Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87CCF884B58A11F180EDDAE7CE1D38B0.roa
File:                     87CCF884B58A11F180EDDAE7CE1D38B0.roa (raw, json)
Hash identifier:          hE7b+w2AGaN+Ma+9cPO0WvCuN1ktFoyW4f3he5cXTh4=
Subject key identifier:   9A:A3:45:E3:E6:B4:03:C9:E9:D7:09:65:B7:51:C9:AE:6E:C0:EA:91
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D757
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87CCF884B58A11F180EDDAE7CE1D38B0.roa
Signing time:             Mon 21 Sep 2026 07:03:22 +0000
ROA not before:           Mon 21 Sep 2026 07:03:17 +0000
ROA not after:            Mon 28 Sep 2026 07:03:17 +0000
asID:                     134365
IP address blocks:        156.226.176.0/21 maxlen: 24
                          156.226.176.0/24 maxlen: 24
                          156.226.177.0/24 maxlen: 24
                          156.226.178.0/24 maxlen: 24
                          156.226.179.0/24 maxlen: 24
                          156.226.180.0/22 maxlen: 24
                          156.226.180.0/24 maxlen: 24
                          156.226.181.0/24 maxlen: 24
                          156.226.182.0/24 maxlen: 24
                          156.226.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120663 (0x1d757)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 21 07:03:17 2026 GMT
            Not After : Sep 28 07:03:17 2026 GMT
        Subject: CN=6ab0d6ba-d575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:01:8d:26:0e:ad:c7:82:1f:0b:b8:28:1c:f9:
                    3b:0e:b8:6c:af:3b:3c:84:cb:74:ef:92:cf:b9:33:
                    7c:89:35:d9:e5:b5:1e:81:bc:6a:c1:0a:f9:3b:e2:
                    ef:a5:0a:a5:51:0b:0f:26:01:73:af:37:21:ad:4e:
                    0a:a7:24:cb:73:00:9b:eb:58:4d:29:8a:e5:da:6a:
                    e4:1a:a5:6b:a5:19:32:0f:69:6e:55:0e:56:88:e7:
                    d8:ae:7e:2b:8e:c6:45:be:0e:35:97:86:ff:08:74:
                    1e:d8:6b:f9:a5:e0:29:06:c4:11:78:85:e6:e5:6c:
                    bb:3e:5f:88:f6:cf:f2:5b:6f:45:7c:9f:1c:89:d4:
                    61:c9:8d:5f:13:f4:d6:6f:c7:c7:9b:75:c2:34:8b:
                    79:2e:36:c9:25:59:49:d6:95:79:d8:5a:b7:d3:88:
                    19:06:ca:59:26:b4:5a:94:49:cb:19:09:d2:46:9f:
                    5e:8c:c3:5c:98:06:3f:12:ab:0f:a5:f8:36:29:f3:
                    22:ee:23:da:f1:74:83:3f:01:be:c8:99:e7:59:e1:
                    42:9f:19:7d:61:88:a4:70:16:01:fc:03:a3:07:09:
                    b2:b1:64:80:d4:1d:4b:87:c0:27:e3:29:f6:45:c2:
                    ed:94:03:19:17:80:6e:75:e4:23:30:c9:15:00:2d:
                    1c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A3:45:E3:E6:B4:03:C9:E9:D7:09:65:B7:51:C9:AE:6E:C0:EA:91
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87CCF884B58A11F180EDDAE7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:71:d7:b2:a1:52:ec:95:b7:38:bf:6b:65:eb:c3:7d:97:ac:
         4c:65:59:d7:59:92:2d:99:c0:a2:4d:28:b2:39:2a:40:06:1d:
         2e:a1:78:4f:2c:66:8c:8b:9a:40:4a:36:31:9f:02:42:6f:94:
         b9:2a:ad:55:7a:c6:ef:d5:2a:a7:5f:49:33:44:c5:da:f9:f0:
         dc:70:57:2d:c1:04:ff:0c:49:f0:43:ed:02:18:1c:d4:d8:50:
         8e:ea:97:1f:d5:4f:42:fb:c1:92:84:cd:8f:c6:3a:2a:7e:1a:
         02:17:80:fe:f2:96:45:87:8e:a7:ca:ef:2f:c5:b1:26:b7:96:
         96:47:4d:c2:44:0e:06:fb:6c:64:21:3e:c1:3b:05:fb:02:40:
         20:90:25:cf:07:55:61:54:3d:9a:9d:82:c7:6f:1b:dd:5d:5e:
         08:10:8c:3e:84:e8:b5:ad:3e:14:3f:c0:43:a4:52:1c:aa:0b:
         08:16:0b:7c:3a:16:d7:1f:ac:ea:00:f9:a7:52:67:9c:c4:4e:
         d4:86:c1:ee:55:1d:5a:74:d3:d4:3a:ee:2c:c8:55:fb:c6:3e:
         1a:0a:9d:0b:78:01:d7:88:e3:64:44:b2:90:17:22:9e:0a:f6:
         d5:df:88:c4:2b:b1:48:b8:ea:27:d2:7e:3d:ef:86:9b:4e:8a:
         fb:91:c2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----