Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A08C1B0A51111F186968BFCCE1D38B0.roa
File:                     9A08C1B0A51111F186968BFCCE1D38B0.roa (raw, json)
Hash identifier:          jK1obHiA1PFDENlTJ1KUqJsf73XV+ydhJsjw2ZIT/eI=
Subject key identifier:   6D:F8:BE:EB:05:CD:98:23:85:5F:48:D3:D7:5A:4D:31:23:89:24:D4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D20A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A08C1B0A51111F186968BFCCE1D38B0.roa
Signing time:             Mon 31 Aug 2026 07:57:25 +0000
ROA not before:           Mon 31 Aug 2026 07:57:20 +0000
ROA not after:            Thu 10 Sep 2026 07:57:20 +0000
asID:                     202437
IP address blocks:        156.228.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119306 (0x1d20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 31 07:57:20 2026 GMT
            Not After : Sep 10 07:57:20 2026 GMT
        Subject: CN=6a9533e5-eb17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:00:45:b4:40:7b:ae:c2:1f:6e:40:ad:b0:0b:
                    94:8e:29:73:76:df:68:6a:a2:e3:d9:6e:e2:46:91:
                    56:a4:9f:71:58:cb:46:a4:e4:b3:a5:ed:9a:b3:83:
                    dc:ab:45:b5:5a:67:d2:64:25:09:76:85:62:fc:82:
                    4e:f7:f3:fa:e7:ba:f6:eb:64:56:0f:d0:6f:6a:b9:
                    77:e9:b9:33:54:c5:12:30:73:71:af:14:93:44:02:
                    28:c7:6d:26:fa:9b:e6:6f:ac:40:6d:80:a5:53:7f:
                    f7:b8:aa:ed:af:bb:77:23:29:54:ad:ad:02:36:05:
                    1b:44:1e:56:e2:5e:5d:73:1d:f8:4d:28:f4:38:3e:
                    b0:92:12:43:44:fa:ff:08:2b:ab:1c:a0:ec:84:3f:
                    80:f6:21:12:77:a6:e6:72:96:94:da:d9:d6:e0:4e:
                    53:54:ef:fe:3e:01:96:cf:b0:26:d5:a0:b7:22:5c:
                    cd:a7:4d:6c:6a:f2:54:a5:e2:58:ea:43:e5:ef:15:
                    0c:85:47:6c:11:b1:df:a3:44:79:3f:6e:08:d2:e8:
                    df:c0:39:63:6e:e4:12:2c:67:ef:a6:ec:75:56:30:
                    c3:2e:cd:11:0e:6c:8f:7e:1a:14:1a:7e:9a:82:72:
                    2c:84:06:8d:c1:d3:f0:3f:27:b5:68:f6:3f:9e:89:
                    62:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F8:BE:EB:05:CD:98:23:85:5F:48:D3:D7:5A:4D:31:23:89:24:D4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A08C1B0A51111F186968BFCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.228.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:6d:2e:c1:3b:08:54:d2:ae:de:f1:dc:9c:32:06:d5:72:3e:
         62:f2:2f:43:02:c0:48:5b:18:49:e9:f8:fb:5a:fd:95:f4:63:
         a2:b1:aa:23:79:90:26:f7:45:5b:47:47:29:c5:45:97:0a:99:
         9c:23:35:12:74:71:db:ab:ce:45:60:3c:f8:94:95:d7:2a:76:
         02:75:72:78:ed:84:a8:a5:f2:53:26:e3:59:01:1e:c2:83:58:
         d0:93:f7:59:4b:6d:c8:20:83:df:eb:a5:a6:11:17:3d:87:0d:
         d0:c0:a5:94:f6:bb:32:18:4a:ba:3b:c5:c6:de:9a:80:dc:99:
         dd:5a:d1:00:d6:a7:db:b0:fc:b6:51:79:cf:d6:99:b8:14:2e:
         5f:4a:8b:4d:ea:5e:e3:09:eb:cf:20:50:48:7b:28:87:55:b3:
         41:4c:3f:a6:24:ab:52:7d:db:9e:4f:66:4b:15:99:09:c8:cf:
         27:e9:79:b1:a7:1d:b5:7e:5d:24:31:f5:4b:0d:72:d3:a7:18:
         29:60:44:22:7b:a1:d0:48:4e:46:67:70:97:da:8e:3e:4d:12:
         ef:b2:ea:b7:e0:e0:fd:06:40:8a:25:37:91:d1:1c:f8:0c:cb:
         ec:06:06:da:5b:1a:b7:5d:7d:f9:8e:1b:0a:5f:24:10:bd:10:
         d4:ee:33:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----