Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E34D687296EC11F1A423CC02CF1D38B0.roa
File:                     E34D687296EC11F1A423CC02CF1D38B0.roa (raw, json)
Hash identifier:          KU6ZGdjy4u2jzmi/ZS7OE9KLO+isXZDfCj+vgljtODM=
Subject key identifier:   83:02:77:FE:24:05:95:3F:A4:FE:6D:A6:85:E5:01:0E:C6:66:E6:E2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC61
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E34D687296EC11F1A423CC02CF1D38B0.roa
Signing time:             Thu 13 Aug 2026 07:59:20 +0000
ROA not before:           Thu 13 Aug 2026 07:59:16 +0000
ROA not after:            Thu 17 Sep 2026 07:59:16 +0000
asID:                     153671
IP address blocks:        156.231.70.0/23 maxlen: 24
                          156.231.88.0/22 maxlen: 24
                          156.231.92.0/22 maxlen: 24
                          156.238.12.0/23 maxlen: 24
                          156.238.28.0/22 maxlen: 24
                          156.238.60.0/22 maxlen: 24
                          156.242.64.0/23 maxlen: 24
                          156.242.100.0/22 maxlen: 24
                          156.242.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117857 (0x1cc61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 13 07:59:16 2026 GMT
            Not After : Sep 17 07:59:16 2026 GMT
        Subject: CN=6a7d7958-6214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:9f:57:8e:23:fd:3a:4c:a5:a6:a3:aa:cf:
                    45:78:20:c7:e1:eb:ec:f8:71:c7:eb:0a:39:01:0c:
                    1e:28:17:f8:44:99:0b:d6:c6:83:24:6a:f8:42:78:
                    b7:b7:11:16:4e:12:ba:f2:da:76:0f:8e:95:8e:18:
                    2c:b9:2b:ba:b1:0a:f1:bc:7f:27:57:b3:7c:2f:ae:
                    9b:75:4e:91:91:7e:63:21:67:81:8d:28:ea:b7:e4:
                    73:0b:5a:27:1c:cb:78:2e:b7:ea:51:65:cc:2d:38:
                    6d:f4:c5:5f:2a:64:b2:9f:0e:07:46:93:96:38:bb:
                    51:bb:6e:f0:37:48:af:d8:e8:c0:87:78:dc:ad:71:
                    9a:a3:84:ab:a2:90:4b:b7:ce:8a:b4:f5:a7:c0:73:
                    d7:c8:d7:ec:05:a6:f7:4f:31:0d:db:01:b6:27:d4:
                    7a:9e:6b:b2:57:73:82:6d:10:96:8c:90:e3:f0:c7:
                    bc:3e:e8:90:5b:62:44:a6:c3:6b:05:6a:48:41:56:
                    23:90:d7:23:bc:01:6a:d2:c1:cd:c6:6a:11:10:a6:
                    7a:b4:a1:a8:cc:9d:85:7d:10:78:49:47:f8:31:4b:
                    24:b5:21:fe:95:48:6a:02:b8:a1:01:38:81:f7:d1:
                    be:1a:33:d5:96:0b:5a:c3:7b:76:50:87:06:11:0b:
                    36:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:02:77:FE:24:05:95:3F:A4:FE:6D:A6:85:E5:01:0E:C6:66:E6:E2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E34D687296EC11F1A423CC02CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.70.0/23
                  156.231.88.0/21
                  156.238.12.0/23
                  156.238.28.0/22
                  156.238.60.0/22
                  156.242.64.0/23
                  156.242.100.0-156.242.107.255

    Signature Algorithm: sha256WithRSAEncryption
         2c:43:49:29:cd:8c:22:b6:07:54:0c:24:b7:0d:cf:bb:c5:6a:
         45:80:b0:3c:fc:56:1c:60:ec:2c:46:da:e2:06:49:4a:f2:ab:
         0a:d2:f0:d5:e4:c8:14:77:0d:dc:6a:9e:8a:5b:31:12:12:59:
         03:13:48:35:35:67:4e:3a:2e:de:c4:00:d7:8e:f7:cd:f8:6e:
         a4:8b:95:da:dd:a0:5e:b2:41:27:53:21:be:e1:08:2d:1e:7c:
         23:a4:45:75:c6:64:bd:7e:c9:c5:70:a8:5f:2a:57:70:67:9c:
         85:35:ae:eb:19:af:10:62:e3:14:a6:2c:b7:95:be:a0:d4:4b:
         54:98:3a:37:19:aa:50:f2:c8:64:f5:14:52:20:a2:fd:aa:14:
         4a:10:ea:58:30:7c:00:d7:57:44:bd:02:34:cf:ad:c1:d8:e0:
         44:71:d1:61:88:83:c8:f2:ee:c9:75:6a:a9:d0:90:a9:00:0d:
         f7:86:90:00:64:d4:b2:2a:22:d8:6d:7d:5a:cb:3e:5b:fb:c7:
         3a:eb:f8:b3:ec:b5:5b:08:61:88:93:57:68:f0:bc:59:bb:e2:
         94:88:69:ff:e8:50:d3:22:46:b6:85:cd:ff:54:aa:24:60:0b:
         b7:0a:83:74:39:a5:18:ab:24:aa:55:44:a9:4e:59:3f:31:df:
         d2:77:c7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----