Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0F31AAABF1611F18115ADAFCE1D38B0.roa
File:                     B0F31AAABF1611F18115ADAFCE1D38B0.roa (raw, json)
Hash identifier:          5sB78Sv/NpgHo3oEXaMkS0ooUjQ0qMjrCugC1IOmtQs=
Subject key identifier:   FC:B4:21:A3:23:20:99:9E:BF:96:9C:A1:F7:6A:01:85:B4:0C:8D:02
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0F31AAABF1611F18115ADAFCE1D38B0.roa
Signing time:             Sat 03 Oct 2026 10:39:21 +0000
ROA not before:           Sat 03 Oct 2026 10:39:17 +0000
ROA not after:            Tue 10 Nov 2026 10:39:17 +0000
asID:                     154177
IP address blocks:        156.244.13.0/24 maxlen: 24
                          156.244.14.0/24 maxlen: 24
                          156.244.15.0/24 maxlen: 24
                          156.244.23.0/24 maxlen: 24
                          156.244.24.0/24 maxlen: 24
                          156.244.44.0/24 maxlen: 24
                          156.244.45.0/24 maxlen: 24
                          156.244.46.0/24 maxlen: 24
                          156.244.47.0/24 maxlen: 24
                          156.244.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121429 (0x1da55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  3 10:39:17 2026 GMT
            Not After : Nov 10 10:39:17 2026 GMT
        Subject: CN=6ac0db59-3984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e0:41:18:f6:43:46:f8:e2:d7:1a:61:48:3a:
                    ae:b7:33:1e:06:be:f7:75:71:ed:87:69:7c:d2:34:
                    1f:d7:5d:0c:0c:e7:b2:e2:56:5c:06:8b:ff:ff:74:
                    44:89:48:6c:78:97:f4:85:0b:96:5d:2e:7b:24:50:
                    0e:54:94:e9:9b:61:45:e0:b3:f0:a2:b6:9f:b5:2a:
                    0d:d2:18:6c:b3:46:20:d1:85:d5:71:0a:84:7d:1f:
                    86:ee:85:3f:da:11:6a:9e:99:92:33:46:63:fa:b7:
                    89:31:9b:50:b9:7e:37:b0:a6:bf:da:54:e4:f9:dd:
                    d3:45:3d:2a:98:f6:b8:55:0f:f6:66:80:8b:a6:9d:
                    18:ac:e2:0e:b0:1b:20:c2:11:99:ec:e0:e9:b5:fb:
                    e4:14:04:b6:72:cf:d6:05:3e:2d:cf:bd:47:5b:8e:
                    d6:e0:bd:b2:82:12:5e:a9:95:39:d7:47:8b:20:62:
                    58:35:46:69:57:8a:57:12:66:a5:cd:b7:50:1e:21:
                    07:8b:96:4f:4b:54:40:95:cf:e5:03:3c:55:95:9d:
                    dd:bc:62:57:8c:f8:19:1c:18:5a:fc:d8:b5:59:3a:
                    19:74:96:bb:93:e0:ff:2d:14:18:50:88:2f:d5:a9:
                    a1:d5:52:14:1d:08:ef:29:82:38:7a:3d:63:5c:95:
                    4c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B4:21:A3:23:20:99:9E:BF:96:9C:A1:F7:6A:01:85:B4:0C:8D:02
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0F31AAABF1611F18115ADAFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.13.0-156.244.15.255
                  156.244.23.0-156.244.24.255
                  156.244.44.0-156.244.48.255

    Signature Algorithm: sha256WithRSAEncryption
         7e:05:73:cf:36:76:5d:cd:7f:0a:92:f7:16:d4:83:3b:f1:c3:
         7c:bf:fd:6b:05:4c:3b:48:ca:43:3b:10:b5:43:f6:a2:36:d0:
         0a:fb:ad:9e:43:c2:1c:c6:15:bb:c7:51:90:0f:01:3d:e0:2d:
         93:7d:e1:32:82:dd:b4:ca:ec:59:3c:f2:b7:79:38:d9:bb:27:
         8c:be:ed:29:d0:b1:d7:f7:0c:14:ab:c8:6d:e9:86:96:3f:51:
         45:9f:2b:98:bb:a1:e0:b5:35:b3:88:85:91:d1:22:83:3a:a0:
         2b:0b:74:6d:fe:da:ac:ab:01:ab:9d:12:4c:3a:61:76:5f:97:
         9d:e3:ea:4b:fd:ce:a7:62:fe:07:7e:29:ba:a5:30:a8:50:30:
         c6:32:5a:64:0f:2d:25:dd:84:4f:e7:49:b4:3c:7d:47:4f:cc:
         0b:e7:7d:93:b2:2c:9a:13:a0:ed:0d:cc:f3:a1:b1:46:94:ab:
         20:53:e8:fe:c7:2e:95:e2:75:d3:aa:f1:9f:62:2a:3d:a9:93:
         af:ff:46:93:5d:ce:c7:54:0d:4d:4d:e6:f2:0d:df:3e:c4:9f:
         fd:bd:28:3f:13:50:83:62:fd:40:d3:38:b5:0e:b8:6f:c1:a8:
         e1:38:dc:b7:bb:2f:4e:e1:08:6b:1e:ba:3e:ca:8c:d2:4b:5b:
         7e:f1:37:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----