Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A797FBAB0E311F19D3FEF07CF1D38B0.roa
File:                     1A797FBAB0E311F19D3FEF07CF1D38B0.roa (raw, json)
Hash identifier:          eQYSFcHUk2zEVv7+CgKIkAwh98Cpqk0bqPKEMiU4mec=
Subject key identifier:   45:22:90:44:70:A7:C6:C2:47:E6:57:2C:D8:C4:14:85:F9:DE:D6:88
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D63D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A797FBAB0E311F19D3FEF07CF1D38B0.roa
Signing time:             Tue 15 Sep 2026 08:54:48 +0000
ROA not before:           Tue 15 Sep 2026 08:54:43 +0000
ROA not after:            Wed 21 Oct 2026 08:54:43 +0000
asID:                     395793
IP address blocks:        156.225.2.0/23 maxlen: 24
                          156.225.50.0/23 maxlen: 24
                          156.230.159.0/24 maxlen: 24
                          156.255.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120381 (0x1d63d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 08:54:43 2026 GMT
            Not After : Oct 21 08:54:43 2026 GMT
        Subject: CN=6aa907d7-2688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:67:d9:11:49:15:8b:52:33:83:50:00:e9:43:
                    cb:36:d9:10:c5:3e:15:cf:51:74:4c:5d:a6:79:a9:
                    43:57:73:d0:11:3c:7d:60:6f:00:fa:c3:bc:46:2b:
                    e3:97:53:dc:79:42:d7:7d:0b:b1:65:18:df:17:c0:
                    8e:0b:0b:87:ff:1d:b7:31:fe:a5:97:1c:e4:fe:00:
                    a9:88:df:06:85:3b:1c:4c:61:f0:bd:d7:a7:02:4a:
                    14:ce:7a:53:d4:f2:a7:37:7a:a8:85:79:6d:be:e2:
                    7c:22:c9:d9:47:ba:9b:de:9e:d0:42:d7:9a:80:a7:
                    e2:ea:06:6b:a7:38:fa:10:5c:ce:5a:47:d4:4a:45:
                    a7:a7:0b:7b:01:9e:ba:43:ca:bd:08:8a:81:18:a9:
                    7f:57:2f:6a:c0:3f:01:15:7e:64:31:ee:4d:b2:9f:
                    03:3c:0c:76:cc:c8:33:ad:dd:c6:cc:bf:67:36:3c:
                    dc:dd:e3:11:4e:e6:95:41:ba:bf:dc:d6:39:d2:58:
                    14:04:f7:77:a7:91:fb:a9:2a:4a:a4:10:2d:b7:da:
                    ff:e8:44:ac:9b:f5:ff:8a:bc:c0:35:f6:85:b5:49:
                    5a:fc:eb:df:f1:98:bb:3b:6f:f7:c9:69:da:1f:52:
                    08:19:72:cf:ab:88:3c:c1:3b:78:69:8e:ca:a0:f8:
                    09:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:22:90:44:70:A7:C6:C2:47:E6:57:2C:D8:C4:14:85:F9:DE:D6:88
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A797FBAB0E311F19D3FEF07CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.2.0/23
                  156.225.50.0/23
                  156.230.159.0/24
                  156.255.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:48:0a:c8:ac:47:b8:fa:67:1c:cc:0f:2b:80:6f:9d:dd:28:
         2d:e3:6b:ae:7f:01:f2:a2:f3:1d:05:73:38:dd:5b:b3:43:df:
         f4:9f:55:dc:2e:79:74:57:2d:b8:05:51:d1:b2:61:e1:c6:29:
         1e:2e:f7:f4:37:8f:fe:41:56:be:17:55:2b:57:b7:1f:1b:ac:
         62:a4:18:21:93:3c:91:61:40:47:8d:21:43:0f:68:a7:20:6d:
         d8:8d:34:f8:0c:1b:90:e7:47:07:88:7f:be:b1:0a:7d:0b:98:
         1f:2b:48:91:d9:10:53:1f:bd:e4:47:fe:ad:04:1f:6d:75:ca:
         cc:f8:3b:6e:01:e7:15:4b:cb:8c:f0:c1:ed:48:67:7d:01:66:
         e1:e6:87:05:40:5e:e8:a5:e3:6c:56:83:22:d9:97:af:0f:d8:
         c4:51:b9:ed:69:73:8c:7a:da:eb:c2:e3:1a:cd:be:e0:82:4e:
         cb:e9:7e:05:32:e3:39:dd:51:d5:89:7f:5b:0e:71:e5:32:f4:
         e5:32:23:17:5c:1a:92:81:03:4f:66:51:71:cd:49:2c:36:80:
         39:02:40:4d:4d:58:f2:71:4b:c9:f1:01:87:5d:5b:db:5c:00:
         25:5a:dd:78:30:b1:b5:7d:1a:21:52:e0:3d:41:68:e6:62:74:
         52:ef:31:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----