Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3CEDCC2AE9611F1A579451BCF1D38B0.roa
File:                     B3CEDCC2AE9611F1A579451BCF1D38B0.roa (raw, json)
Hash identifier:          //Od2XeXgje1U5kNOIa5kyGpL9BE6vViUwBpMcUhhRU=
Subject key identifier:   58:E8:EC:B5:24:B1:97:4E:5B:B7:26:B7:6D:6F:D1:C5:49:DB:6D:1D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D5A0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3CEDCC2AE9611F1A579451BCF1D38B0.roa
Signing time:             Sat 12 Sep 2026 10:42:51 +0000
ROA not before:           Sat 12 Sep 2026 10:42:47 +0000
ROA not after:            Tue 22 Sep 2026 10:42:47 +0000
asID:                     21859
IP address blocks:        156.241.129.0/24 maxlen: 24
                          156.241.133.0/24 maxlen: 24
                          156.241.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120224 (0x1d5a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 12 10:42:47 2026 GMT
            Not After : Sep 22 10:42:47 2026 GMT
        Subject: CN=6aa52cab-e5e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:83:ed:79:7d:65:91:8e:0f:56:16:24:27:e1:
                    0f:43:b1:b1:57:2c:49:2d:60:49:de:d2:87:6a:94:
                    38:a8:05:07:52:80:7e:19:54:91:b6:3d:bb:c8:f1:
                    46:52:29:c7:85:18:67:1f:06:32:fa:9e:1b:8e:fe:
                    51:a7:91:29:24:ee:00:1a:fb:e5:22:ac:8f:ca:b2:
                    16:c6:bb:a0:dc:5e:6b:5f:e3:19:3a:c9:d9:9b:5f:
                    08:35:84:20:96:fd:6a:f8:ff:7c:04:3c:87:da:40:
                    7a:25:76:d4:f9:0d:9a:e5:f6:c4:d3:0c:ea:74:af:
                    1c:48:42:72:6c:3b:d2:f4:7c:71:38:48:69:a6:d7:
                    e8:5d:84:1f:bb:c1:f2:4c:40:55:5c:c6:73:4b:3a:
                    22:6d:93:1a:45:10:9e:f1:85:23:d9:cd:6f:2b:63:
                    b4:75:3e:1e:73:17:3c:b4:7f:6c:f1:c7:d9:4e:6e:
                    d3:ec:1b:1a:2e:2e:89:05:99:67:35:93:40:3a:c0:
                    a2:ee:41:6b:2d:33:87:be:3b:9f:fa:24:32:5f:af:
                    f4:e8:40:15:84:14:42:13:b7:2e:32:44:24:b9:f3:
                    40:64:8a:11:90:ea:65:44:89:82:44:f5:13:de:d1:
                    46:d4:1c:79:71:88:a7:06:52:5b:f8:0a:e8:b3:89:
                    d0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E8:EC:B5:24:B1:97:4E:5B:B7:26:B7:6D:6F:D1:C5:49:DB:6D:1D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3CEDCC2AE9611F1A579451BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.241.129.0/24
                  156.241.133.0/24
                  156.241.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:59:0d:51:be:12:b3:89:12:c1:0b:b3:58:84:95:4b:63:26:
         88:08:45:d4:f5:a0:a0:0b:9e:74:f8:52:de:d4:3e:11:01:58:
         85:bb:f7:e5:fd:fb:dd:d0:01:3a:f2:2c:eb:f5:c0:56:62:b8:
         64:ee:6b:ad:f7:57:7f:af:36:66:6e:69:d0:b1:b1:fa:ca:a3:
         f9:10:96:c8:84:a7:0f:1d:b1:12:c5:9f:23:a1:89:6f:97:d7:
         9a:39:01:9c:23:4c:b0:18:9e:3c:b6:dc:4e:14:ae:95:27:7b:
         f0:82:8b:f7:a6:c3:d1:13:d1:b9:e8:e4:1a:fb:c5:7c:4c:9e:
         33:d4:65:44:63:4f:35:6a:4e:c5:77:dc:47:d7:d7:08:51:6b:
         8c:2d:b4:22:e1:61:d4:30:e0:09:10:05:75:ad:47:00:ae:1a:
         a0:c3:e1:d4:ad:0f:f5:0d:49:7a:9d:dc:f6:fd:2e:28:82:10:
         b9:ee:f3:26:2c:ef:02:ce:ce:95:db:d2:0c:b2:dc:09:29:92:
         ff:7a:b7:9a:3c:07:fa:64:71:6d:3b:a4:7f:99:d5:8d:a0:5a:
         d2:01:2c:ab:41:cc:a9:5b:e3:ee:f1:40:71:e5:fb:fd:e2:33:
         d3:81:38:fc:f4:d1:20:f9:2d:b4:90:db:be:fc:3b:be:9a:de:
         58:24:e0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----