Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B79F11D4C57311F184D78BC9CE1D38B0.roa
File:                     B79F11D4C57311F184D78BC9CE1D38B0.roa (raw, json)
Hash identifier:          3d5NSnkfrJ0dwFcM/62h/L9mBaRWVpXsLFsUlScysi0=
Subject key identifier:   67:5C:71:34:E2:71:D9:95:3B:FA:2B:6D:12:B7:03:FD:8F:05:36:A7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DCC3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B79F11D4C57311F184D78BC9CE1D38B0.roa
Signing time:             Sun 11 Oct 2026 13:00:22 +0000
ROA not before:           Sun 11 Oct 2026 13:00:16 +0000
ROA not after:            Wed 18 Nov 2026 13:00:16 +0000
asID:                     22773
IP address blocks:        156.241.41.0/24 maxlen: 24
                          156.242.2.0/23 maxlen: 24
                          156.248.104.0/21 maxlen: 24
                          156.249.0.0/24 maxlen: 24
                          156.249.4.0/22 maxlen: 24
                          156.249.16.0/24 maxlen: 24
                          156.249.20.0/22 maxlen: 24
                          156.249.48.0/21 maxlen: 24
                          156.249.121.0/24 maxlen: 24
                          156.249.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122051 (0x1dcc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 11 13:00:16 2026 GMT
            Not After : Nov 18 13:00:16 2026 GMT
        Subject: CN=6acb8866-2a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:09:01:e8:9c:33:d1:e4:db:c4:91:da:d2:b1:
                    29:40:80:fd:f2:99:1e:d1:11:1c:78:60:3e:6e:0f:
                    22:e8:a7:09:20:ea:c4:e0:45:57:a8:2a:66:25:ae:
                    95:2d:90:b8:e9:db:e1:b0:b2:33:b5:61:0e:a2:65:
                    65:fe:02:35:78:ac:36:da:3f:bf:a4:e4:bf:c1:4c:
                    bb:d5:5f:f6:e6:ed:47:a0:cf:be:ba:45:93:13:05:
                    3f:e2:93:af:a6:f0:cf:33:12:75:57:33:dc:6a:eb:
                    9e:62:20:75:0e:23:66:39:e3:d4:59:81:d0:41:57:
                    67:e5:57:d2:33:8d:78:2c:1a:b4:2d:9b:5b:10:09:
                    47:11:e5:23:09:d5:e7:03:8a:9d:83:43:5c:5e:d1:
                    d7:69:61:9b:e0:5a:5c:3f:f5:98:2a:78:b1:21:9a:
                    7c:36:4a:2b:67:fe:1c:cc:fb:8d:c9:91:04:af:58:
                    9f:e2:8d:18:1b:d1:d3:a2:7f:83:70:21:05:04:60:
                    39:91:0b:89:88:12:23:f4:b5:d5:f8:d7:35:15:2e:
                    54:2b:f7:b3:85:f1:96:4c:7c:99:11:8c:47:64:37:
                    1f:0c:9d:15:1a:d1:13:c5:bd:7f:54:9b:7b:32:bb:
                    30:93:cd:da:03:88:6c:d9:52:1a:a8:79:a7:6e:ac:
                    28:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:5C:71:34:E2:71:D9:95:3B:FA:2B:6D:12:B7:03:FD:8F:05:36:A7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B79F11D4C57311F184D78BC9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.241.41.0/24
                  156.242.2.0/23
                  156.248.104.0/21
                  156.249.0.0/24
                  156.249.4.0/22
                  156.249.16.0/24
                  156.249.20.0/22
                  156.249.48.0/21
                  156.249.121.0-156.249.123.255

    Signature Algorithm: sha256WithRSAEncryption
         06:ee:51:41:78:c2:9d:f5:fb:23:2e:2e:bb:32:87:61:54:50:
         98:aa:6a:8d:5d:60:ff:b7:52:b3:5a:96:1f:47:83:24:14:2e:
         d5:4b:04:96:62:3e:d5:ad:75:ab:82:26:d8:33:d7:dd:3a:dd:
         ed:a4:71:89:3e:a6:58:eb:5d:df:62:2f:f4:0a:2e:d5:75:e7:
         04:6b:70:ce:37:a4:30:55:87:1c:77:80:8e:74:7e:c1:18:bf:
         c0:32:df:f9:07:b5:d7:d4:9f:bc:9d:3f:5e:8d:aa:54:ca:c5:
         9f:c9:ce:9e:d9:9c:4d:16:f0:be:98:98:b4:f1:e6:3a:9b:6a:
         6a:f1:8f:c4:1c:5c:b4:c4:fb:25:2d:d4:4e:1d:fa:c0:0e:1a:
         b7:ea:21:8f:2f:fc:b4:06:19:fe:ba:60:4b:45:48:1e:19:91:
         ba:9e:81:6d:9a:59:41:d3:c6:f0:b0:c9:61:bc:26:4e:12:5b:
         ab:9f:7f:99:d1:15:f7:08:68:72:f1:de:5d:b9:bb:95:ac:c5:
         69:49:e8:c1:8f:6c:e7:30:df:e3:14:a9:61:7b:56:fb:e4:03:
         23:2a:b0:29:fe:29:e8:6c:94:83:02:0a:c5:20:67:c9:07:a4:
         b2:f7:76:fc:16:76:77:a5:37:fd:ad:73:24:3f:a0:5f:a6:b5:
         90:50:7e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----