Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7AED4B69B9D11F1B8F70DF5CE1D38B0.roa
File:                     B7AED4B69B9D11F1B8F70DF5CE1D38B0.roa (raw, json)
Hash identifier:          NI7VD5StJbevbqhphnKpyq0g1ACxKNdEjId89DWDbNg=
Subject key identifier:   52:96:1D:52:10:1F:F0:59:5C:2B:E7:9D:22:B7:B0:39:D8:29:62:F9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE1C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7AED4B69B9D11F1B8F70DF5CE1D38B0.roa
Signing time:             Wed 19 Aug 2026 07:15:12 +0000
ROA not before:           Wed 19 Aug 2026 07:15:08 +0000
ROA not after:            Sun 08 Nov 2026 07:15:08 +0000
asID:                     149014
IP address blocks:        156.236.96.0/22 maxlen: 24
                          156.236.108.0/22 maxlen: 24
                          156.236.112.0/22 maxlen: 24
                          156.236.116.0/22 maxlen: 24
                          156.236.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118300 (0x1ce1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 19 07:15:08 2026 GMT
            Not After : Nov  8 07:15:08 2026 GMT
        Subject: CN=6a855800-4c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:c4:52:79:85:21:40:9b:2c:af:eb:2c:f6:
                    81:1d:60:82:bb:4a:78:41:0d:55:38:a1:66:99:66:
                    f9:c9:da:db:94:23:40:8c:49:1a:74:23:87:a1:74:
                    51:b7:72:17:de:5f:87:2e:b1:60:d3:f4:67:25:fb:
                    da:f2:d1:c8:1c:ec:2f:1b:de:16:9c:93:9f:9a:02:
                    0d:52:7f:bd:10:09:25:ad:6a:f4:3c:32:51:b6:98:
                    3a:39:73:7d:fd:16:b9:40:8b:d8:6d:ff:26:cd:bd:
                    39:7b:b3:00:f3:d5:a4:f9:8d:c7:d2:dd:47:a5:af:
                    f6:c0:8e:54:1d:40:ef:28:69:fb:59:68:58:60:71:
                    2a:89:10:d1:66:eb:3f:66:89:30:ff:9b:7d:a0:5e:
                    bf:da:85:fb:ad:e5:3f:29:20:75:b1:b5:2a:77:b5:
                    12:8a:8b:79:a0:9f:d6:33:36:6f:67:ae:94:86:1d:
                    f8:4d:d0:e9:9f:35:8a:4a:e9:3b:e8:1f:f0:2f:a5:
                    ca:41:57:c9:cd:a7:c7:cc:a3:5b:dc:0d:10:94:10:
                    fb:ae:cb:0b:52:20:25:83:ee:21:e2:0d:7a:db:62:
                    28:8d:23:bc:eb:c4:65:b6:78:13:a3:6d:a1:37:4a:
                    14:bf:79:66:ca:c5:d5:88:1a:1e:0e:86:32:8d:6d:
                    9d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:96:1D:52:10:1F:F0:59:5C:2B:E7:9D:22:B7:B0:39:D8:29:62:F9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7AED4B69B9D11F1B8F70DF5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.96.0/22
                  156.236.108.0-156.236.119.255
                  156.236.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:c1:00:c0:d1:8f:19:4d:48:2d:12:d5:2d:19:90:de:9a:1b:
         62:34:16:a6:38:c5:a6:eb:c7:ae:80:b9:da:6e:58:9c:6d:ac:
         98:97:21:d5:0c:a4:c2:cf:ef:df:75:50:33:f6:fd:32:2b:70:
         ff:a8:98:30:d7:15:e1:b8:44:2d:27:bf:44:46:69:38:49:e2:
         02:3e:b6:aa:df:16:74:f8:eb:df:ad:60:60:57:6d:fb:00:36:
         93:35:1f:82:30:bf:c6:7c:1d:0e:cc:92:11:ad:09:b8:a0:e1:
         aa:7a:ce:34:40:86:de:00:d6:22:c6:e9:97:a2:29:a7:5a:67:
         16:f4:22:c6:d6:d4:80:b2:8b:d8:7d:a1:31:da:28:40:4a:2d:
         cf:6e:11:96:d4:da:f0:10:7e:58:96:9c:5a:b1:b5:66:76:e7:
         02:c0:f4:d4:52:96:47:e5:6a:0d:af:5f:c5:fc:40:eb:2a:26:
         86:59:a0:29:29:d9:06:f8:a2:e4:7b:a8:5f:24:c6:6f:61:79:
         0d:16:4a:de:3d:03:5e:3b:9b:70:2f:ba:c2:c5:a5:dc:89:ed:
         11:62:87:4e:3b:63:5a:b7:79:d3:82:45:cc:de:34:12:cd:ba:
         f0:78:6a:22:9c:ae:51:e2:46:64:60:b7:a8:08:22:4b:21:2d:
         1a:0d:71:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----