Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D40001E9BA711F1A9B945B0CE1D38B0.roa
File:                     9D40001E9BA711F1A9B945B0CE1D38B0.roa (raw, json)
Hash identifier:          8hiwNjCGi6KmeVK1naBVtFTZmc9uhdMIli6XSp+Oz0g=
Subject key identifier:   1C:10:1C:BC:26:4E:FC:45:73:4F:E6:72:DA:1A:6B:6B:13:8E:36:0E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE43
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D40001E9BA711F1A9B945B0CE1D38B0.roa
Signing time:             Wed 19 Aug 2026 08:26:03 +0000
ROA not before:           Wed 19 Aug 2026 08:25:59 +0000
ROA not after:            Thu 19 Nov 2026 08:25:59 +0000
asID:                     154321
IP address blocks:        156.224.18.0/23 maxlen: 24
                          156.224.18.0/24 maxlen: 24
                          156.224.19.0/24 maxlen: 24
                          156.224.28.0/23 maxlen: 24
                          156.224.28.0/24 maxlen: 24
                          156.224.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118339 (0x1ce43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 19 08:25:59 2026 GMT
            Not After : Nov 19 08:25:59 2026 GMT
        Subject: CN=6a85689b-7f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3b:07:56:5e:ef:64:08:e5:fa:e0:4c:3f:12:
                    c3:2d:74:78:af:9d:86:f6:9f:23:f7:41:46:61:1e:
                    a5:fa:93:45:15:a4:82:af:f5:60:e2:50:0c:52:6a:
                    fb:64:e1:cc:3c:fa:e8:35:17:01:22:55:3b:3a:47:
                    5d:9b:26:54:9a:f6:ef:df:83:9a:01:99:cc:20:a9:
                    70:a2:d3:da:35:0d:f4:cd:9f:4a:af:ab:5c:3b:f9:
                    63:fa:13:84:eb:4a:3a:26:a9:cd:d0:f7:a8:14:2b:
                    61:14:e1:85:cd:df:17:b4:dc:8c:80:c5:41:2d:a6:
                    cd:95:07:9d:c3:85:cf:8b:4b:94:1f:c3:e4:a2:e7:
                    9a:fc:e7:18:24:39:f3:da:69:0c:30:4d:3e:f4:55:
                    d9:cf:8b:5d:ea:73:f7:d9:35:2b:78:2b:f9:b5:28:
                    fa:cd:34:f9:89:ed:3b:02:cc:62:34:0e:5e:d8:5e:
                    3f:16:c9:1c:e5:86:c4:03:02:cd:49:a5:78:43:6c:
                    ca:38:36:17:ef:9e:8f:90:07:df:59:d0:16:77:cd:
                    ab:9a:52:c7:bf:79:78:82:40:f9:34:dc:f4:a0:22:
                    b6:f4:04:18:42:ee:82:c8:dc:f2:dc:c1:26:d5:fe:
                    44:d4:41:03:35:db:f1:9f:b3:0d:e3:8a:bc:14:52:
                    b3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:10:1C:BC:26:4E:FC:45:73:4F:E6:72:DA:1A:6B:6B:13:8E:36:0E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D40001E9BA711F1A9B945B0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.224.18.0/23
                  156.224.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:37:58:a6:08:36:3a:6a:f5:6f:91:c1:68:e1:07:a6:50:72:
         29:87:79:9c:26:f6:17:6b:33:e3:86:9f:68:dc:65:b8:26:3d:
         5d:e2:0d:f4:7c:f3:2f:6d:66:c9:c6:f0:bd:df:5d:fe:e3:02:
         6e:d1:4f:ed:e0:be:45:4c:95:4e:6a:57:e7:72:e5:ec:c7:7c:
         01:93:e4:dc:04:f8:e3:0d:3f:17:a2:49:ac:df:5c:5f:84:03:
         e2:e4:07:66:a2:a7:5e:ce:73:5d:14:0b:9c:df:44:68:7e:82:
         af:07:e3:91:26:eb:fc:90:ce:46:57:54:4f:b3:49:a0:3d:cc:
         60:59:13:6d:11:36:bc:17:5a:8f:fa:32:71:04:66:db:c2:d8:
         a3:77:76:9a:5f:8d:da:b2:1f:ba:9d:20:44:9d:18:e1:05:a4:
         5c:31:ac:d6:eb:5b:4b:3a:9b:a5:77:5b:ff:cf:c4:35:05:2c:
         f6:4f:eb:3c:18:b8:18:8f:24:07:32:dc:17:f9:3f:db:eb:0f:
         29:2d:14:95:39:f6:3a:71:cf:42:e7:d0:57:e7:54:bd:c5:32:
         a1:37:80:2f:92:8f:4f:1e:ec:13:9b:f9:72:4e:12:f3:cf:b0:
         9f:d0:e4:69:86:2e:c6:50:9b:4b:f5:82:15:23:72:85:72:ea:
         b8:ad:d7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----