Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BF601C0A13511F19E074318CF1D38B0.roa
File:                     9BF601C0A13511F19E074318CF1D38B0.roa (raw, json)
Hash identifier:          Btpme5cMoO6nBgW+pkh8iBumJR6AakR1YWDm+DWk+sE=
Subject key identifier:   72:09:4C:F0:5B:A1:EE:DC:70:AA:17:2F:23:07:6A:C5:2E:42:E9:09
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D127
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BF601C0A13511F19E074318CF1D38B0.roa
Signing time:             Wed 26 Aug 2026 10:05:05 +0000
ROA not before:           Wed 26 Aug 2026 10:05:01 +0000
ROA not after:            Sat 25 Aug 2029 10:05:01 +0000
asID:                     17561
IP address blocks:        156.237.140.0/24 maxlen: 24
                          156.237.141.0/24 maxlen: 24
                          156.237.142.0/24 maxlen: 24
                          156.237.143.0/24 maxlen: 24
                          156.237.144.0/24 maxlen: 24
                          156.237.145.0/24 maxlen: 24
                          156.237.146.0/24 maxlen: 24
                          156.237.147.0/24 maxlen: 24
                          156.237.148.0/24 maxlen: 24
                          156.237.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119079 (0x1d127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 10:05:01 2026 GMT
            Not After : Aug 25 10:05:01 2029 GMT
        Subject: CN=6a8eba51-458d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:14:17:80:0a:d3:7a:29:27:7b:fa:8c:64:d5:
                    b1:b7:f5:d7:d2:c6:6b:41:9e:60:e9:73:36:b1:69:
                    ff:2b:54:e5:23:f5:64:67:4d:c4:0f:06:c1:41:3f:
                    92:81:82:08:06:a8:22:a3:c5:e9:96:9b:63:68:27:
                    46:61:ea:9d:a5:aa:7b:db:be:52:81:e3:3c:61:47:
                    11:8f:2a:79:2e:30:26:30:ae:46:52:5a:89:85:b3:
                    88:22:ba:67:41:c8:ee:22:5c:8f:6b:fd:c5:7b:20:
                    9c:6b:2e:89:e9:e3:17:d0:d1:5b:5c:c5:e9:1d:cc:
                    4f:8d:a6:a8:df:18:c6:f9:0b:22:aa:29:0d:73:8d:
                    db:49:ad:23:90:0c:23:5d:34:dc:6c:15:be:07:c7:
                    51:00:93:ed:40:1d:62:f5:4c:be:f5:f6:17:81:32:
                    66:c3:aa:4a:0e:de:d1:52:c9:28:7e:5f:67:cf:cb:
                    de:e9:a8:f7:f1:3b:98:41:df:63:f5:0a:00:fa:29:
                    75:64:31:3b:ad:15:9b:84:7e:83:81:e4:56:78:b1:
                    9b:cf:e9:07:c2:22:ec:b8:5a:bb:c6:25:9c:b5:8e:
                    6a:d2:0a:fd:47:cf:de:86:1d:97:e3:7e:6c:2c:54:
                    e5:8b:24:37:cb:0e:21:fa:ad:ed:46:1b:d6:a6:c1:
                    48:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:09:4C:F0:5B:A1:EE:DC:70:AA:17:2F:23:07:6A:C5:2E:42:E9:09
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9BF601C0A13511F19E074318CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.237.140.0-156.237.149.255

    Signature Algorithm: sha256WithRSAEncryption
         b8:0c:c4:16:98:cd:07:58:f9:c2:ac:04:45:3c:dd:9d:05:df:
         87:77:98:42:61:04:6c:ca:0b:1d:be:1b:00:a5:8c:bd:ea:8f:
         55:ff:c7:a9:1c:4d:f8:f6:a8:f9:67:ef:81:8b:d0:49:0b:27:
         3d:ab:bf:0d:04:6b:10:88:60:50:41:86:3e:c3:41:80:6d:0b:
         57:09:6b:e4:2a:cd:15:40:2b:8d:b8:1d:ec:ad:00:a7:cf:c4:
         f2:87:13:8d:e4:91:77:94:0a:ff:4e:70:4c:74:62:78:e2:04:
         2c:c1:b0:c6:22:8a:4f:34:bf:5c:a1:4d:40:fb:bd:ed:23:f7:
         e2:81:5e:25:59:d1:3d:27:7d:2f:d8:86:5f:19:27:14:9c:3b:
         53:26:6b:e3:57:de:a3:d8:ed:89:da:3e:ff:18:cb:18:5e:04:
         ae:44:76:bd:c0:2d:32:43:9f:47:50:ec:1b:2b:45:09:76:61:
         3e:b8:18:0c:99:79:ed:c0:b7:40:00:a9:57:3e:ad:b1:ba:e2:
         aa:eb:52:14:03:33:21:38:61:ab:4d:40:0b:dc:71:73:38:f9:
         ff:23:a3:03:fe:7f:be:da:60:9e:98:19:02:fe:d5:62:f4:32:
         b5:b6:54:7d:ed:66:6d:f2:ad:35:f6:44:fb:6f:f2:07:8e:2f:
         f0:4b:0f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----