Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/843C54EAAB7F11F1A30968DECE1D38B0.roa
File:                     843C54EAAB7F11F1A30968DECE1D38B0.roa (raw, json)
Hash identifier:          KSLscYIBPMKy/ed27IJeEE190ynW2QcTCjy4E4ffDco=
Subject key identifier:   3E:D4:42:0E:5E:8E:25:9F:64:D6:25:39:02:89:CB:BE:AA:80:AF:D2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D401
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/843C54EAAB7F11F1A30968DECE1D38B0.roa
Signing time:             Tue 08 Sep 2026 12:19:20 +0000
ROA not before:           Tue 08 Sep 2026 12:19:15 +0000
ROA not after:            Wed 04 Nov 2026 12:19:15 +0000
asID:                     214143
IP address blocks:        156.243.245.0/24 maxlen: 24
                          156.243.250.0/23 maxlen: 24
                          156.243.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119809 (0x1d401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  8 12:19:15 2026 GMT
            Not After : Nov  4 12:19:15 2026 GMT
        Subject: CN=6a9ffd47-c0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fd:d2:96:be:69:4c:37:dc:4e:9d:69:a9:98:
                    0f:ed:70:79:be:9a:19:88:f5:95:a9:d0:b4:66:bc:
                    ef:fb:2a:58:c0:51:bc:d9:29:c4:04:5a:80:25:a1:
                    bd:52:55:60:3a:e2:c5:85:5f:f5:64:dc:a5:7e:d8:
                    8e:09:3f:94:0f:58:96:5e:d6:e9:4f:f3:72:39:8f:
                    1b:12:dc:42:eb:e0:65:19:2b:47:ef:b7:f1:2d:11:
                    78:70:d1:cb:02:0e:92:08:5c:88:e3:09:a5:3f:bd:
                    29:0d:5b:2d:1a:60:2b:c7:7b:28:08:62:38:71:e1:
                    fd:16:16:f1:6c:a1:90:19:ae:cf:70:3e:a0:9b:7d:
                    e7:7d:5e:57:8b:1e:72:0d:6a:66:37:c0:75:59:68:
                    f6:88:30:68:e8:35:85:ae:40:fd:6a:4b:85:65:f7:
                    1b:ec:95:4e:79:f2:25:7c:d6:25:43:e8:40:54:ac:
                    06:a1:4c:bc:af:dc:46:2b:1f:01:52:bf:fd:13:01:
                    8f:cb:c3:70:f4:31:90:2f:f9:d5:68:1b:26:6a:ac:
                    2b:65:57:87:34:4b:f9:ef:c7:2e:6b:08:2a:40:68:
                    95:56:64:2c:73:90:97:e6:e3:83:67:86:a6:ce:c5:
                    05:c4:a1:1e:a7:c4:06:a7:99:9c:a6:86:66:5d:9b:
                    ef:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D4:42:0E:5E:8E:25:9F:64:D6:25:39:02:89:CB:BE:AA:80:AF:D2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/843C54EAAB7F11F1A30968DECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.243.245.0/24
                  156.243.250.0-156.243.253.255

    Signature Algorithm: sha256WithRSAEncryption
         77:21:58:47:94:40:f3:98:8b:34:e9:60:cf:60:7f:6b:59:6d:
         6f:d4:cf:92:19:f4:df:23:dc:10:71:bc:87:09:ea:ca:d8:67:
         58:b0:b6:92:9a:ba:54:65:d3:7a:2a:a6:6a:d2:db:3b:55:17:
         7d:72:df:ee:ee:3b:47:54:f4:68:63:93:9c:c7:e5:ea:10:40:
         a5:eb:4e:eb:b8:c3:8c:45:df:e6:62:ad:07:41:79:ba:95:a9:
         7d:3d:9c:a5:1e:06:a1:f3:76:11:16:48:df:e0:6b:f9:85:6e:
         dd:91:7c:96:e7:5b:d7:45:fd:02:8c:76:d4:e1:fb:80:af:48:
         7a:78:67:51:6e:26:4e:07:5d:09:24:3a:b7:1a:54:d9:4e:76:
         94:4a:1b:2b:52:0a:de:56:31:25:2b:7e:81:7d:6c:ce:b8:10:
         74:2d:dc:35:ed:8c:15:90:15:ab:78:ea:5f:8b:fd:1e:9c:61:
         ea:ac:c7:0b:a1:3e:b2:c3:a6:e0:86:23:cc:59:b7:e8:a9:97:
         5b:b6:dc:db:3b:90:38:48:72:be:6d:22:43:04:8b:bb:87:22:
         f5:87:c3:ec:5d:21:83:21:49:be:19:2c:0c:d1:9c:9f:a5:b6:
         3c:e4:92:9d:0e:cc:47:ae:7d:39:69:ae:f5:29:97:b9:fe:e0:
         52:97:51:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----