Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F55BA9D4B58C11F18DD836F7CE1D38B0.roa
File:                     F55BA9D4B58C11F18DD836F7CE1D38B0.roa (raw, json)
Hash identifier:          mJKxqjTSV2vnfvRbJd3zB2CsI6zPlhSe4xIKKJcRLOc=
Subject key identifier:   E1:59:24:12:DC:11:82:2E:BF:BA:78:63:65:25:38:72:B5:9F:CF:1E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D760
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F55BA9D4B58C11F18DD836F7CE1D38B0.roa
Signing time:             Mon 21 Sep 2026 07:20:44 +0000
ROA not before:           Mon 21 Sep 2026 07:20:40 +0000
ROA not after:            Thu 20 Sep 2029 07:20:40 +0000
asID:                     17561
IP address blocks:        156.241.174.0/24 maxlen: 24
                          156.241.175.0/24 maxlen: 24
                          156.241.176.0/24 maxlen: 24
                          156.241.177.0/24 maxlen: 24
                          156.241.178.0/24 maxlen: 24
                          156.241.179.0/24 maxlen: 24
                          156.241.180.0/24 maxlen: 24
                          156.241.181.0/24 maxlen: 24
                          156.241.182.0/24 maxlen: 24
                          156.241.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120672 (0x1d760)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 21 07:20:40 2026 GMT
            Not After : Sep 20 07:20:40 2029 GMT
        Subject: CN=6ab0dacc-d4a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:52:8f:ea:fe:5f:1f:64:e1:b1:71:33:12:17:
                    99:e4:7a:2a:6a:0d:d7:bd:2f:72:24:b2:25:42:b6:
                    09:cb:4c:f6:be:2e:c9:b1:82:4e:22:76:ac:cd:d6:
                    ba:37:bf:29:b3:36:85:4e:88:10:f1:87:b7:72:0e:
                    07:73:bd:87:e5:71:35:3e:10:1f:d6:0d:50:7f:b7:
                    45:bd:3e:b7:bf:c9:64:ef:2b:27:d0:d3:86:ec:a1:
                    ee:1f:4c:59:7e:d4:af:8f:06:62:2f:f6:65:98:7d:
                    e8:48:02:f9:ce:82:e8:35:ea:fa:08:4e:ca:c5:c3:
                    a2:3d:bb:e8:14:8b:a9:1f:1a:5f:b0:af:86:76:d0:
                    36:b3:27:03:8a:a2:77:92:af:a5:3a:78:42:05:ae:
                    2f:90:11:ba:63:54:72:bd:f1:8b:f7:9c:71:2b:9d:
                    e9:b2:4a:21:c6:2f:3e:d8:68:81:f4:26:eb:01:b4:
                    70:82:46:9d:6f:dc:63:5e:4c:42:0e:f4:7f:a9:9d:
                    5a:d1:fd:3a:b1:27:a9:b8:31:c4:76:0f:a3:93:d0:
                    60:94:53:c3:45:0a:8c:71:28:e5:c5:bf:52:77:4a:
                    68:e5:48:9a:d1:60:83:cb:ad:73:6f:82:8a:2e:2a:
                    0d:0d:ca:26:5c:b7:35:55:83:e6:2a:a7:df:ad:43:
                    77:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:59:24:12:DC:11:82:2E:BF:BA:78:63:65:25:38:72:B5:9F:CF:1E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F55BA9D4B58C11F18DD836F7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.241.174.0-156.241.183.255

    Signature Algorithm: sha256WithRSAEncryption
         b1:e6:67:3c:75:94:19:e6:78:6b:3f:40:7e:7c:92:c5:e6:6f:
         ab:d7:a5:d2:43:f2:7b:71:1a:1b:5a:43:6e:cb:3a:e7:e0:86:
         91:7d:0e:cc:e0:e7:76:fd:ee:11:74:77:2c:c3:c4:c7:a2:72:
         3e:9e:7d:34:e2:3e:a5:8c:03:df:0b:30:68:83:6a:b8:f8:b4:
         35:60:a9:9f:64:f4:7d:02:39:25:b2:f4:8c:99:f4:7c:83:91:
         cb:53:b2:b5:82:c4:6f:85:84:04:4e:29:a6:8e:9a:1d:2b:9f:
         f0:a4:e1:d3:9c:7a:59:56:dc:17:57:1a:39:21:42:24:8a:40:
         84:4b:a5:ea:86:50:ef:73:72:2e:85:e4:6d:2d:ca:7f:f8:85:
         6f:00:7f:92:23:81:85:d1:59:5c:0f:ee:e2:c4:98:51:3c:69:
         35:69:cb:7d:5a:fc:69:69:99:a1:e7:0a:fc:76:0d:20:63:ff:
         01:1b:ac:71:0d:39:d4:db:66:c3:2d:0c:b9:9c:3b:9a:00:6e:
         2c:c4:5a:b1:72:ad:f4:ce:c9:60:c6:cc:45:a5:39:75:bf:06:
         8b:e3:df:f1:6a:58:45:0d:b3:61:7a:b5:97:86:c0:32:d4:6f:
         9e:ed:a5:a0:77:97:cf:f5:a7:d3:51:70:19:d3:fb:fc:4e:80:
         84:36:98:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----