16:84:c9:a3:0b:7a:02:e4:d7:
         9f:9b:41:33:83:39:a4:f7:bd:20:74:c1:f8:26:fa:97:82:c7:
         2e:b2:68:d6:6e:54:67:99:92:fc:8d:1a:92:1f:39:b2:53:34:
         cd:e0:d3:69:57:16:84:5f:e8:ea:34:fc:8c:87:7c:92:93:44:
         8b:72:b4:12:d4:79:da:23:38:ff:eb:3d:f3:a1:f5:45:e0:68:
         da:89:f1:7f:29:f7:74:42:75:91:e9:14:86:a6:d9:9a:a8:66:
         58:cf:8e:1d:38:96:25:e8:8b:94:f0:9c:37:4e:38:3d:90:88:
         8a:fe:0d:46:4d:19:6b:55:b4:ea:89:44:f8:c7:6e:72:78:66:
         5a:da:86:c7:9d:35:c4:09:6b:03:4f:eb:ea:ac:f2:01:0d:37:
         f8:87:33:a3:20:8c:b5:10:a2:1e:d2:bb:be:75:57:6c:1b:05:
         8d:15:44:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----