Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDD6AC90B9A611F1A1A6D4B5CE1D38B0.roa
File:                     EDD6AC90B9A611F1A1A6D4B5CE1D38B0.roa (raw, json)
Hash identifier:          GYb5P5a3Kj787E2XztpXbnIMMOdGio2FvuSRoD+lnoc=
Subject key identifier:   74:6F:87:40:50:EB:9B:E7:BF:93:55:81:72:5F:C0:44:9A:23:4E:25
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D918
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDD6AC90B9A611F1A1A6D4B5CE1D38B0.roa
Signing time:             Sat 26 Sep 2026 12:36:43 +0000
ROA not before:           Sat 26 Sep 2026 12:36:39 +0000
ROA not after:            Sun 25 Oct 2026 12:36:39 +0000
asID:                     273155
IP address blocks:        156.236.192.0/19 maxlen: 24
                          156.236.224.0/19 maxlen: 24
                          156.236.224.0/24 maxlen: 24
                          156.236.225.0/24 maxlen: 24
                          156.236.226.0/24 maxlen: 24
                          156.236.227.0/24 maxlen: 24
                          156.236.228.0/24 maxlen: 24
                          156.236.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121112 (0x1d918)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 26 12:36:39 2026 GMT
            Not After : Oct 25 12:36:39 2026 GMT
        Subject: CN=6ab7bc5b-b30e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bf:2c:8d:d6:7e:7a:be:ee:e0:28:8a:a0:2b:
                    32:17:f9:d9:dd:8a:88:55:69:2f:0b:7f:2e:15:48:
                    8d:7b:33:61:e2:6a:50:3f:7b:db:12:9c:20:ef:99:
                    75:1d:a6:37:32:de:2a:40:a2:48:c9:49:2e:0a:7b:
                    06:23:05:c5:86:98:a7:91:b5:a9:0a:3d:97:2a:91:
                    c1:3f:e6:9b:2a:17:e7:71:bd:bb:f6:1d:89:e3:d7:
                    72:1e:70:1d:ba:29:f6:c8:05:81:d8:fe:56:c7:93:
                    7d:2d:b9:1d:34:65:d7:7a:2d:af:4c:fd:b7:02:d6:
                    92:87:b9:c3:22:e2:f6:4f:87:57:fc:93:33:9b:0c:
                    9a:7a:26:d6:34:65:72:a6:07:5e:be:bb:3e:d0:c7:
                    09:28:58:99:2e:c4:32:f7:13:a1:7b:eb:25:0f:6c:
                    8d:54:9b:78:d6:7b:8b:0e:27:a5:d1:9a:ac:52:5a:
                    64:d8:ae:23:1d:fd:fb:4f:2b:68:c4:d5:15:5b:14:
                    94:4c:c5:a6:fb:e5:55:cf:f5:c3:d8:68:4c:2c:9b:
                    9e:f8:84:6b:20:14:cb:33:68:57:8e:1d:57:05:a0:
                    43:39:46:cc:d9:49:f6:1e:61:a5:97:2b:d2:3b:b1:
                    55:5b:4f:de:ce:e2:6d:a1:9f:77:59:fc:fd:f0:5d:
                    4c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:6F:87:40:50:EB:9B:E7:BF:93:55:81:72:5F:C0:44:9A:23:4E:25
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDD6AC90B9A611F1A1A6D4B5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8e:4e:25:31:6f:81:f7:fd:2d:70:62:a1:90:0a:60:24:a2:10:
         f2:4f:ce:38:f7:48:cd:12:71:9d:8d:a9:de:48:f7:01:1d:57:
         eb:fc:aa:55:4b:cf:af:00:c0:ae:a4:04:4d:45:95:5b:0a:76:
         67:89:28:8b:cd:79:89:07:3a:5d:de:cb:ae:8c:47:81:c5:2c:
         f8:5f:7e:ce:ab:9f:52:43:a0:df:0c:2f:b8:6a:80:1a:62:5a:
         46:83:9c:6d:34:fe:5f:fa:1f:b6:79:fc:4f:f6:09:79:a5:80:
         24:2a:2a:78:b0:d4:1c:cd:16:b7:3d:d6:ab:ca:b4:5e:85:a3:
         5b:f0:1c:6d:f5:bd:66:31:fb:ac:8f:e2:11:3e:9e:74:d1:79:
         0d:9e:cc:00:b6:87:ba:61:42:71:42:92:c1:33:85:81:7b:e6:
         72:58:ba:3e:9c:0e:a3:5d:73:ea:9d:61:a6:eb:c0:a7:6f:c1:
         10:07:c1:d8:31:62:8f:92:26:32:bf:c6:8b:4b:6a:a6:72:87:
         2d:8c:3c:73:ac:3b:f5:17:fd:a2:0e:0c:e2:98:3c:80:bb:b6:
         0f:59:69:65:53:67:2a:6c:db:d8:2d:49:a9:79:05:4b:f5:42:
         e9:a1:6a:50:11:e4:67:61:42:de:f6:0b:90:43:4c:35:8f:67:
         98:89:31:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----