Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBD15934A9BF11F183943ECFCE1D38B0.roa
File:                     CBD15934A9BF11F183943ECFCE1D38B0.roa (raw, json)
Hash identifier:          rreP49NJezLKzTWcgAQnq2oAyowFcUchzrldi4drCY4=
Subject key identifier:   18:8C:31:88:36:83:4F:7C:28:8E:E8:E6:18:20:4C:83:46:43:1B:23
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D388
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBD15934A9BF11F183943ECFCE1D38B0.roa
Signing time:             Sun 06 Sep 2026 06:54:25 +0000
ROA not before:           Sun 06 Sep 2026 06:54:21 +0000
ROA not after:            Sat 05 Dec 2026 06:54:21 +0000
asID:                     138152
IP address blocks:        156.232.6.0/23 maxlen: 24
                          156.232.9.0/24 maxlen: 24
                          156.232.10.0/24 maxlen: 24
                          156.232.11.0/24 maxlen: 24
                          156.232.13.0/24 maxlen: 24
                          156.236.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119688 (0x1d388)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  6 06:54:21 2026 GMT
            Not After : Dec  5 06:54:21 2026 GMT
        Subject: CN=6a9d0e21-5d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:19:a7:a8:9f:1c:34:55:6a:2e:94:0b:25:f2:
                    7a:3b:b8:68:d7:f2:63:dd:af:19:bb:d1:4b:9c:9c:
                    84:90:8b:07:ad:a2:a7:8e:b7:12:dd:b0:94:bc:13:
                    55:5d:1c:0e:0e:80:df:f8:ab:d2:b0:b5:ec:90:54:
                    0a:fb:ba:c9:62:cd:71:a9:38:c2:b3:14:20:b1:30:
                    a8:1f:d3:1e:10:34:71:93:7c:8b:83:6a:cb:d7:ea:
                    7b:32:8b:0d:1b:22:6b:3d:ed:29:ff:bd:41:d5:58:
                    1d:0d:14:7e:9a:df:99:e8:c0:ac:55:d9:c0:44:e8:
                    ba:ee:cf:c7:f9:e9:e7:53:e9:01:28:1b:7f:a0:6b:
                    c5:50:30:fe:a9:51:c2:45:41:e9:0a:8b:2e:3b:a1:
                    40:b2:ea:e0:d3:fa:0d:54:a8:cf:2c:9c:f8:49:15:
                    71:98:ea:e5:f0:f4:98:92:6d:11:c8:2a:10:1a:0d:
                    05:81:72:40:af:92:7d:14:52:b7:f3:ec:50:b5:5e:
                    09:f0:6e:2f:84:9a:18:92:d6:dc:4e:44:2b:84:e1:
                    f7:e5:23:24:2a:3f:1a:9b:69:c9:04:01:68:4a:f5:
                    c5:cc:a8:10:68:86:ae:df:b0:1a:a6:2e:e2:d8:63:
                    04:54:40:0e:1d:92:34:36:39:57:5e:5c:0c:a2:75:
                    1b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:8C:31:88:36:83:4F:7C:28:8E:E8:E6:18:20:4C:83:46:43:1B:23
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBD15934A9BF11F183943ECFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.232.6.0/23
                  156.232.9.0-156.232.11.255
                  156.232.13.0/24
                  156.236.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:93:fe:75:da:62:cd:0f:6d:83:70:1d:56:47:c0:71:7f:85:
         59:89:75:c3:68:6a:13:eb:2a:3f:48:8f:6d:48:44:ce:d8:e5:
         21:03:d9:f1:fd:af:02:40:fc:38:cb:bf:c8:3e:3f:2a:7a:15:
         3e:dc:eb:d0:17:d9:85:8d:26:80:b3:0f:4c:54:f0:c7:b8:1f:
         11:ab:f6:dc:f6:9a:c2:2c:41:e7:77:8e:36:2e:fd:8d:df:71:
         91:82:d5:12:fc:63:2e:02:fb:56:6d:55:12:5a:a5:61:53:c1:
         0b:d3:8c:a3:f6:ce:86:db:f2:b9:d6:2c:fc:45:7f:61:45:7a:
         18:fd:9c:cf:53:aa:8f:39:13:fe:6d:d4:20:01:1c:8a:3f:00:
         5d:f7:60:d6:5b:48:05:f0:f5:1b:ca:d0:82:c3:94:0b:bb:e0:
         5f:d9:a0:80:80:39:3b:eb:24:65:49:8a:cc:59:87:d4:e3:4b:
         1d:12:2c:6d:24:7a:b5:5f:d3:29:11:ad:2e:ec:54:e3:ff:f1:
         81:95:56:4f:80:62:d5:87:2d:24:d3:11:5d:85:08:3f:03:95:
         56:d4:51:68:5a:a9:2b:5e:b6:1e:f2:aa:91:a9:20:d7:b2:3d:
         a1:8b:af:f3:b2:d6:fa:7d:7b:7e:4e:21:bf:1b:d7:3c:55:6f:
         a2:b5:fd:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----