Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E971C6DE9CD311F1B605C5BDCE1D38B0.roa
File:                     E971C6DE9CD311F1B605C5BDCE1D38B0.roa (raw, json)
Hash identifier:          emDB+yEBfGM3VGSfBZmSexesDTOdRlP7pf40ZYGlxDg=
Subject key identifier:   5C:65:44:54:9B:00:EC:AB:3B:CA:14:02:5B:8D:F7:31:BC:F0:8F:C6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CEFA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E971C6DE9CD311F1B605C5BDCE1D38B0.roa
Signing time:             Thu 20 Aug 2026 20:15:40 +0000
ROA not before:           Thu 20 Aug 2026 20:15:34 +0000
ROA not after:            Sat 10 Oct 2026 20:15:34 +0000
asID:                     63099
IP address blocks:        156.228.62.0/24 maxlen: 24
                          156.228.210.0/24 maxlen: 24
                          156.228.211.0/24 maxlen: 24
                          156.243.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118522 (0x1cefa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 20:15:34 2026 GMT
            Not After : Oct 10 20:15:34 2026 GMT
        Subject: CN=6a87606c-1a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ee:0f:68:17:57:01:19:10:e2:87:77:5d:db:
                    ad:ed:4d:d2:44:99:65:08:2f:39:8a:56:27:92:53:
                    fc:be:fe:c9:22:9c:3e:7b:97:fb:f6:df:32:02:5e:
                    74:a7:9e:ab:10:5e:de:0e:8b:cb:b8:d8:2d:cd:a1:
                    72:fe:bf:69:1b:77:1f:f3:e1:4b:a4:e4:04:16:8f:
                    59:04:c3:9d:d9:29:34:4b:2f:7c:bc:3d:3d:b1:7f:
                    85:e4:c7:32:37:71:07:d4:d8:c3:a3:45:22:01:e8:
                    45:51:ba:da:40:e6:a6:db:b9:4e:90:fa:e2:39:12:
                    52:8a:70:eb:82:5d:a1:4a:e8:1f:93:c9:de:ee:2d:
                    49:a7:0f:cd:f2:79:05:5d:e0:b6:fd:df:0a:63:b0:
                    d2:11:d8:62:84:8d:b4:93:c8:6b:83:f8:92:d0:37:
                    18:71:9c:74:ca:16:18:a4:72:1a:94:a6:23:b9:d6:
                    f1:2f:22:05:0a:6c:b7:62:12:e3:36:ee:d3:b4:5e:
                    9d:a3:2c:89:8e:28:06:a3:00:87:e6:6c:4d:6f:e1:
                    57:38:3a:f8:a4:4e:a9:47:1a:de:20:75:96:79:85:
                    92:88:19:f8:2e:ea:ee:77:b8:cb:a7:7b:04:19:4f:
                    a9:7b:c5:6d:74:2d:96:cb:54:28:57:c9:99:80:8a:
                    9e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:65:44:54:9B:00:EC:AB:3B:CA:14:02:5B:8D:F7:31:BC:F0:8F:C6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E971C6DE9CD311F1B605C5BDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.228.62.0/24
                  156.228.210.0/23
                  156.243.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:33:e1:3d:3c:d5:08:e8:42:77:5d:cc:77:4a:bc:5e:72:36:
         e5:38:2c:84:3f:31:de:3f:88:c0:98:56:4e:e0:5e:bb:1f:05:
         5a:61:2b:fe:97:08:e1:66:a3:e0:b1:a2:df:ec:04:70:f0:ae:
         b9:cb:59:35:de:fc:01:3d:07:1c:07:d0:8f:97:b8:f9:f9:ee:
         91:14:37:47:ad:e6:08:69:2c:ea:a5:cf:9e:95:ee:db:03:91:
         00:77:9f:2c:24:6d:73:9f:1f:51:80:4d:19:c8:38:50:cc:15:
         62:54:c1:80:fe:34:3c:9c:10:ed:04:72:15:e1:7a:38:e5:6a:
         90:5b:b4:ae:2e:a8:8e:d9:3c:48:c2:bb:3f:1b:05:dc:67:8e:
         fd:89:d9:50:b3:cf:f4:bc:74:e9:b8:c8:e8:5a:78:1b:14:35:
         2a:67:35:c3:2f:f8:c2:bb:8d:fa:4c:7b:47:c2:be:73:43:12:
         6e:06:cf:e1:50:82:d9:41:75:ee:e4:2b:14:92:c2:13:b5:8c:
         d1:a0:af:79:0f:d7:b5:13:57:0e:d2:92:de:94:08:6f:0f:18:
         7a:49:a2:b3:a4:e8:28:cb:64:e9:33:fa:38:19:f2:b4:5c:ae:
         72:35:17:31:d3:3c:7a:b8:54:1d:c8:82:85:c8:9f:27:e1:71:
         5f:22:91:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----