Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C4A9698994911F1BD03C5DACE1D38B0.roa
File:                     9C4A9698994911F1BD03C5DACE1D38B0.roa (raw, json)
Hash identifier:          4hHPkqW16p8UhWu0hQJZwZeYGmwD8fY/HLZL4H1p6Dk=
Subject key identifier:   89:5B:76:DA:92:5C:CB:48:3E:14:79:45:AD:79:70:CA:89:E9:18:03
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CD13
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C4A9698994911F1BD03C5DACE1D38B0.roa
Signing time:             Sun 16 Aug 2026 08:08:06 +0000
ROA not before:           Sun 16 Aug 2026 08:08:02 +0000
ROA not after:            Tue 22 Sep 2026 08:08:02 +0000
asID:                     7843
IP address blocks:        156.227.160.0/19 maxlen: 24
                          156.237.0.0/18 maxlen: 24
                          156.237.64.0/19 maxlen: 24
                          156.242.192.0/20 maxlen: 24
                          156.243.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118035 (0x1cd13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 16 08:08:02 2026 GMT
            Not After : Sep 22 08:08:02 2026 GMT
        Subject: CN=6a816fe6-7ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0c:03:79:a7:99:0d:df:7e:3d:0d:d9:c7:2c:
                    6a:61:e6:16:4e:96:ee:54:88:4c:05:4c:50:87:ec:
                    ac:48:89:40:61:c1:2f:18:e9:3c:10:c3:30:2b:73:
                    fe:aa:9a:b4:42:e0:40:a6:7c:7a:13:79:8d:a1:d7:
                    2c:75:8c:7c:5c:3c:d1:0d:90:62:de:a3:80:24:c7:
                    ab:5b:d5:36:72:92:e9:3c:c8:90:5b:4f:b4:e8:57:
                    e2:f7:a4:66:ff:e8:9c:d8:f6:4b:7b:ec:aa:26:03:
                    44:f0:97:cc:9e:c8:f7:9a:69:9d:d6:1a:a0:c9:25:
                    41:9d:78:b9:05:2c:cb:86:81:9b:00:9c:44:14:05:
                    ae:57:28:9b:69:91:a3:03:c0:a3:78:ff:ef:99:71:
                    27:92:79:c5:d4:c9:1a:64:31:1e:d7:51:f6:20:79:
                    ff:a6:e5:2c:74:de:70:23:a6:4a:d1:e2:02:c1:99:
                    64:e2:eb:b4:99:6f:cf:18:12:d7:31:3c:c3:80:fd:
                    7c:25:83:2c:1f:76:39:24:9d:2f:23:fe:18:84:a0:
                    8f:86:eb:02:20:ec:70:80:f8:10:04:1d:b2:81:69:
                    74:74:b2:4c:9e:1e:b8:a5:1a:21:44:c1:f7:04:e4:
                    4d:59:fd:80:98:c3:d3:14:19:90:cc:3c:b3:0b:7f:
                    84:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5B:76:DA:92:5C:CB:48:3E:14:79:45:AD:79:70:CA:89:E9:18:03
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C4A9698994911F1BD03C5DACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.227.160.0/19
                  156.237.0.0-156.237.95.255
                  156.242.192.0/20
                  156.243.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:32:ac:81:1c:fd:7a:57:9e:a2:67:1e:b8:c4:56:c7:a2:2d:
         a2:f5:24:14:85:f3:a7:63:ed:d0:28:36:b0:54:06:88:cf:98:
         91:65:68:bc:d1:f6:bc:cd:45:0a:62:dd:39:ca:6f:d6:f1:71:
         76:1b:60:39:5d:1a:fb:39:28:fd:5c:9b:22:71:d9:98:fd:75:
         dc:c5:67:de:fe:86:3c:9e:ea:7f:1e:b3:64:b4:69:81:3a:93:
         78:5c:c5:1b:8e:a0:eb:31:ea:a6:45:5a:26:3e:17:7e:35:d6:
         e2:74:50:2f:7c:09:f7:af:e3:42:2a:6c:f9:f4:b6:ca:38:8f:
         0e:6b:e5:89:1b:8b:c2:e1:73:69:19:d2:df:a5:8a:9e:4d:ce:
         4c:72:bc:a9:18:86:e9:fd:8e:92:b2:d8:74:37:a9:39:55:2a:
         28:a8:5c:34:76:46:33:51:48:94:b0:47:f9:76:d5:94:69:1d:
         be:c2:14:82:3f:49:c1:fa:cf:68:46:56:8b:39:4f:af:c2:d0:
         7c:a4:6e:ba:12:e9:bf:5a:76:c2:6d:f6:46:21:ba:58:98:7b:
         5a:d4:4e:2b:41:08:d1:68:04:65:55:bb:78:b3:58:75:c3:c7:
         56:6c:84:bf:2b:0b:71:51:48:25:e4:6a:de:48:68:ee:64:77:
         62:fe:6f:0b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----