Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA900FAAC49F11F183AD74E3CE1D38B0.roa
File:                     EA900FAAC49F11F183AD74E3CE1D38B0.roa (raw, json)
Hash identifier:          i0Gq26fNfuqHyLmp+KCU2evFV5sxo+sM0mSY849yxMo=
Subject key identifier:   4C:39:1E:9B:6A:BB:16:90:3B:F1:E2:16:06:B9:11:51:75:1F:AE:43
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC70
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA900FAAC49F11F183AD74E3CE1D38B0.roa
Signing time:             Sat 10 Oct 2026 11:44:14 +0000
ROA not before:           Sat 10 Oct 2026 11:44:09 +0000
ROA not after:            Tue 17 Nov 2026 11:44:09 +0000
asID:                     22773
IP address blocks:        156.238.142.0/24 maxlen: 24
                          156.238.143.0/24 maxlen: 24
                          156.238.145.0/24 maxlen: 24
                          156.238.146.0/24 maxlen: 24
                          156.238.147.0/24 maxlen: 24
                          156.238.148.0/24 maxlen: 24
                          156.238.149.0/24 maxlen: 24
                          156.238.150.0/24 maxlen: 24
                          156.238.151.0/24 maxlen: 24
                          156.238.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121968 (0x1dc70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 10 11:44:09 2026 GMT
            Not After : Nov 17 11:44:09 2026 GMT
        Subject: CN=6aca250e-e0d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:82:15:b9:dd:c4:70:73:09:3d:82:8b:5f:92:
                    22:ac:60:24:e4:e7:e8:7f:b4:5e:9c:04:75:04:1c:
                    43:94:d3:64:50:df:10:74:2b:6b:dc:e7:f7:e2:74:
                    c0:f4:30:db:2b:9c:39:d6:43:52:81:f7:5e:bf:21:
                    eb:35:47:44:af:92:3f:28:c9:aa:93:15:04:6d:ba:
                    4a:98:ea:b8:91:85:a6:01:c6:1c:f0:96:99:d9:db:
                    28:ba:60:b8:34:a9:a8:8b:3d:cd:a1:bf:8e:23:e3:
                    e8:f6:00:46:c1:60:ea:bc:51:27:41:b2:3a:d9:ae:
                    92:a2:fb:27:56:b9:6f:be:f1:83:1f:f5:c8:88:1b:
                    97:f8:e7:74:4d:3b:77:18:76:0f:48:5e:2a:02:4c:
                    e6:b8:9a:98:ce:51:db:56:d9:4c:78:34:92:a4:d0:
                    d0:09:9f:85:8d:16:2f:81:4a:46:54:e0:df:cd:a0:
                    e2:cb:f0:81:d2:92:bc:84:1b:b1:24:26:89:0d:1d:
                    b8:66:36:25:4f:25:4a:d0:a3:47:0b:85:cb:57:f7:
                    de:f7:7d:4b:05:b6:0a:20:58:52:37:ec:9d:2a:bc:
                    5f:7b:db:22:b9:b4:55:5d:b8:ec:62:e8:9e:b9:82:
                    b2:5e:c7:dc:5a:d7:4e:84:41:88:a3:98:8d:98:f7:
                    80:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:39:1E:9B:6A:BB:16:90:3B:F1:E2:16:06:B9:11:51:75:1F:AE:43
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA900FAAC49F11F183AD74E3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.142.0/23
                  156.238.145.0-156.238.152.255

    Signature Algorithm: sha256WithRSAEncryption
         9a:df:6a:e3:a9:72:e1:35:7b:f8:55:18:2e:1b:3e:80:27:b2:
         8c:05:31:88:bb:dd:ef:63:c5:32:06:69:0c:ee:e3:e1:de:e6:
         4d:08:13:6d:07:4e:ea:f8:6e:6d:ee:a0:09:74:1b:2e:af:56:
         7b:f6:35:82:08:fe:25:16:db:12:83:ae:8f:58:03:84:ee:bc:
         f4:a1:ba:d8:4b:df:fb:c2:b9:01:69:a9:ec:6b:5d:2c:56:f0:
         7c:0b:bf:c8:50:f4:b3:35:e0:bd:a2:3e:04:10:bb:c6:ba:1a:
         2e:c2:fa:ee:15:33:3e:dc:40:65:eb:19:e5:3e:af:4c:b3:bd:
         c5:df:25:1c:cf:71:34:2c:74:14:50:3d:a9:bd:b9:54:3f:89:
         9f:bc:f2:6a:f8:e6:b9:a8:60:20:e2:1f:34:99:4f:4c:27:1b:
         53:c8:2d:4f:47:32:41:2c:68:d5:be:d6:3a:66:f7:33:33:7d:
         57:42:e6:79:9a:36:fd:84:2f:cc:cf:d7:f3:fd:5a:c8:10:0a:
         7c:0b:f8:26:ab:8b:86:7d:fd:78:b0:24:cd:a2:94:c7:23:e3:
         8c:7c:ce:d0:0d:2f:43:70:b5:f4:60:4c:8d:c1:56:11:77:60:
         25:af:11:ab:75:fe:3e:43:e0:79:66:71:11:95:4f:87:de:35:
         ac:1c:e1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----