Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C27A51F2ACF711F1BF3F33CBCE1D38B0.roa
File:                     C27A51F2ACF711F1BF3F33CBCE1D38B0.roa (raw, json)
Hash identifier:          LVRPUV2JyVYOzLcsVWwsBflT9L8nGXnUZbk/fN25g9M=
Subject key identifier:   0A:54:3C:F9:E1:F7:A8:4A:71:1A:D3:49:7A:6E:7C:6C:2A:8B:0C:58
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D4A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C27A51F2ACF711F1BF3F33CBCE1D38B0.roa
Signing time:             Thu 10 Sep 2026 09:12:35 +0000
ROA not before:           Thu 10 Sep 2026 09:12:31 +0000
ROA not after:            Sat 17 Oct 2026 09:12:31 +0000
asID:                     22773
IP address blocks:        156.238.189.0/24 maxlen: 24
                          156.239.56.0/24 maxlen: 24
                          156.242.0.0/24 maxlen: 24
                          156.242.1.0/24 maxlen: 24
                          156.242.23.0/24 maxlen: 24
                          156.242.28.0/24 maxlen: 24
                          156.242.29.0/24 maxlen: 24
                          156.242.30.0/24 maxlen: 24
                          156.242.31.0/24 maxlen: 24
                          156.242.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119969 (0x1d4a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 10 09:12:31 2026 GMT
            Not After : Oct 17 09:12:31 2026 GMT
        Subject: CN=6aa27483-6040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c8:38:94:13:82:ce:d8:76:5e:50:2d:cd:1a:
                    d1:67:b1:c8:fa:5b:2a:1f:3a:c2:a5:8f:48:9f:ce:
                    a6:71:3d:36:ad:76:6b:45:bf:44:ca:cf:78:40:f7:
                    67:37:14:b6:0d:a9:2d:5f:3f:64:75:f9:f7:ca:30:
                    bd:da:de:95:a7:4c:4a:3e:c4:43:b7:16:a7:f3:cc:
                    62:71:c5:92:5b:e2:ac:7d:55:c0:d4:66:2e:80:bc:
                    20:5e:23:ca:30:45:e4:ae:0a:20:a5:a6:54:05:2f:
                    18:1e:6a:a4:a3:af:9b:e6:56:8f:8d:e7:62:47:9c:
                    99:3f:f7:5c:be:1d:d2:21:7d:f8:ba:bd:c5:32:02:
                    62:62:cb:19:62:d6:1a:03:8d:f3:e9:5c:bd:29:12:
                    83:d2:f0:f1:76:97:7f:59:9d:50:af:4b:7e:f9:24:
                    ad:0e:d3:45:7d:84:b7:4d:93:b6:96:da:fe:f7:7f:
                    2a:73:7d:86:9c:d1:0b:39:45:06:c1:97:28:56:79:
                    e3:0c:ba:e8:2e:d1:e0:9c:2d:00:5f:24:b8:12:70:
                    d8:94:dd:73:ad:44:ff:b1:05:22:82:58:b0:94:ce:
                    50:c5:42:10:5a:2f:d8:bd:49:2b:39:72:8a:05:9b:
                    8c:b9:ee:6e:c1:ee:d4:07:43:fd:ce:45:ea:e9:4b:
                    2a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:54:3C:F9:E1:F7:A8:4A:71:1A:D3:49:7A:6E:7C:6C:2A:8B:0C:58
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C27A51F2ACF711F1BF3F33CBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.189.0/24
                  156.239.56.0/24
                  156.242.0.0/23
                  156.242.23.0/24
                  156.242.28.0/22
                  156.242.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:ec:e9:c1:17:99:be:2c:35:37:b7:fe:43:79:d7:dd:3e:00:
         51:46:c6:ec:58:98:33:3a:29:1e:f5:6e:e0:b5:79:fe:df:52:
         32:fb:59:c8:11:d9:a6:e9:b1:d5:45:26:59:89:d3:cd:71:57:
         ae:a8:3b:c7:83:9e:7d:22:d0:b3:94:91:87:17:6d:9a:bd:3e:
         37:e1:f9:16:59:b0:92:77:23:b7:90:26:e1:63:44:93:5d:83:
         bf:45:82:72:e2:a0:f6:c3:1d:d9:d1:f9:03:31:c8:b6:b4:5d:
         b0:bc:70:75:1d:81:51:c1:f6:97:07:66:d4:0a:bf:ec:f0:b2:
         86:83:54:e2:ee:c0:c0:35:c9:66:3f:fe:4a:90:26:38:9e:ef:
         be:9c:45:98:51:c1:b6:d9:da:41:4e:83:f0:c5:9b:74:c3:ce:
         99:04:b4:45:cc:4c:76:7b:6f:2f:c1:34:1e:fa:fa:60:52:97:
         ee:68:f4:d1:17:d9:c4:e2:91:ce:0a:5b:a9:99:da:c6:23:51:
         e1:e2:d2:de:da:04:7f:00:3c:e1:d4:fa:e9:d7:a4:11:96:77:
         78:2c:42:73:35:0f:76:54:9a:1a:ef:c3:89:2c:53:79:11:44:
         76:72:68:47:8c:0c:4d:b6:dc:05:df:65:b5:30:61:8a:47:3a:
         db:4c:e7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----