Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7FAC894A13C11F1BFB9F3C5CE1D38B0.roa
File:                     C7FAC894A13C11F1BFB9F3C5CE1D38B0.roa (raw, json)
Hash identifier:          huk/gh8VHZfy3upX0N3cCvEoH6/1khFiKaW7lOKZcvI=
Subject key identifier:   D7:12:0E:31:DA:48:A2:BF:F7:96:EC:F6:9F:36:D4:AA:97:C2:3E:D8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D13C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7FAC894A13C11F1BFB9F3C5CE1D38B0.roa
Signing time:             Wed 26 Aug 2026 10:56:25 +0000
ROA not before:           Wed 26 Aug 2026 10:56:21 +0000
ROA not after:            Sat 25 Aug 2029 10:56:21 +0000
asID:                     17561
IP address blocks:        156.237.220.0/24 maxlen: 24
                          156.237.221.0/24 maxlen: 24
                          156.237.222.0/24 maxlen: 24
                          156.237.223.0/24 maxlen: 24
                          156.237.224.0/24 maxlen: 24
                          156.237.225.0/24 maxlen: 24
                          156.237.226.0/24 maxlen: 24
                          156.237.227.0/24 maxlen: 24
                          156.237.228.0/24 maxlen: 24
                          156.237.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119100 (0x1d13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 10:56:21 2026 GMT
            Not After : Aug 25 10:56:21 2029 GMT
        Subject: CN=6a8ec659-3281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:35:a2:e3:c6:9a:52:07:68:e9:a0:13:f7:7f:
                    69:94:2f:44:6b:4f:9f:3f:81:8f:09:02:b2:9b:45:
                    b7:a9:49:c6:77:97:25:f4:5c:8e:2b:ab:98:30:8e:
                    8f:dd:38:de:42:37:04:b5:21:af:14:22:01:4c:31:
                    f2:f2:26:d6:2a:93:33:4d:1d:b3:11:43:f4:35:5c:
                    28:2b:86:4b:a4:a9:26:6e:9f:96:25:ed:4c:a9:fa:
                    b9:a2:3a:e5:c9:ad:ea:0c:68:93:4e:86:29:10:c9:
                    e6:5c:fc:e4:d8:e9:95:0f:97:34:1d:73:93:61:da:
                    75:a6:31:0b:56:30:a6:64:b5:e5:8b:9b:3f:0b:12:
                    7c:38:4b:54:bd:27:ef:dd:84:9a:a4:c9:5d:e9:5f:
                    69:d4:b6:af:52:70:0a:2b:81:ac:44:5f:cc:0f:ae:
                    c2:c6:74:c2:0f:11:a2:25:3b:0b:3d:86:78:db:79:
                    04:b6:14:e6:81:fe:67:f8:a5:5f:df:cf:8b:56:9f:
                    2a:2e:e3:69:ff:4c:5c:67:c6:30:74:ff:d8:6e:f6:
                    81:7c:73:b3:7f:d6:81:d3:c1:72:6f:36:f1:07:04:
                    86:11:68:7d:15:1f:85:c8:15:dc:29:a2:2e:47:f4:
                    25:eb:97:25:2c:c5:48:e4:8f:73:d8:59:94:7d:6e:
                    f4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:12:0E:31:DA:48:A2:BF:F7:96:EC:F6:9F:36:D4:AA:97:C2:3E:D8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7FAC894A13C11F1BFB9F3C5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.237.220.0-156.237.229.255

    Signature Algorithm: sha256WithRSAEncryption
         41:97:1f:45:4a:ee:a8:1d:63:16:80:11:bf:9f:72:b3:dc:15:
         b8:df:eb:f4:44:e9:c9:00:c0:c9:4b:80:0c:35:f7:6b:fe:15:
         e2:68:24:44:d7:0c:da:b9:19:6f:35:5e:eb:4f:65:58:b8:c8:
         65:56:76:6e:b4:26:03:80:25:31:e8:a8:c5:55:c3:97:b8:39:
         8a:c6:e5:4d:25:b1:e4:31:0b:9f:6b:67:db:1a:e0:64:23:b1:
         b0:68:c9:2f:46:57:a3:8f:d8:9c:0d:35:00:58:bb:4b:99:9a:
         1c:e9:a8:98:7d:ce:0b:da:ae:32:c0:3e:4b:75:77:7b:d1:97:
         b3:4f:8f:0c:40:8a:b8:3c:6b:27:ea:0e:1e:51:71:f9:39:fd:
         5a:1c:9c:60:01:24:da:2a:00:9d:cc:9b:20:3b:71:d4:e6:28:
         b2:40:c7:02:9f:ba:69:8c:eb:e9:46:35:30:c7:08:93:71:6a:
         d5:1f:bf:51:b4:46:37:91:d1:ac:2c:37:90:aa:a1:a3:85:25:
         67:79:41:f6:67:6f:de:02:0b:da:39:0d:50:f2:38:74:54:00:
         f0:7e:e0:4a:de:45:71:03:2e:d9:9f:cd:e8:2a:ea:07:21:f5:
         be:e5:b9:5b:9a:c1:02:9d:92:40:3c:a8:99:4f:1e:0b:64:6a:
         18:98:8d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----