Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83779162B26B11F1BA36D0CFCE1D38B0.roa
File:                     83779162B26B11F1BA36D0CFCE1D38B0.roa (raw, json)
Hash identifier:          ayJ3ocH/WhgHhRl1Jy+yKDG+ZYSbVP2gpIOhjR99IsQ=
Subject key identifier:   52:9E:79:08:D7:B5:D9:B1:26:F7:2A:F9:1F:59:9F:BA:54:9F:5F:85
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D6B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83779162B26B11F1BA36D0CFCE1D38B0.roa
Signing time:             Thu 17 Sep 2026 07:43:46 +0000
ROA not before:           Thu 17 Sep 2026 07:43:43 +0000
ROA not after:            Sat 17 Oct 2026 07:43:43 +0000
asID:                     153671
IP address blocks:        156.231.70.0/23 maxlen: 24
                          156.231.88.0/22 maxlen: 24
                          156.231.92.0/22 maxlen: 24
                          156.238.12.0/23 maxlen: 24
                          156.238.28.0/22 maxlen: 24
                          156.238.60.0/22 maxlen: 24
                          156.242.64.0/23 maxlen: 24
                          156.242.100.0/22 maxlen: 24
                          156.242.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120500 (0x1d6b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 17 07:43:43 2026 GMT
            Not After : Oct 17 07:43:43 2026 GMT
        Subject: CN=6aab9a32-da47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c7:d7:c3:14:0a:b6:5a:52:32:08:a9:02:ff:
                    85:c7:bf:35:fa:17:4d:e7:15:52:84:66:d0:d7:a4:
                    56:ce:d7:eb:c9:93:aa:55:dd:93:03:10:76:b5:3b:
                    5e:60:0d:81:ba:c9:f7:77:9a:d0:15:c6:0d:10:cd:
                    e0:78:31:98:b6:85:e8:a1:17:4e:61:6b:e4:f1:89:
                    c0:e9:05:41:05:0e:5a:4e:36:a9:98:63:08:bf:c1:
                    d7:92:3a:be:e4:91:50:80:df:f8:1b:ce:f0:f0:dd:
                    2d:f9:7d:68:1a:f2:f9:ce:ef:66:35:cd:a9:6d:4c:
                    57:93:d2:a1:80:7a:c9:ad:2f:c7:7e:05:0a:61:3b:
                    76:ae:59:ba:bf:60:75:21:96:f0:24:f4:1d:38:e1:
                    87:8f:33:29:c1:e7:b2:58:db:ce:17:e5:f7:82:c8:
                    ca:b4:ee:3f:8a:26:05:89:09:df:37:b0:8a:35:d4:
                    26:cc:90:43:da:b0:d6:61:f4:9c:b3:ad:97:4a:e9:
                    6e:f0:2a:6a:9c:ed:19:16:35:c3:6b:03:38:88:d0:
                    0e:63:22:77:7e:24:6c:57:18:a6:08:0a:c4:cb:61:
                    49:e0:85:31:5d:e7:6b:d9:16:c3:f5:82:4b:04:60:
                    7e:a9:df:2f:c4:40:55:77:65:ee:ab:4a:c3:b4:e9:
                    32:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9E:79:08:D7:B5:D9:B1:26:F7:2A:F9:1F:59:9F:BA:54:9F:5F:85
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83779162B26B11F1BA36D0CFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.70.0/23
                  156.231.88.0/21
                  156.238.12.0/23
                  156.238.28.0/22
                  156.238.60.0/22
                  156.242.64.0/23
                  156.242.100.0-156.242.107.255

    Signature Algorithm: sha256WithRSAEncryption
         47:1f:fe:42:29:86:4a:e2:31:44:2c:94:8e:54:b3:d4:53:e8:
         2b:af:5c:64:d6:a9:c0:ba:a1:30:61:92:6f:d0:73:a3:54:2f:
         d1:b1:c0:0f:df:23:49:0b:27:e1:4c:f2:ee:c3:56:ab:b5:6e:
         05:16:c6:27:7b:95:4e:ea:f1:73:56:a2:bd:c7:38:ac:26:c3:
         5a:a5:53:95:30:20:62:8a:f1:72:b1:b8:03:64:18:fb:a2:22:
         06:91:11:81:12:4a:0f:8c:d8:4c:fe:c1:68:08:a8:56:53:71:
         05:1e:10:f6:8b:9e:dd:a9:c6:07:c8:69:75:e6:14:b0:64:55:
         50:1c:80:55:fd:29:e1:d5:95:58:02:75:09:67:10:db:97:c8:
         e4:04:10:0f:8e:ac:62:45:4b:86:6a:45:62:ad:1b:10:1e:cb:
         1d:d9:0d:7d:6d:df:54:39:3d:de:fd:40:a7:68:02:a1:23:6f:
         e2:c3:e1:5a:a5:90:8b:97:85:c8:32:52:58:f3:7e:a3:ee:0a:
         f4:fe:99:7c:35:d0:b7:50:67:bd:b5:07:ea:87:e1:25:95:35:
         19:b0:f7:fd:53:aa:37:9f:64:6a:e2:35:e7:28:2e:6f:fe:4f:
         eb:d0:cf:c0:6d:66:3b:fd:ad:e9:65:50:4a:4f:81:ad:89:70:
         bc:f8:af:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----