Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF4E62FCC60D11F18F11EEBCCE1D38B0.roa
File:                     EF4E62FCC60D11F18F11EEBCCE1D38B0.roa (raw, json)
Hash identifier:          /8heT9jEltQ1jZCeSh1fcFoBaZmRIM45FNl7lux5QoQ=
Subject key identifier:   89:63:E3:1C:7D:6E:54:19:6B:68:6D:73:81:1D:95:8F:CC:CA:C0:23
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DCE6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF4E62FCC60D11F18F11EEBCCE1D38B0.roa
Signing time:             Mon 12 Oct 2026 07:24:18 +0000
ROA not before:           Mon 12 Oct 2026 07:24:13 +0000
ROA not after:            Sun 22 Nov 2026 07:24:13 +0000
asID:                     22516
IP address blocks:        156.227.160.0/19 maxlen: 24
                          156.237.0.0/18 maxlen: 24
                          156.237.64.0/19 maxlen: 24
                          156.242.192.0/20 maxlen: 24
                          156.243.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122086 (0x1dce6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 12 07:24:13 2026 GMT
            Not After : Nov 22 07:24:13 2026 GMT
        Subject: CN=6acc8b22-ffd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:26:4e:a4:ab:2b:20:b7:e6:ac:21:aa:84:d0:
                    16:5d:bd:fc:8d:9f:fb:a6:82:49:4c:08:d4:92:83:
                    c0:47:f1:0a:c9:09:43:98:e4:ec:90:fa:c4:45:56:
                    2a:3c:7b:fb:64:47:6c:39:1c:10:31:db:7d:b5:54:
                    9c:cb:ad:5c:ec:38:bb:ba:35:6c:37:57:3b:86:6b:
                    08:ad:c2:75:78:c8:6a:4b:cf:f5:1d:9e:fa:3a:d8:
                    ad:d3:74:9a:59:11:37:9d:ec:9c:2c:f2:b9:9d:1d:
                    ce:51:8d:d8:f5:8a:a9:b2:37:67:56:00:dd:68:3b:
                    1b:67:f9:70:94:44:46:42:aa:6c:63:b4:4c:1d:1a:
                    cf:2a:ce:40:36:bd:23:bc:12:66:72:e5:f1:f4:ff:
                    39:cf:36:15:74:f0:e4:0c:c4:56:63:ba:2c:98:84:
                    1c:f5:da:16:f4:5d:5b:31:67:e8:12:37:f3:4d:2b:
                    b4:d0:b1:40:8e:42:5b:00:00:92:59:42:12:1a:de:
                    8a:b8:78:f2:9a:74:fb:7e:48:8a:bc:48:e0:98:66:
                    3a:09:70:a6:0b:f0:2b:1a:48:6b:01:00:61:c1:87:
                    7d:b6:bd:e2:2f:b9:f6:a7:1d:bd:61:db:4b:84:ed:
                    79:3d:33:cc:6a:f2:df:27:c3:59:ce:6c:7b:39:6c:
                    d4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:63:E3:1C:7D:6E:54:19:6B:68:6D:73:81:1D:95:8F:CC:CA:C0:23
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF4E62FCC60D11F18F11EEBCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.227.160.0/19
                  156.237.0.0-156.237.95.255
                  156.242.192.0/20
                  156.243.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         55:d7:db:1a:57:8b:b0:ed:34:ad:86:69:0a:9a:80:6f:ce:36:
         9f:d6:5f:e3:a1:f3:22:c8:ee:b9:85:2e:a0:a9:50:91:b0:2c:
         2c:9e:9a:bb:b8:b7:dc:4c:24:6c:af:6d:54:50:ed:d6:db:15:
         bc:e9:2c:6e:71:25:3c:a8:e3:ba:ff:37:8a:d6:1f:7f:8d:3b:
         c3:35:ab:cb:29:9d:6b:ba:99:e6:9f:34:04:1f:62:5e:d6:da:
         b0:03:b5:31:11:e5:9b:5e:d9:95:03:ee:4b:19:0e:17:48:c0:
         1e:18:38:08:de:7e:2f:25:aa:c0:28:73:26:49:5c:7e:23:87:
         68:fa:b4:43:f9:23:89:94:8b:3d:38:df:fb:c1:2d:f0:cd:c2:
         2a:15:53:88:53:fe:92:b5:05:9f:80:a1:42:10:f5:ba:e9:8d:
         f9:7c:f1:a8:06:cb:df:d1:43:f1:7a:e9:7b:14:38:80:71:f6:
         7b:98:e3:4a:8a:76:ca:15:d4:f4:8c:8a:0c:e5:99:39:98:a9:
         02:ed:9a:ac:eb:19:cf:35:00:55:77:e7:28:f8:dd:9e:09:df:
         ab:f0:d3:5d:d2:e9:c7:e4:61:1a:ba:78:cc:db:39:42:78:d1:
         d2:98:a6:2f:25:eb:98:e9:f5:46:c2:32:07:c6:40:9e:54:a1:
         69:e3:a9:49
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----