Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E349B388A83211F1A6114BEDCE1D38B0.roa
File:                     E349B388A83211F1A6114BEDCE1D38B0.roa (raw, json)
Hash identifier:          wa4hoseW/UO+qrkReTPzydzd9enYTBZRNAhQJ1HkKoM=
Subject key identifier:   0F:87:30:AF:2D:4D:20:B7:6E:A5:A7:7A:78:35:EB:FF:EB:FF:B6:EB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D333
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E349B388A83211F1A6114BEDCE1D38B0.roa
Signing time:             Fri 04 Sep 2026 07:33:14 +0000
ROA not before:           Fri 04 Sep 2026 07:33:10 +0000
ROA not after:            Sat 03 Oct 2026 07:33:10 +0000
asID:                     11427
IP address blocks:        156.229.184.0/21 maxlen: 24
                          156.233.16.0/21 maxlen: 24
                          156.233.152.0/21 maxlen: 24
                          156.241.8.0/21 maxlen: 24
                          156.241.32.0/21 maxlen: 24
                          156.242.112.0/21 maxlen: 24
                          156.243.40.0/21 maxlen: 24
                          156.243.88.0/21 maxlen: 24
                          156.243.120.0/21 maxlen: 24
                          156.243.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119603 (0x1d333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  4 07:33:10 2026 GMT
            Not After : Oct  3 07:33:10 2026 GMT
        Subject: CN=6a9a743a-ce45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:76:04:9e:eb:09:57:79:06:f5:c2:83:9d:b2:
                    eb:10:cc:b3:23:f5:74:5e:39:ab:bb:19:84:a4:ef:
                    a0:bf:3d:b8:5a:ee:14:e9:0a:3c:92:ac:c1:61:a6:
                    6f:e0:a8:a9:72:0e:4a:2a:ea:49:b5:5f:56:80:03:
                    0b:e3:44:73:ac:51:4d:35:3b:10:c2:bd:11:22:41:
                    98:90:1e:c4:87:08:6b:52:46:32:75:83:60:ed:24:
                    61:56:a9:64:b7:77:80:52:fd:5c:d6:2f:e2:05:b8:
                    01:f6:d4:39:7c:df:fe:ba:c7:2f:3e:ed:b0:dc:38:
                    74:a1:fa:2c:7c:2e:42:25:b6:8b:00:26:73:a2:20:
                    83:87:6b:eb:09:e2:e7:ce:6f:c6:97:15:93:5a:97:
                    24:1e:30:0f:96:79:5b:60:59:7b:2c:b1:f6:73:b6:
                    0b:b5:27:1f:aa:d5:06:2b:f3:7d:c8:9d:5e:04:54:
                    8d:a8:4c:46:e1:d3:35:20:fb:8a:a6:b1:52:18:53:
                    a7:9b:ae:25:e0:74:56:a4:c3:71:82:7a:74:59:82:
                    d0:d9:1a:d5:1c:74:ac:50:0c:4c:ad:72:12:0c:47:
                    18:3a:d7:7d:48:2f:67:7e:4d:7b:36:6e:e9:51:0f:
                    b9:48:54:9b:8f:62:49:05:af:d8:16:ff:13:ce:f4:
                    4d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:87:30:AF:2D:4D:20:B7:6E:A5:A7:7A:78:35:EB:FF:EB:FF:B6:EB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E349B388A83211F1A6114BEDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.184.0/21
                  156.233.16.0/21
                  156.233.152.0/21
                  156.241.8.0/21
                  156.241.32.0/21
                  156.242.112.0/21
                  156.243.40.0/21
                  156.243.88.0/21
                  156.243.120.0/21
                  156.243.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:ac:b2:e2:5c:17:8b:fa:a4:fd:f8:38:68:23:83:d8:1b:11:
         e7:1d:23:40:e7:0b:e1:3c:de:4d:86:69:4b:0a:c6:fe:c2:8b:
         7b:8f:d9:6e:d8:60:0e:46:42:81:b4:fa:34:fb:cf:38:ea:34:
         82:ef:ad:d2:2e:cf:7e:2d:9b:98:7f:00:ec:bb:44:69:dc:d1:
         ee:8d:7e:df:9d:f9:d7:40:ed:32:e2:66:dc:60:e1:8a:86:71:
         71:20:d0:a5:15:36:48:d9:07:6f:ff:37:04:9e:ad:7a:b8:fa:
         88:2f:10:46:cc:e5:60:4c:4f:9e:de:dd:21:c1:83:1c:01:ce:
         68:aa:2e:b5:6b:dd:45:76:52:65:7c:4a:e8:53:f7:67:df:94:
         bb:ae:16:26:37:8e:4d:5c:53:53:00:0c:12:f8:40:4c:44:2f:
         bb:4c:45:70:45:9a:f1:6c:27:5c:9e:b7:bf:2f:cb:78:61:d2:
         af:77:8f:25:c6:50:7f:4b:1e:0b:d0:70:8d:31:0a:e0:66:87:
         7b:da:1a:b8:83:bc:09:cc:fd:78:6a:4c:11:c7:fd:f9:54:f4:
         ad:bb:7f:e2:36:aa:0e:5f:17:1d:52:38:3f:cf:f0:90:ca:e8:
         40:b1:dc:d8:6c:e0:6e:12:54:c5:e0:94:e9:b9:66:27:50:a3:
         84:f3:3d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----