Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF2842268F1C11F188C252A6CE1D38B0.roa
File:                     DF2842268F1C11F188C252A6CE1D38B0.roa (raw, json)
Hash identifier:          GTYTcGbFi01r3EmoVCpamwDhuBrT6VUjcv3hz5TLEoo=
Subject key identifier:   5A:C2:72:35:3A:A4:5D:7A:56:89:04:8D:E7:AB:42:0D:6D:95:FF:3F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C981
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF2842268F1C11F188C252A6CE1D38B0.roa
Signing time:             Mon 03 Aug 2026 09:22:39 +0000
ROA not before:           Mon 03 Aug 2026 09:22:35 +0000
ROA not after:            Thu 10 Sep 2026 09:22:35 +0000
asID:                     154177
IP address blocks:        156.244.0.0/24 maxlen: 24
                          156.244.1.0/24 maxlen: 24
                          156.244.5.0/24 maxlen: 24
                          156.244.6.0/24 maxlen: 24
                          156.244.28.0/24 maxlen: 24
                          156.244.35.0/24 maxlen: 24
                          156.244.36.0/24 maxlen: 24
                          156.244.37.0/24 maxlen: 24
                          156.244.52.0/24 maxlen: 24
                          156.244.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117121 (0x1c981)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  3 09:22:35 2026 GMT
            Not After : Sep 10 09:22:35 2026 GMT
        Subject: CN=6a705ddf-30d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e7:06:8f:01:ef:11:65:9b:c8:40:30:b6:45:
                    07:a3:c5:9c:b7:58:78:16:25:54:a6:1f:00:37:3c:
                    3d:47:6b:6f:1b:cf:13:ab:20:72:47:81:57:e0:ab:
                    85:38:e7:ab:cd:35:b4:af:0f:30:39:38:1d:5f:7d:
                    48:7b:e1:fd:62:97:e9:76:98:b6:48:19:27:c1:58:
                    1b:36:5b:b6:bf:a9:e2:67:63:9d:ce:84:96:fe:6b:
                    de:45:d2:ea:68:f4:56:d2:ed:30:64:56:c6:8e:a3:
                    9a:dc:d9:d6:12:fd:23:0a:2f:00:22:1a:03:44:aa:
                    9e:59:01:53:cd:c9:c6:71:44:4e:1b:95:c2:c0:e8:
                    86:dc:12:aa:61:1e:6f:19:66:46:4b:b1:c7:a0:a4:
                    a0:6c:58:24:5d:0e:81:14:3c:ed:7d:66:ca:0b:bd:
                    55:6b:f3:82:c4:30:d4:0c:34:86:7e:b9:2b:f3:ee:
                    b6:0d:2c:14:64:5d:b6:b6:70:22:f5:81:fd:d1:f8:
                    b7:14:4a:82:68:6f:a5:00:52:b4:18:70:3b:49:eb:
                    e1:76:2c:fb:51:e0:bd:3a:96:38:0e:37:da:06:87:
                    03:9a:f4:85:12:85:31:ee:c2:81:78:31:e8:94:25:
                    1f:00:9d:a8:5a:6d:e2:2f:ab:65:d0:db:d5:0b:8b:
                    4e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C2:72:35:3A:A4:5D:7A:56:89:04:8D:E7:AB:42:0D:6D:95:FF:3F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DF2842268F1C11F188C252A6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.0.0/23
                  156.244.5.0-156.244.6.255
                  156.244.28.0/24
                  156.244.35.0-156.244.37.255
                  156.244.52.0/24
                  156.244.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:e8:6f:83:d0:4a:05:1b:cf:aa:ef:e5:42:c6:60:f0:ff:c0:
         65:9f:ed:56:34:c9:de:9d:88:14:14:b5:dd:cd:69:3d:5c:09:
         15:8b:f6:0c:f0:50:b7:5a:40:ef:bb:c3:13:de:24:de:88:b6:
         31:2f:c4:3a:7b:37:8c:26:70:01:e6:30:39:e0:a2:94:c1:17:
         5c:25:ea:89:4c:9a:3f:f6:9f:03:77:bc:4c:46:56:06:59:de:
         53:f9:b3:ee:ab:d9:92:77:05:34:c8:98:b9:95:e0:53:d5:89:
         05:bf:e8:f4:73:64:ac:5c:ce:3d:73:aa:a8:95:6a:67:ba:8d:
         77:00:cb:4e:1f:9e:6a:b2:cf:27:d9:d8:2f:18:57:c1:78:fa:
         6e:df:b7:aa:fb:99:c2:23:4e:7c:ca:e5:02:80:1a:7c:6d:1e:
         27:12:6b:6b:1e:43:5b:d7:1d:d1:4b:0d:d1:69:cd:e0:f4:1d:
         02:19:7b:01:b8:97:97:54:60:a7:8f:d8:2c:44:d8:34:9a:bd:
         67:85:00:71:a5:b4:15:16:ec:33:fa:38:d8:82:87:2f:51:af:
         46:89:9f:5e:8e:ab:dc:f1:6d:1c:ad:5f:fb:ff:54:7d:e9:22:
         87:50:f1:44:66:24:3b:78:78:db:ec:76:05:77:1b:7e:db:d8:
         da:e9:73:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----