Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5571332BEF711F1BAE55DE9CE1D38B0.roa
File:                     A5571332BEF711F1BAE55DE9CE1D38B0.roa (raw, json)
Hash identifier:          a/JQtMCvWnOyxPQ9W12xf5PWPVeteYS1440ncxyxWGI=
Subject key identifier:   B5:B3:13:8C:22:0F:41:D2:8D:A4:26:7F:5D:EE:5D:B8:4A:9F:B4:20
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA33
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5571332BEF711F1BAE55DE9CE1D38B0.roa
Signing time:             Sat 03 Oct 2026 06:57:07 +0000
ROA not before:           Sat 03 Oct 2026 06:57:03 +0000
ROA not after:            Tue 10 Nov 2026 06:57:03 +0000
asID:                     138915
IP address blocks:        156.244.23.0/24 maxlen: 24
                          156.244.24.0/24 maxlen: 24
                          156.244.36.0/24 maxlen: 24
                          156.244.43.0/24 maxlen: 24
                          156.244.44.0/24 maxlen: 24
                          156.244.45.0/24 maxlen: 24
                          156.244.46.0/24 maxlen: 24
                          156.244.47.0/24 maxlen: 24
                          156.244.48.0/24 maxlen: 24
                          156.244.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121395 (0x1da33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  3 06:57:03 2026 GMT
            Not After : Nov 10 06:57:03 2026 GMT
        Subject: CN=6ac0a743-d230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:25:28:d6:77:45:e3:aa:9f:ce:80:c4:ca:c1:
                    24:33:da:1f:55:73:29:a5:db:9f:f9:d7:85:3e:a5:
                    3b:85:0f:f2:06:01:7f:b2:e4:b3:90:fd:9e:9a:7f:
                    3b:f1:7d:99:69:20:2f:1a:ed:67:f1:ac:58:71:42:
                    47:79:da:b0:0d:aa:40:e1:af:d9:a4:ff:88:93:33:
                    a1:7d:ed:b2:a2:20:cd:53:a3:51:8f:9b:82:0d:74:
                    fa:ff:fa:39:40:33:ff:59:a5:54:ce:c7:87:2c:1e:
                    7e:78:34:39:b6:54:e5:b8:c6:3d:f1:c9:f6:05:44:
                    f5:b1:02:df:d4:31:4c:9a:22:10:7b:ba:c6:76:2f:
                    87:81:c0:05:b7:e0:f8:2d:c3:e5:f3:e9:55:8e:25:
                    82:8a:8e:03:ec:f0:09:7b:00:73:bf:0f:91:ab:bb:
                    98:c1:58:51:06:a3:e5:b1:94:a7:76:7e:74:52:22:
                    08:59:59:53:86:e6:7a:3f:2b:44:34:9a:81:a4:fb:
                    a6:64:8d:58:73:e6:ee:21:2c:ab:12:e5:e3:c2:bd:
                    8c:99:da:09:f9:2f:de:91:55:6a:98:9e:4b:ac:23:
                    51:5e:8d:66:67:58:56:23:cd:86:22:b3:a6:df:38:
                    9c:fd:d1:7f:99:fc:2e:59:f9:de:06:d8:b1:41:3d:
                    1d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B3:13:8C:22:0F:41:D2:8D:A4:26:7F:5D:EE:5D:B8:4A:9F:B4:20
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A5571332BEF711F1BAE55DE9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.23.0-156.244.24.255
                  156.244.36.0/24
                  156.244.43.0-156.244.48.255
                  156.244.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:3e:f7:47:be:60:1c:3a:05:24:2a:e2:bf:f5:f4:02:5a:3e:
         bd:33:56:22:3d:f7:4b:20:9e:e6:7d:1d:73:36:db:35:53:68:
         56:f3:e3:78:39:9c:d0:df:6b:bc:da:50:76:4c:c6:bc:74:9b:
         8f:3b:47:fc:2b:3e:e3:d4:32:97:2a:e2:62:41:6f:c0:6c:9e:
         c2:bd:73:b0:f2:49:19:ee:53:88:84:4f:96:ea:df:44:b7:f8:
         a3:f4:72:c4:27:1a:42:cb:78:4d:2a:c7:4c:83:4e:b5:71:30:
         3a:b3:5c:60:c1:ca:4a:bb:a0:e6:4e:ba:57:b2:88:90:0e:4d:
         69:58:79:5c:99:6f:7f:44:0f:c4:b3:6a:36:e6:50:14:07:5e:
         a4:31:cf:4e:ba:c0:f4:55:4e:64:ae:70:6a:ae:91:55:12:06:
         cb:f8:ba:7d:73:28:67:a3:38:5e:26:ee:7b:ce:83:ad:a2:53:
         14:91:64:5d:d1:82:16:c5:2b:38:fc:51:17:20:3e:46:ad:8c:
         70:91:88:f9:94:62:fb:19:ff:f6:b9:8b:20:64:ba:f6:85:c1:
         c0:f3:99:b4:5f:f5:a1:26:f8:07:b6:52:4a:1a:03:04:0c:b5:
         d4:13:34:bb:27:6f:50:04:15:27:f4:bc:f7:19:1a:75:f0:3f:
         8d:c1:a1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----