Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDE898ACC47911F1AD0537F2CE1D38B0.roa
File:                     CDE898ACC47911F1AD0537F2CE1D38B0.roa (raw, json)
Hash identifier:          loy8qHE1BofqiYhA6+OK6H5OkMI45gW92OIh+uBp0dw=
Subject key identifier:   AF:77:2A:06:D0:54:2C:98:D0:2F:DA:9E:54:21:13:D2:B9:86:13:0D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC4A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDE898ACC47911F1AD0537F2CE1D38B0.roa
Signing time:             Sat 10 Oct 2026 07:11:25 +0000
ROA not before:           Sat 10 Oct 2026 07:11:21 +0000
ROA not after:            Tue 10 Nov 2026 07:11:21 +0000
asID:                     213169
IP address blocks:        156.229.160.0/21 maxlen: 24
                          156.229.160.0/22 maxlen: 24
                          156.231.112.0/22 maxlen: 24
                          156.231.116.0/23 maxlen: 24
                          156.243.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121930 (0x1dc4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 10 07:11:21 2026 GMT
            Not After : Nov 10 07:11:21 2026 GMT
        Subject: CN=6ac9e51d-c4a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:33:08:00:c1:2f:98:96:91:ba:e1:85:d1:cb:
                    52:f8:52:f5:94:b5:92:d3:c5:af:5d:70:e2:1b:69:
                    3f:03:24:3e:be:e3:99:ad:8d:39:29:24:03:7b:87:
                    83:42:17:5d:96:e9:7b:8a:f7:8b:8b:cf:b0:4b:31:
                    28:26:08:67:c9:24:bd:3a:43:43:a3:89:55:fc:28:
                    1b:79:ee:76:dc:58:b6:8f:c6:75:6d:ae:58:91:cd:
                    c0:be:eb:fa:13:22:06:e4:5a:22:af:e7:85:c7:1b:
                    b4:ef:0d:c2:94:f0:11:35:18:81:a7:d6:e5:8e:40:
                    c6:1a:54:26:19:e5:47:f8:1e:0a:b9:22:25:6a:ec:
                    77:c5:48:8c:21:90:61:11:00:3e:b7:ce:67:d6:8a:
                    ec:2d:21:4a:58:e7:91:35:f6:e7:29:4f:05:e2:87:
                    99:1d:99:b0:32:06:7b:7b:ff:a1:a5:5d:b4:93:ff:
                    72:f0:9b:27:bf:d7:25:4c:95:7a:df:66:d0:ba:6d:
                    35:2b:92:7f:55:80:1a:27:4a:79:b0:d1:ef:04:ef:
                    3e:52:da:45:f0:2c:83:25:04:2b:2d:a3:e3:83:9b:
                    55:ad:dd:e7:00:03:11:f3:15:c8:b3:9f:de:72:a1:
                    cc:1e:51:92:53:01:59:38:34:25:e3:7b:c9:95:6f:
                    8b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:77:2A:06:D0:54:2C:98:D0:2F:DA:9E:54:21:13:D2:B9:86:13:0D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDE898ACC47911F1AD0537F2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.160.0/21
                  156.231.112.0-156.231.117.255
                  156.243.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:4f:ac:8b:df:a2:90:85:a9:ea:2a:78:95:5e:04:0f:65:68:
         47:31:c4:89:5b:70:9c:3e:d8:c8:5d:8d:90:27:c0:12:8f:8a:
         b9:b3:00:ea:03:50:6f:70:44:d6:f5:aa:ea:8a:b5:4f:35:fc:
         73:bf:d2:ff:7e:00:cf:e3:0e:66:b1:12:a9:df:1c:67:d2:9c:
         40:5c:c4:f5:a8:e3:8e:0e:08:b5:b9:32:43:89:f4:48:8a:d0:
         09:99:a6:21:40:f9:2e:1a:ee:67:db:15:35:62:29:ec:ca:6d:
         aa:00:10:5d:79:9c:81:6f:90:39:3c:3b:15:55:a5:e3:70:40:
         d7:a0:db:9f:f0:fd:02:28:63:33:05:25:01:84:2b:ac:5b:a4:
         98:3f:49:d4:01:f0:52:b9:5d:5c:5c:9c:55:01:a3:2a:9d:74:
         bd:bb:9f:e2:ac:76:d5:60:f6:4b:37:14:d4:3f:42:df:fc:66:
         94:16:43:cf:af:5d:41:7a:9c:35:8d:b3:6d:9d:1f:b3:6f:05:
         34:af:9c:12:75:43:62:3f:ed:b4:64:e5:63:59:33:69:d5:92:
         cf:29:ea:f7:5a:47:a4:d9:63:5c:94:56:90:ee:27:ca:2f:40:
         d8:39:94:27:ac:2a:0e:fc:67:a0:64:bd:8d:47:6a:1d:aa:9e:
         48:1d:8c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----