Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9A2CD36C6E911F197DC4AD5CE1D38B0.roa
File:                     C9A2CD36C6E911F197DC4AD5CE1D38B0.roa (raw, json)
Hash identifier:          5rjQI4tncRBRrEbOQOGFqnqtl74nJ9r/WkQ0++YSGho=
Subject key identifier:   88:1A:8F:84:74:FA:4D:6E:F1:E8:AD:E1:A1:FB:A0:FE:D0:FE:4D:8E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DD25
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9A2CD36C6E911F197DC4AD5CE1D38B0.roa
Signing time:             Tue 13 Oct 2026 09:38:04 +0000
ROA not before:           Tue 13 Oct 2026 09:37:59 +0000
ROA not after:            Thu 19 Nov 2026 09:37:59 +0000
asID:                     152726
IP address blocks:        156.249.132.0/24 maxlen: 24
                          156.249.135.0/24 maxlen: 24
                          156.249.136.0/24 maxlen: 24
                          156.249.139.0/24 maxlen: 24
                          156.249.145.0/24 maxlen: 24
                          156.249.171.0/24 maxlen: 24
                          156.249.176.0/24 maxlen: 24
                          156.249.178.0/24 maxlen: 24
                          156.249.184.0/24 maxlen: 24
                          156.249.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122149 (0x1dd25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 13 09:37:59 2026 GMT
            Not After : Nov 19 09:37:59 2026 GMT
        Subject: CN=6acdfbfc-1d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3e:ea:40:b3:2a:9f:b9:b4:8d:d4:9c:08:93:
                    73:08:43:90:63:3b:a3:1b:d1:c2:88:83:d3:ca:5e:
                    8a:f3:16:ef:13:e9:8b:d4:c1:7f:26:89:5f:6d:5e:
                    c2:62:71:e8:cc:82:6e:fd:72:a6:ca:e1:e7:f2:e6:
                    e7:98:35:51:76:92:fe:38:4f:39:6a:52:94:ac:2f:
                    f8:8e:ed:15:e1:bb:a3:9b:13:8a:44:20:84:bc:60:
                    94:fb:12:44:a9:e9:4f:77:48:55:e6:3d:35:13:f0:
                    d7:06:fc:c9:f7:bd:3d:62:50:8b:d3:8a:3d:ae:be:
                    3e:c5:84:3a:2b:b3:67:58:85:dc:32:9c:25:8c:b0:
                    34:a9:f8:96:d1:af:4c:4a:ca:ec:a3:63:ef:0d:12:
                    97:bc:02:7c:d7:44:56:11:8f:ef:14:02:9a:e0:a2:
                    8b:ae:1a:2b:6a:ce:aa:31:9c:b2:d3:c4:85:48:15:
                    5b:13:b4:4e:b7:7e:1b:0e:81:21:c4:67:94:dc:f5:
                    5d:27:57:b3:93:52:6d:57:39:a6:6b:d9:d5:85:67:
                    13:83:7e:06:a5:30:ff:0e:6e:c7:75:16:51:e0:c1:
                    f7:51:73:ae:f6:0b:37:01:13:41:b0:e6:b1:23:86:
                    c7:af:31:f0:14:15:07:7b:1b:30:5e:07:2e:a2:c3:
                    28:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1A:8F:84:74:FA:4D:6E:F1:E8:AD:E1:A1:FB:A0:FE:D0:FE:4D:8E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9A2CD36C6E911F197DC4AD5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.249.132.0/24
                  156.249.135.0-156.249.136.255
                  156.249.139.0/24
                  156.249.145.0/24
                  156.249.171.0/24
                  156.249.176.0/24
                  156.249.178.0/24
                  156.249.184.0/24
                  156.249.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:7e:d3:d8:dc:3e:6d:13:79:d1:1d:b6:af:82:59:18:b8:4d:
         37:c1:5a:47:23:66:92:89:a9:6a:e5:c4:dc:e5:84:c8:f8:ee:
         29:16:78:a0:e4:1b:73:ae:55:52:dc:bb:7d:18:75:f8:2b:ce:
         e8:34:fc:22:96:ba:62:41:ad:a6:ba:75:2e:73:22:0b:c0:e2:
         3e:1a:8d:b4:0d:c1:f6:69:4f:17:58:ef:e3:a0:e4:24:1e:fe:
         bf:3f:dd:a0:28:c5:58:b0:aa:fc:33:f3:91:8d:3a:a2:4f:d4:
         dd:5d:83:d1:2a:d6:fc:89:ad:f6:3a:09:12:96:7a:db:27:39:
         f4:3a:0a:32:b4:ff:51:97:f8:62:2e:39:91:bc:f9:cf:cd:ca:
         be:71:6e:a9:f8:52:52:24:ce:a7:c9:8d:ce:b0:5a:39:d4:54:
         ca:54:57:1f:2f:f4:27:7d:17:a3:e1:46:4e:dc:bd:9a:27:f0:
         8c:af:01:1f:f8:72:10:ef:78:d6:36:da:38:f7:1f:c9:3f:82:
         4f:b2:55:16:0b:99:93:64:c1:51:2b:94:9a:5a:31:12:82:2f:
         7f:32:d0:d1:1c:f1:6b:24:01:f9:00:ca:a0:d2:13:33:81:4e:
         f9:b5:fb:1d:08:fe:03:17:52:83:b4:41:06:78:85:c0:ab:f8:
         d2:7e:30:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----