Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8D3F330B99011F19EB8B7A9CE1D38B0.roa
File:                     E8D3F330B99011F19EB8B7A9CE1D38B0.roa (raw, json)
Hash identifier:          uyaIEG8g9khkzeBTjOp8Qu0/xY09S2DnBxnoTaXr85U=
Subject key identifier:   8E:D7:45:83:F5:0C:FB:C7:37:50:8E:76:20:E0:5A:2D:35:F7:EC:EC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D8F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8D3F330B99011F19EB8B7A9CE1D38B0.roa
Signing time:             Sat 26 Sep 2026 09:59:06 +0000
ROA not before:           Sat 26 Sep 2026 09:59:02 +0000
ROA not after:            Sun 01 Nov 2026 09:59:02 +0000
asID:                     44559
IP address blocks:        156.243.220.0/24 maxlen: 24
                          156.243.221.0/24 maxlen: 24
                          156.243.222.0/24 maxlen: 24
                          156.243.224.0/24 maxlen: 24
                          156.243.226.0/24 maxlen: 24
                          156.243.227.0/24 maxlen: 24
                          156.243.228.0/24 maxlen: 24
                          156.243.231.0/24 maxlen: 24
                          156.243.232.0/24 maxlen: 24
                          156.243.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121072 (0x1d8f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 26 09:59:02 2026 GMT
            Not After : Nov  1 09:59:02 2026 GMT
        Subject: CN=6ab7976a-e17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0e:8f:1d:0a:a1:85:b4:7f:e9:5d:2a:ef:03:
                    5e:f0:8b:42:39:83:35:8b:35:1f:f0:45:af:8d:74:
                    80:d5:54:e0:b6:e4:bf:4a:29:8a:b5:b9:68:0d:83:
                    28:77:2e:98:ed:07:bb:50:b6:41:a8:d6:bd:b5:dd:
                    67:43:b5:7d:1e:bf:5e:fa:49:c1:4e:6b:04:4c:01:
                    f3:c0:ed:2c:c0:55:92:54:39:4f:b6:01:5c:95:65:
                    b8:89:d9:f1:d9:0d:56:e2:70:26:a5:31:29:bd:63:
                    26:3c:df:04:3c:cf:85:39:2d:11:91:5c:ee:f9:83:
                    d7:2d:b3:24:13:4a:38:25:63:c4:4f:6d:f6:14:e6:
                    d3:26:7d:4a:f7:ab:ec:d1:45:45:3b:50:97:53:93:
                    ad:fc:cb:58:9b:24:88:06:9d:16:dd:19:d8:18:bf:
                    7d:de:cf:f4:94:9e:f6:cd:1f:06:5b:44:92:fa:a0:
                    4b:e3:7a:0f:b2:76:cb:7a:c4:74:1f:c0:3f:2a:4d:
                    f4:b7:07:e0:b5:33:80:b1:95:8f:34:1f:f2:a1:98:
                    bc:cd:dd:b3:cc:e1:fa:03:70:ef:19:67:de:e7:17:
                    88:ac:a0:08:c5:89:63:53:50:60:6e:99:6c:3d:ec:
                    67:9f:5b:56:69:9e:64:ad:47:4f:ee:59:f2:26:88:
                    86:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D7:45:83:F5:0C:FB:C7:37:50:8E:76:20:E0:5A:2D:35:F7:EC:EC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8D3F330B99011F19EB8B7A9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.243.220.0-156.243.222.255
                  156.243.224.0/24
                  156.243.226.0-156.243.228.255
                  156.243.231.0-156.243.233.255

    Signature Algorithm: sha256WithRSAEncryption
         3b:12:af:02:13:ab:4c:6c:69:1d:af:58:15:a1:fe:00:b8:01:
         33:40:48:2b:2f:b5:1c:f2:e7:ca:75:33:af:d4:5f:55:90:f6:
         11:5b:0c:84:f8:a7:77:a7:35:03:55:ea:d6:04:8e:c8:9f:ff:
         57:e0:61:a0:97:93:f7:90:d9:2d:af:e5:fe:83:61:87:d3:3d:
         80:8f:21:84:82:88:55:44:c4:6e:ae:2a:ee:86:67:aa:01:fd:
         07:8a:03:67:7a:aa:ec:9c:1a:55:6e:c6:53:3f:8e:32:7a:c1:
         73:40:5a:78:de:d1:5c:43:86:e0:bb:e9:4d:8a:40:7c:36:60:
         be:3d:1d:db:21:ff:05:76:56:d5:5a:ce:44:94:91:02:be:02:
         59:b6:c1:9f:f8:ae:51:d6:ae:25:f3:6a:4d:00:89:f1:4f:47:
         c0:c2:7e:70:e8:d8:04:5a:a5:f3:9e:ee:1f:c9:df:c0:c8:9e:
         11:e1:7d:86:e6:b8:ba:f7:c8:ee:80:7b:07:81:b2:55:34:ee:
         81:17:24:0c:77:35:39:23:a1:7f:fd:3d:bc:ea:34:fa:15:4c:
         15:af:89:ce:e1:ee:6d:83:73:bf:9e:8e:21:8e:82:eb:cd:dc:
         88:ac:ba:e3:04:1d:01:fa:82:20:e3:e8:6c:4a:e3:c8:27:0b:
         50:4c:c8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----