Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BEC080C8ADB911F1BE7A04E5CE1D38B0.roa
File:                     BEC080C8ADB911F1BE7A04E5CE1D38B0.roa (raw, json)
Hash identifier:          EmWk4i1zFxRe2eDiOdikLvDe4Ao6z7vRHd/oogj+jhw=
Subject key identifier:   5B:C4:40:FE:4A:79:5B:46:C1:9E:36:51:61:6B:2A:FD:38:80:2F:1C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D535
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BEC080C8ADB911F1BE7A04E5CE1D38B0.roa
Signing time:             Fri 11 Sep 2026 08:21:11 +0000
ROA not before:           Fri 11 Sep 2026 08:21:07 +0000
ROA not after:            Sun 18 Oct 2026 08:21:07 +0000
asID:                     22773
IP address blocks:        156.229.52.0/23 maxlen: 24
                          156.229.55.0/24 maxlen: 24
                          156.229.61.0/24 maxlen: 24
                          156.239.144.0/22 maxlen: 24
                          156.248.30.0/23 maxlen: 24
                          156.248.64.0/21 maxlen: 24
                          156.248.92.0/22 maxlen: 24
                          156.249.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120117 (0x1d535)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 11 08:21:07 2026 GMT
            Not After : Oct 18 08:21:07 2026 GMT
        Subject: CN=6aa3b9f7-3ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f9:98:4a:52:65:a8:08:67:16:06:26:f0:52:
                    ee:1d:dd:8d:e2:7d:24:b8:1d:da:fb:3f:31:34:b1:
                    7d:df:11:32:79:8b:bc:e9:93:d7:d5:02:36:5e:17:
                    d1:f7:3d:a4:6a:75:c9:eb:b5:4b:4a:c7:42:1f:be:
                    31:8e:9d:3e:9d:1c:a0:29:ab:82:8d:87:0d:e9:ce:
                    17:1b:31:3d:37:52:3b:3d:45:db:6a:bf:29:3b:44:
                    70:31:03:23:d7:83:06:52:4f:65:ed:1c:c6:33:a3:
                    73:e6:11:5d:d3:a6:b2:58:a3:1d:95:69:c5:80:0f:
                    a3:2d:62:e0:82:24:db:cb:f5:61:5c:6a:7d:b3:2e:
                    dc:f9:f8:2a:8c:fa:2c:a8:48:ba:f8:8f:c9:41:96:
                    ac:0f:3d:76:d8:ba:b1:52:20:24:5a:4e:13:6d:88:
                    f8:a7:27:3b:ea:f7:f7:0a:04:08:44:04:8c:b9:ad:
                    c9:46:12:8e:1f:d2:c7:09:95:ee:54:c5:1e:ea:e5:
                    f9:72:f5:3b:9a:10:d7:ce:e3:fd:3b:98:e0:27:96:
                    28:8a:af:94:e9:1f:26:9d:49:eb:ea:10:ae:b8:57:
                    27:79:73:b7:26:ba:41:d9:1a:a8:51:c9:e7:08:f3:
                    2e:bf:95:62:7d:35:7b:22:97:c2:67:42:fc:b7:7b:
                    fd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C4:40:FE:4A:79:5B:46:C1:9E:36:51:61:6B:2A:FD:38:80:2F:1C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BEC080C8ADB911F1BE7A04E5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.52.0/23
                  156.229.55.0/24
                  156.229.61.0/24
                  156.239.144.0/22
                  156.248.30.0/23
                  156.248.64.0/21
                  156.248.92.0/22
                  156.249.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:84:88:84:f2:cf:f5:01:73:99:bd:de:19:f7:d9:d5:49:e8:
         01:00:b8:49:99:a7:ff:65:ed:84:b6:de:35:dd:6f:cc:c4:e8:
         29:e0:99:3a:fa:b0:4d:5f:22:ce:a8:a9:29:46:cd:70:ee:d5:
         d6:00:bf:93:71:2c:fb:f9:0b:a1:22:6f:63:98:7d:9a:8d:18:
         00:48:2e:de:d0:60:91:84:11:fd:fa:12:93:16:b4:b8:a1:22:
         38:72:7b:4e:09:88:0d:e8:9a:61:7c:90:36:d3:76:aa:f6:12:
         4c:e5:a3:01:aa:d5:7a:dc:38:4e:8d:8b:26:02:3a:2a:ec:ad:
         02:ce:33:40:83:2d:6a:67:25:53:cb:4f:9a:41:c4:25:1e:66:
         f9:de:d3:d2:ad:a3:59:00:ce:47:7d:16:f2:4f:b6:eb:42:00:
         30:1a:e6:a5:ef:39:ca:2e:7c:59:1e:e7:fe:fe:28:dc:1b:7a:
         0f:38:85:1e:ae:41:d0:21:ca:24:17:5f:6a:ea:3b:9b:c4:c7:
         3c:88:5a:6f:25:4a:cc:2f:22:ea:89:f1:61:62:7a:92:2c:86:
         b5:6c:af:f9:70:ea:19:73:ba:91:d1:2e:b5:21:f1:5e:3b:2b:
         c9:6a:29:73:0d:65:36:8c:2f:f4:5f:36:34:15:c8:5b:34:c7:
         6d:06:3c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----