Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E96D124B4C411F1B0ADE2DBCE1D38B0.roa
File:                     8E96D124B4C411F1B0ADE2DBCE1D38B0.roa (raw, json)
Hash identifier:          ylzV6hjDE1eT5pK9HyRDDB4fRgngzo2KGARZ1UYPhzg=
Subject key identifier:   EE:95:A0:83:89:65:B3:FD:04:B6:99:3C:30:D5:38:AE:0A:37:EF:54
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D710
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E96D124B4C411F1B0ADE2DBCE1D38B0.roa
Signing time:             Sun 20 Sep 2026 07:26:13 +0000
ROA not before:           Sun 20 Sep 2026 07:26:09 +0000
ROA not after:            Sat 24 Oct 2026 07:26:09 +0000
asID:                     134365
IP address blocks:        156.239.52.0/23 maxlen: 24
                          156.239.52.0/24 maxlen: 24
                          156.239.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120592 (0x1d710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 20 07:26:09 2026 GMT
            Not After : Oct 24 07:26:09 2026 GMT
        Subject: CN=6aaf8a95-6951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d0:ab:cf:ca:41:8b:9a:02:8d:f4:30:be:c4:
                    ad:7d:2e:f5:11:98:81:77:d8:2b:92:24:0c:f6:ac:
                    08:9d:11:12:cc:b8:30:7b:2c:f4:f4:dd:51:da:12:
                    00:b8:f4:65:aa:13:4a:1d:7e:da:8a:f9:a1:3f:21:
                    59:25:fe:a0:d4:c7:c6:a1:56:b5:fc:5d:32:80:49:
                    e3:f0:42:45:9c:1e:3e:a4:0e:90:d3:74:fb:72:ea:
                    d5:cc:e8:85:28:b0:19:8b:8a:fc:4f:ab:b1:12:eb:
                    e7:9f:82:b7:e1:22:ab:ce:1c:98:05:60:59:69:cc:
                    f7:ac:6a:20:55:74:ca:a7:0f:5c:e2:f4:18:25:43:
                    23:7d:10:04:78:65:39:f8:15:2c:b8:b0:f3:6b:b6:
                    e3:aa:01:5e:0b:74:d8:bc:fe:19:66:12:95:68:4e:
                    d6:cd:35:f6:77:09:2b:f5:ba:eb:c1:ea:ec:65:e9:
                    25:4f:67:f7:91:6e:d2:9c:0f:fc:e7:cf:79:e0:c9:
                    20:a5:81:01:c3:e9:7c:42:77:5c:0d:ff:67:05:b2:
                    c5:b9:f6:f5:db:83:c2:2c:b3:32:2f:7a:b9:21:b4:
                    18:f0:a2:2a:8d:1a:6c:76:3d:5b:15:b4:c9:3c:f1:
                    7f:9f:29:16:17:61:6e:ab:15:58:aa:f2:12:2f:ae:
                    e8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:95:A0:83:89:65:B3:FD:04:B6:99:3C:30:D5:38:AE:0A:37:EF:54
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8E96D124B4C411F1B0ADE2DBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:2b:4a:ed:d3:56:49:da:d3:36:dc:41:16:8f:f9:74:1d:e7:
         ce:93:88:e3:dc:d6:09:aa:e7:6a:e1:fb:74:f1:eb:35:63:e0:
         0d:0b:d3:8c:8f:ec:fb:9b:09:44:f7:6a:60:0a:8f:70:57:12:
         08:67:7d:cb:8a:fa:01:12:6b:e4:27:12:7d:b9:6c:ff:88:d0:
         b4:35:1f:a3:96:3c:da:fe:4c:45:2d:06:b6:74:b6:84:bc:98:
         50:f5:f8:fc:f2:16:c8:ab:09:af:5f:b7:50:59:39:05:13:72:
         7e:6f:a7:d4:c0:8c:d6:8d:d5:52:df:1e:b5:88:37:68:69:56:
         7b:37:58:1e:74:5a:f0:23:f6:d2:79:03:bf:83:46:b7:66:79:
         c2:bd:a1:f0:cb:ff:7e:d3:49:b7:5f:74:93:b7:42:ff:df:45:
         de:bf:1d:0b:47:ac:95:de:1d:b0:0d:a4:2b:03:c4:e3:ba:1c:
         0d:a0:3e:a9:50:5b:97:bd:57:cc:2e:03:48:a1:29:42:5d:57:
         0b:8e:7f:64:eb:38:57:8e:c5:b8:43:40:fa:ef:22:10:97:8b:
         a1:af:6c:f9:57:cb:6a:ce:15:ed:7e:5a:6a:75:5d:5f:1c:8b:
         71:92:9a:c7:a6:f1:b3:50:bd:d2:47:75:07:08:b4:01:ac:4a:
         e2:80:85:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----