Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99C0325EA76611F18149BE15CF1D38B0.roa
File:                     99C0325EA76611F18149BE15CF1D38B0.roa (raw, json)
Hash identifier:          cOGf8kLZuimC3b6+TbTYTvKFryTfTcKdBCk0dbrqKbs=
Subject key identifier:   5C:75:4F:D3:E3:BB:12:44:3D:1A:1A:47:B2:1B:8B:9C:89:08:D8:80
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D2C2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99C0325EA76611F18149BE15CF1D38B0.roa
Signing time:             Thu 03 Sep 2026 07:10:54 +0000
ROA not before:           Thu 03 Sep 2026 07:10:49 +0000
ROA not after:            Sat 10 Oct 2026 07:10:49 +0000
asID:                     138915
IP address blocks:        156.244.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119490 (0x1d2c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  3 07:10:49 2026 GMT
            Not After : Oct 10 07:10:49 2026 GMT
        Subject: CN=6a991d7d-7da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:26:eb:ab:87:8b:87:dc:9e:28:1d:a2:97:c8:
                    a4:be:91:69:a9:e4:02:0f:7f:08:01:6f:d7:c2:ac:
                    91:bb:40:43:fd:2d:d1:e7:31:33:f3:03:55:ec:bd:
                    94:a6:3f:4d:88:ec:87:58:c6:de:3b:4f:1b:e1:98:
                    33:57:d1:21:fd:a9:cf:b7:d2:56:bd:77:01:87:85:
                    c2:b6:23:2d:1b:52:b6:48:34:d9:cd:41:68:82:87:
                    dc:6e:2c:76:98:84:d3:3d:6d:29:f2:51:a4:bc:fc:
                    aa:26:32:04:60:9b:03:86:20:2b:5a:ff:50:ae:19:
                    e1:94:cd:8e:61:cc:c6:cd:31:b5:ed:51:93:8c:d8:
                    b9:6c:f6:9b:d8:cc:d3:da:f9:39:09:43:be:c8:28:
                    0e:5b:b0:94:ad:a7:3e:16:7c:8d:e7:3c:cb:5a:eb:
                    d4:07:3d:75:c4:6d:9b:dc:78:c6:bd:b5:93:a2:aa:
                    2b:b7:a1:f9:05:62:b3:db:bd:83:77:ae:7a:bf:4e:
                    03:69:61:cd:32:58:4a:7c:3a:b4:f8:73:f3:71:3a:
                    12:eb:d7:38:b0:63:64:5c:be:95:80:d7:d1:57:29:
                    3f:60:24:66:13:b1:8b:1e:72:de:97:1f:b8:90:b2:
                    27:7a:74:49:bd:ea:be:3b:21:5a:29:26:44:31:95:
                    40:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:75:4F:D3:E3:BB:12:44:3D:1A:1A:47:B2:1B:8B:9C:89:08:D8:80
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99C0325EA76611F18149BE15CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:b6:f4:07:2e:9d:a9:fc:37:da:14:2c:ca:f0:74:50:6c:b1:
         a1:36:24:b5:92:6d:f1:7d:ea:fb:ac:fb:13:0b:1a:43:5b:ce:
         da:6e:f9:3e:be:69:f4:49:23:0d:55:6a:23:14:b5:dc:6c:ee:
         ad:e4:70:28:f9:b9:22:7e:e6:2e:db:3f:83:a0:c8:98:bb:04:
         91:76:f8:61:d9:1c:91:47:34:c3:ad:3f:98:ef:8b:66:18:bd:
         2f:be:6c:45:78:dd:b7:c8:ce:df:65:63:a6:c9:56:9b:e0:f3:
         f9:15:1b:99:dc:cf:82:01:5a:2e:d2:ea:d3:96:f0:f0:06:64:
         3e:6b:86:c8:7c:60:c3:da:ff:6a:2f:79:5d:36:16:8e:91:a8:
         59:09:80:59:7b:76:1a:9e:97:61:61:13:c1:2c:e2:10:1f:6c:
         84:25:81:c0:8b:10:46:93:9e:03:ad:21:e1:cc:80:9c:82:15:
         44:dc:ab:6f:42:65:8c:17:a8:a0:a4:5e:33:ae:6f:99:b9:48:
         27:e7:06:bf:98:73:90:08:c9:d8:b2:c4:b7:83:20:53:e9:c9:
         15:4c:b2:1f:b5:b5:ee:3e:31:d1:18:50:5a:4d:42:fc:b7:43:
         7b:21:c4:da:c6:bf:73:6d:12:ce:b4:4f:66:5c:ed:45:f3:7a:
         d5:0e:aa:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----