Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DA224DEADBC11F1B7C1F2F6CE1D38B0.roa
File:                     9DA224DEADBC11F1B7C1F2F6CE1D38B0.roa (raw, json)
Hash identifier:          wTOBVV9d/szJsk8PuPddmlb1yyM3jL+2pkTjOlNKSTs=
Subject key identifier:   75:2F:6E:2B:7D:33:56:B9:51:06:9D:93:FE:CE:48:8C:FD:CE:99:49
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D541
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DA224DEADBC11F1B7C1F2F6CE1D38B0.roa
Signing time:             Fri 11 Sep 2026 08:41:44 +0000
ROA not before:           Fri 11 Sep 2026 08:41:40 +0000
ROA not after:            Sat 10 Oct 2026 08:41:40 +0000
asID:                     139646
IP address blocks:        156.245.204.0/22 maxlen: 24
                          156.245.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120129 (0x1d541)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 11 08:41:40 2026 GMT
            Not After : Oct 10 08:41:40 2026 GMT
        Subject: CN=6aa3bec8-0274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3e:f0:90:f5:08:79:33:3d:26:1e:b5:ca:50:
                    2d:9a:96:f3:6c:85:1f:95:1d:b8:ac:0d:ec:70:0f:
                    d7:22:54:8e:06:58:6e:e2:0a:9e:4e:a0:4f:a8:fd:
                    03:e3:3c:fb:75:0f:12:df:c0:80:73:42:29:f2:04:
                    f6:13:f2:6b:55:01:ba:95:d3:75:52:45:2d:a4:4d:
                    13:09:7b:81:93:25:92:e7:92:3c:16:8f:fb:34:13:
                    8f:d9:23:e0:c2:10:c6:38:fa:8c:5f:3d:92:8e:ef:
                    8c:32:e1:d9:45:ce:90:07:51:57:08:5f:7d:2c:e2:
                    8d:8a:b7:5a:11:9c:17:fe:d0:99:64:d5:20:6a:86:
                    bb:da:e7:ac:07:fa:58:74:b5:c6:68:97:6f:6c:04:
                    8e:e7:5b:8d:87:32:87:1f:66:82:f7:d2:5f:97:13:
                    4c:79:32:e4:2a:ef:b1:1e:e8:d4:49:9d:5f:c9:40:
                    6c:7a:b1:88:b2:64:36:a2:e0:46:3c:c6:6b:24:ab:
                    0f:a5:f0:75:9e:06:69:ab:97:ef:49:48:f8:a5:0f:
                    f6:bd:28:8d:23:42:38:6f:f9:d9:f7:3e:ad:88:0e:
                    a8:c2:69:8a:3e:26:7d:b4:a9:53:62:0a:75:3d:bc:
                    42:9b:5b:02:56:b7:8b:59:61:31:f6:53:5c:4f:3c:
                    b1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2F:6E:2B:7D:33:56:B9:51:06:9D:93:FE:CE:48:8C:FD:CE:99:49
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9DA224DEADBC11F1B7C1F2F6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.204.0/22
                  156.245.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ac:d6:8b:51:8a:67:5b:65:9a:93:79:53:87:40:ee:9d:fd:16:
         25:b3:27:0f:ea:04:ee:79:b0:9a:0d:42:74:c5:3e:d9:f6:f0:
         25:0c:a5:a0:fa:bd:02:0d:9d:99:5b:f7:fe:5b:2a:01:b1:a6:
         cd:65:c6:a0:20:d7:56:a2:e6:4a:85:03:a1:13:4e:e7:57:cc:
         72:40:e5:83:93:9a:ce:62:35:cf:40:e1:69:ed:55:0a:a2:d9:
         32:3a:94:32:c1:77:e7:99:cf:e7:1f:43:33:c1:1f:19:f5:05:
         3d:55:5f:33:43:ac:70:0b:21:12:7b:02:32:7d:d5:e2:89:97:
         9a:75:69:08:7d:d2:f4:80:b5:61:70:24:d1:b2:19:36:c7:37:
         7d:0e:b0:a3:9b:8b:1a:52:15:7d:7b:39:09:c4:b9:ab:c7:07:
         a3:92:69:4f:e4:7d:c4:e7:bd:02:57:99:f8:c7:8c:b4:c6:a5:
         49:3d:98:2f:c8:fd:e7:98:7d:c6:e0:de:c1:0d:0f:c0:a8:d1:
         ce:84:b2:63:a1:50:3a:55:7a:34:de:5b:f7:0e:95:39:2c:13:
         48:21:b1:b6:1b:c6:c7:65:07:c5:d4:d7:ab:71:e4:d2:fd:e2:
         76:b7:a4:82:f2:50:85:ad:d1:d2:7c:ee:c0:ff:a7:f8:97:e3:
         eb:06:6c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----