Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC0700C2ACF811F1931114D1CE1D38B0.roa
File:                     AC0700C2ACF811F1931114D1CE1D38B0.roa (raw, json)
Hash identifier:          BghXxTiiWaWUpa9Vfm5XTLC1ATMxmEYHfZEO5vs36pc=
Subject key identifier:   AA:CE:2F:8E:78:ED:F9:70:72:82:84:6C:FC:E1:77:E5:8F:69:1B:AD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D4A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC0700C2ACF811F1931114D1CE1D38B0.roa
Signing time:             Thu 10 Sep 2026 09:19:07 +0000
ROA not before:           Thu 10 Sep 2026 09:19:03 +0000
ROA not after:            Sat 17 Oct 2026 09:19:03 +0000
asID:                     22773
IP address blocks:        156.233.213.0/24 maxlen: 24
                          156.233.214.0/24 maxlen: 24
                          156.233.215.0/24 maxlen: 24
                          156.233.220.0/24 maxlen: 24
                          156.233.221.0/24 maxlen: 24
                          156.233.222.0/24 maxlen: 24
                          156.233.223.0/24 maxlen: 24
                          156.233.240.0/24 maxlen: 24
                          156.233.241.0/24 maxlen: 24
                          156.233.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119971 (0x1d4a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 10 09:19:03 2026 GMT
            Not After : Oct 17 09:19:03 2026 GMT
        Subject: CN=6aa2760a-45f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:ea:34:da:dd:14:ba:f8:b4:01:3a:f8:a1:
                    99:22:12:8d:73:40:3a:a5:da:4e:e7:3d:3b:3a:a4:
                    2d:30:05:55:86:08:d9:c7:6a:5e:09:ce:7d:b0:b5:
                    a7:d3:c3:24:ff:b8:19:0f:48:d7:f2:41:01:b7:30:
                    ed:f6:cf:6b:7e:78:7e:60:af:f6:9f:59:75:1b:86:
                    68:aa:1b:53:94:1b:e5:79:e3:b3:e3:73:3c:ca:a0:
                    0d:3d:4f:06:e2:8e:53:d4:a8:4b:0e:52:ce:b5:f9:
                    a6:91:c3:fa:09:2e:0f:83:e9:f4:d2:81:46:64:fc:
                    c9:c1:a0:08:61:96:61:87:8e:39:1c:47:e9:18:e7:
                    09:e0:7b:df:fb:d3:de:64:3e:48:e3:da:2e:57:10:
                    10:0d:14:07:f7:99:a5:48:d0:ff:89:ce:06:b3:4d:
                    cf:6d:d1:5a:be:53:a9:9d:57:a2:a7:29:db:f4:8c:
                    6f:95:55:d5:89:69:01:69:49:78:e9:81:90:23:07:
                    65:78:49:af:7b:09:2b:4f:05:3d:84:56:47:b2:d5:
                    92:4c:6d:f3:d9:42:2e:fa:41:d4:e3:fc:e7:ab:49:
                    5d:67:9b:14:04:f6:78:44:31:c0:d6:50:a5:f9:3c:
                    f3:25:08:15:98:23:e9:a4:57:a2:45:1b:13:63:f7:
                    d5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CE:2F:8E:78:ED:F9:70:72:82:84:6C:FC:E1:77:E5:8F:69:1B:AD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC0700C2ACF811F1931114D1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.213.0-156.233.215.255
                  156.233.220.0/22
                  156.233.240.0-156.233.242.255

    Signature Algorithm: sha256WithRSAEncryption
         8a:30:ba:da:fb:45:fa:28:6a:6a:a8:06:ec:e4:02:8d:64:a6:
         f9:74:9b:be:84:0c:2a:75:dc:64:5f:68:03:82:de:9e:3b:7a:
         46:4f:6c:3d:51:16:be:91:0b:d6:54:63:17:eb:7f:f4:76:06:
         33:d4:55:0d:fb:42:7d:db:52:f9:db:37:dd:c5:b6:78:27:16:
         1e:d7:e9:84:57:b8:59:b5:6e:af:d9:a0:0b:28:6f:fb:d2:58:
         3e:47:88:a3:e3:e9:ce:91:35:de:d9:e2:4e:0e:29:8a:d8:b1:
         b2:9c:80:42:6c:f5:37:26:35:8a:8c:a1:06:2d:73:11:02:40:
         66:39:96:2d:33:56:f9:a3:ba:01:87:e8:18:82:51:35:76:55:
         8d:c7:01:ad:56:0d:06:22:5d:a8:af:74:31:71:6f:af:7a:ac:
         59:b4:8b:10:8d:cb:2f:8d:58:b2:54:1d:ba:46:9d:4d:07:4d:
         10:e0:44:29:bd:5e:07:62:09:7c:24:22:21:41:12:bc:a4:57:
         66:67:c8:bc:76:20:8c:98:21:29:ff:20:f7:53:7b:96:3d:ae:
         cd:b4:92:ba:c1:fc:69:b8:e2:56:b5:f6:71:6a:8b:85:a9:0b:
         83:21:fd:4e:e9:cd:a2:f4:7c:97:42:48:c7:6f:da:f8:b8:06:
         87:78:2f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----