Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E601E49EAC2711F1B50CF4DFCE1D38B0.roa
File:                     E601E49EAC2711F1B50CF4DFCE1D38B0.roa (raw, json)
Hash identifier:          qrlxXazoPbzP3dCin6EohwuWjdv+1XSM2YIWcA2HWRU=
Subject key identifier:   C5:11:04:6C:6C:BE:9A:AF:D3:EB:6C:9C:55:8C:C6:8F:0D:9E:5D:B2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D45A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E601E49EAC2711F1B50CF4DFCE1D38B0.roa
Signing time:             Wed 09 Sep 2026 08:24:39 +0000
ROA not before:           Wed 09 Sep 2026 08:24:35 +0000
ROA not after:            Sat 19 Sep 2026 08:24:35 +0000
asID:                     134365
IP address blocks:        156.226.176.0/21 maxlen: 24
                          156.226.176.0/24 maxlen: 24
                          156.226.177.0/24 maxlen: 24
                          156.226.178.0/24 maxlen: 24
                          156.226.179.0/24 maxlen: 24
                          156.226.180.0/22 maxlen: 24
                          156.226.180.0/24 maxlen: 24
                          156.226.181.0/24 maxlen: 24
                          156.226.182.0/24 maxlen: 24
                          156.226.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119898 (0x1d45a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  9 08:24:35 2026 GMT
            Not After : Sep 19 08:24:35 2026 GMT
        Subject: CN=6aa117c7-34fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:de:8b:81:4e:f5:ae:e3:df:68:7a:5d:08:3a:
                    2a:78:3b:39:7f:72:95:4e:29:38:fb:c1:4d:de:36:
                    ba:60:2d:16:51:86:0e:fc:66:31:e5:c5:9e:16:4c:
                    a1:0b:44:9f:de:14:9a:90:ab:7f:91:f7:e7:cc:0c:
                    f0:75:d1:09:e0:f1:51:ce:75:4e:aa:a4:bd:ee:b0:
                    33:9b:8c:47:e9:f9:9d:b3:fe:f7:e9:10:fa:60:61:
                    7f:32:b3:b9:1f:ed:90:b5:e2:88:32:c5:d8:2b:fe:
                    69:84:0f:3d:2b:a3:d8:4d:dd:5c:12:ad:48:93:d4:
                    2d:0e:4d:9a:3f:87:0e:06:f0:d5:56:13:46:2f:7f:
                    33:e4:30:32:be:3b:71:e2:c4:14:95:78:1c:61:58:
                    19:2e:d1:47:b1:c2:d4:1e:4a:69:c1:a4:3d:58:35:
                    ac:8f:7a:ec:af:5c:45:53:12:11:e3:ff:c7:c7:c4:
                    58:61:8f:92:d9:dc:fe:fd:bd:09:d8:82:c6:07:c8:
                    2b:03:e7:96:24:05:e4:82:cd:a7:32:da:d2:5e:14:
                    e2:05:0a:2b:0e:c1:91:eb:6d:b2:17:3f:67:b0:4d:
                    91:e2:05:45:96:df:17:a9:52:46:5f:4d:ce:1e:4f:
                    72:c2:25:80:93:4d:6e:d6:4c:df:39:eb:01:37:12:
                    18:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:11:04:6C:6C:BE:9A:AF:D3:EB:6C:9C:55:8C:C6:8F:0D:9E:5D:B2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E601E49EAC2711F1B50CF4DFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ad:ea:8b:13:cf:99:52:c9:ea:61:52:d1:4a:c7:86:65:03:ad:
         5d:d6:65:59:59:25:f6:0b:56:8d:0e:d4:a4:fb:a0:22:1c:aa:
         6c:29:eb:50:a3:c1:dc:0d:f1:84:3b:f0:ce:74:81:29:7f:2e:
         97:08:97:95:ac:f5:de:e0:50:d1:63:d7:d4:bd:7b:34:7c:52:
         d1:30:46:0e:97:b0:02:24:91:6f:32:7e:20:9a:f7:18:11:a0:
         ee:71:ac:b4:73:b5:97:b5:54:32:b9:63:75:36:cf:2d:2c:83:
         9d:b1:c9:3d:62:2c:f3:51:d2:8f:f1:b6:13:4e:e5:25:c3:89:
         5c:12:31:93:a0:c7:0d:fa:41:a7:34:10:d3:14:74:05:d3:33:
         ab:b4:14:8d:be:f1:d7:a7:89:2b:0d:7f:21:68:fc:39:8b:7c:
         7c:1d:c6:c5:04:d3:09:69:c4:b6:9d:3e:31:b7:e6:b8:3e:80:
         fe:51:1e:94:83:ea:c4:e7:d4:93:da:cf:f4:de:98:3a:83:a1:
         e4:58:5f:fb:88:5b:fa:27:46:f3:8c:c7:3e:78:a1:c8:93:96:
         7e:53:16:1e:24:7c:0b:98:d5:71:b5:c4:17:40:29:46:10:94:
         b2:ce:7b:8f:a5:e3:c5:86:9b:16:89:15:61:22:50:e7:44:b7:
         1e:7b:b6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----