Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35C2F956ACF411F18372E4B6CE1D38B0.roa
File:                     35C2F956ACF411F18372E4B6CE1D38B0.roa (raw, json)
Hash identifier:          vKN6gmJTowFIdTb6X5wkVT1Co7Dv+lE6Ksp3Q9io+9s=
Subject key identifier:   68:82:B6:4E:B9:28:15:5F:A6:FC:2E:C3:A8:7D:B5:22:5B:9E:BF:7A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D491
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35C2F956ACF411F18372E4B6CE1D38B0.roa
Signing time:             Thu 10 Sep 2026 08:47:10 +0000
ROA not before:           Thu 10 Sep 2026 08:47:06 +0000
ROA not after:            Sat 17 Oct 2026 08:47:06 +0000
asID:                     22773
IP address blocks:        156.243.109.0/24 maxlen: 24
                          156.243.110.0/24 maxlen: 24
                          156.243.111.0/24 maxlen: 24
                          156.243.196.0/24 maxlen: 24
                          156.243.197.0/24 maxlen: 24
                          156.243.198.0/24 maxlen: 24
                          156.243.199.0/24 maxlen: 24
                          156.243.200.0/24 maxlen: 24
                          156.243.201.0/24 maxlen: 24
                          156.243.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119953 (0x1d491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 10 08:47:06 2026 GMT
            Not After : Oct 17 08:47:06 2026 GMT
        Subject: CN=6aa26e8e-c767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d0:8e:4b:26:62:ce:5f:64:2e:87:85:d7:db:
                    b5:68:7e:21:be:9c:bc:2b:a8:48:0a:ac:35:db:ac:
                    b0:71:a3:65:9d:2a:36:d9:82:61:77:c5:10:cb:7e:
                    f4:6c:85:9b:b3:ff:ee:6a:be:d1:49:ca:05:85:2a:
                    f0:3e:d8:9b:b6:eb:c1:19:50:69:f2:3f:e2:85:1c:
                    83:e4:0e:84:ed:5d:8f:ee:d6:a2:e1:92:d8:f3:03:
                    29:62:69:53:0a:35:28:dc:07:af:6f:1b:78:f2:63:
                    3d:9f:37:e5:f6:e4:57:66:30:62:9d:f4:99:24:fc:
                    0c:ea:4d:b2:bb:7e:42:d5:63:a1:4c:43:d8:db:8d:
                    68:0b:dc:fe:c0:82:e5:6f:ca:63:f7:b3:ed:0f:8b:
                    43:9c:23:81:d4:20:24:76:87:35:7d:3a:cd:d4:d1:
                    ce:71:21:33:67:16:11:4b:d0:7d:55:6c:91:d0:c8:
                    a9:9a:8b:f6:f0:94:15:a7:61:df:74:94:57:59:ce:
                    f6:61:40:2e:9d:f6:c9:a1:7a:aa:f8:3e:29:e0:18:
                    aa:e0:75:e3:85:10:f8:25:fc:e0:a4:65:f1:09:bf:
                    04:d9:48:35:34:34:56:b4:13:3c:4e:9d:8a:b1:f9:
                    6a:a1:31:c8:ab:e3:d7:78:b8:df:c9:cd:c6:05:e7:
                    c0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:82:B6:4E:B9:28:15:5F:A6:FC:2E:C3:A8:7D:B5:22:5B:9E:BF:7A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35C2F956ACF411F18372E4B6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.243.109.0-156.243.111.255
                  156.243.196.0-156.243.202.255

    Signature Algorithm: sha256WithRSAEncryption
         87:b2:22:01:6b:16:89:a0:3d:61:c6:6d:4a:4c:75:e7:72:55:
         1c:5b:fc:47:bc:53:7b:6b:be:68:a1:37:ba:5e:be:69:6e:6e:
         81:e2:69:b1:18:0b:03:9d:fb:47:65:39:83:21:c3:c0:e4:5b:
         a6:a4:cc:8a:77:89:57:75:ac:ca:10:da:7d:94:26:82:27:bd:
         cf:5e:f6:6d:5c:b5:48:9f:8e:5f:50:70:ab:77:c4:b9:10:65:
         e0:84:34:70:83:74:a8:f7:9f:59:ec:e4:0b:2f:e9:7e:fc:96:
         64:c3:97:d2:e4:11:d6:57:f5:a4:d4:b3:e3:e1:e3:d0:e1:ed:
         6e:3b:c9:18:09:26:c4:c4:3b:62:2e:5d:53:09:01:dd:ad:08:
         45:26:db:f4:83:63:e9:81:56:2e:79:54:2d:53:aa:e5:90:4d:
         4e:3a:4c:59:e4:5c:c4:7e:12:cb:6e:dc:85:81:0d:3a:4d:2f:
         7c:b9:27:44:bf:da:18:32:8e:b7:b6:19:1a:42:c0:b7:c8:7f:
         07:e5:51:33:08:ce:89:59:af:cd:03:63:e7:d3:85:fe:1e:3c:
         5c:e3:ba:81:d5:67:ec:1e:90:86:bd:9c:b7:7d:48:98:8f:24:
         63:6f:23:35:f2:b1:3c:ae:be:c2:3a:7d:eb:a7:48:74:ac:09:
         72:d0:af:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----