Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51EC8E74AD0011F1A434F9FDCE1D38B0.roa
File:                     51EC8E74AD0011F1A434F9FDCE1D38B0.roa (raw, json)
Hash identifier:          0Okgzu7kSSME75s531XmnAYIddxbDKns0cQVMZx/hMA=
Subject key identifier:   E8:A7:01:92:F7:09:D9:46:F1:FD:B6:DE:B7:7B:E6:A6:DF:FA:C1:4A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D4CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51EC8E74AD0011F1A434F9FDCE1D38B0.roa
Signing time:             Thu 10 Sep 2026 10:13:54 +0000
ROA not before:           Thu 10 Sep 2026 10:13:44 +0000
ROA not after:            Sat 10 Oct 2026 10:13:44 +0000
asID:                     54801
IP address blocks:        156.225.76.0/22 maxlen: 24
                          156.225.79.0/24 maxlen: 24
                          156.238.120.0/21 maxlen: 24
                          156.240.0.0/19 maxlen: 24
                          156.240.32.0/20 maxlen: 24
                          156.240.48.0/21 maxlen: 24
                          156.242.10.0/23 maxlen: 24
                          156.242.12.0/22 maxlen: 24
                          156.245.144.0/22 maxlen: 24
                          156.245.204.0/22 maxlen: 24
                          156.245.232.0/21 maxlen: 24
                          156.246.0.0/20 maxlen: 24
                          156.246.16.0/23 maxlen: 24
                          156.249.28.0/22 maxlen: 24
                          156.255.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120010 (0x1d4ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 10 10:13:44 2026 GMT
            Not After : Oct 10 10:13:44 2026 GMT
        Subject: CN=6aa282e1-aaac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:59:36:b6:8d:76:98:9e:ba:5b:ac:7d:d8:0f:
                    80:d9:55:83:76:3a:88:97:5d:e2:df:13:50:cc:b4:
                    36:7f:97:03:e4:eb:e0:76:13:1c:84:b1:c2:4b:a1:
                    c6:a7:67:33:6e:3b:1f:61:b5:ee:8b:b1:1f:b0:f0:
                    37:9e:ba:bc:aa:a6:10:9b:3c:06:a6:8e:fe:c1:e5:
                    66:91:c4:d5:9c:cf:c5:f7:86:37:a2:8a:67:8c:ae:
                    04:ea:f7:23:ad:72:ed:db:e2:b0:8a:bf:a4:c5:6b:
                    aa:2c:08:db:17:9e:05:31:7f:53:51:a1:84:8d:53:
                    c2:37:2e:e8:3d:e4:dc:ce:6b:e2:15:6e:86:6a:71:
                    07:a7:9e:89:5a:ce:8c:42:88:32:c9:db:49:aa:d2:
                    19:a4:b6:5c:e0:9e:c1:ae:89:a0:63:9a:ab:f1:7a:
                    3f:7f:a5:b8:3f:ec:43:58:e0:5b:de:93:29:69:78:
                    7d:c5:af:e4:93:15:ef:e3:65:b9:cf:c1:b9:5b:ab:
                    f4:1a:51:80:18:68:db:69:7b:4a:ce:a6:44:fd:0b:
                    f3:a7:79:0c:35:d1:2b:41:fc:f5:fa:a9:c9:c0:f3:
                    aa:fa:67:07:8f:32:ac:55:16:18:f7:ae:09:bc:f1:
                    14:d2:90:b5:95:b3:72:48:e6:c3:44:4a:d5:3f:1a:
                    0c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A7:01:92:F7:09:D9:46:F1:FD:B6:DE:B7:7B:E6:A6:DF:FA:C1:4A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51EC8E74AD0011F1A434F9FDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.76.0/22
                  156.238.120.0/21
                  156.240.0.0-156.240.55.255
                  156.242.10.0-156.242.15.255
                  156.245.144.0/22
                  156.245.204.0/22
                  156.245.232.0/21
                  156.246.0.0-156.246.17.255
                  156.249.28.0/22
                  156.255.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:49:c3:d0:46:0a:d7:46:06:29:c5:42:e8:17:92:c2:3d:6b:
         65:45:18:65:9d:54:6d:d7:10:ca:b6:56:a2:7e:c9:98:19:ec:
         41:cc:57:a4:14:72:cd:28:18:83:71:35:2b:70:f8:64:56:d1:
         29:94:13:6c:3b:8c:ee:05:e0:8f:56:3e:28:5a:23:ab:65:83:
         7a:f9:4f:4d:1e:08:15:da:f9:f3:e8:36:fd:d6:46:5e:61:94:
         d1:e0:c9:2b:1c:5a:3c:ec:ae:82:7e:7a:12:a4:34:eb:2f:45:
         78:98:12:a5:e6:cc:34:a3:19:e0:8b:4b:02:6c:ad:93:ae:74:
         1d:b3:cc:29:61:41:c1:d0:84:19:17:a1:67:99:8d:bd:b1:dc:
         ad:78:0e:94:86:24:9e:25:08:d0:6d:f4:88:66:7b:54:c3:e6:
         49:3d:30:f8:14:cb:39:98:fc:b1:ff:db:8c:dc:f2:20:31:24:
         a2:8b:61:e7:2c:16:7e:eb:1a:36:4e:ac:e1:e7:f0:0f:c1:2c:
         af:01:17:88:b9:7f:e2:37:04:a7:c3:e8:08:5f:6a:ee:6e:2e:
         8d:fe:0d:f4:d9:37:a1:02:18:30:60:25:d3:e1:87:cb:11:eb:
         25:0c:29:9d:23:aa:e9:0d:5e:3f:d0:54:02:81:72:bd:32:26:
         3d:97:76:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----