Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3642DBC/4D0B0652C0CD11F1B0A6C8D9CE1D38B0/296BF2E6C0CE11F19B8E92DECE1D38B0.roa
File:                     296BF2E6C0CE11F19B8E92DECE1D38B0.roa (raw, json)
Hash identifier:          XAseiyBWB5jDnRAZhCoIwHpcS+883V/iadUMuY7UQ4M=
Subject key identifier:   16:3F:70:1A:51:F4:73:E2:68:EB:D9:3D:3F:40:42:46:4C:33:F8:FD
Certificate issuer:       /CN=F3642DBCAR/serialNumber=EBD96E1DB9FA78A936D4F32267683D67DADC4E81
Certificate serial:       02
Authority key identifier: EB:D9:6E:1D:B9:FA:78:A9:36:D4:F3:22:67:68:3D:67:DA:DC:4E:81
Authority info access:    rsync://rpki.afrinic.net/repository/arin/69luHbn6eKk21PMiZ2g9Z9rcToE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642DBC/4D0B0652C0CD11F1B0A6C8D9CE1D38B0/296BF2E6C0CE11F19B8E92DECE1D38B0.roa
Signing time:             Mon 05 Oct 2026 15:05:12 +0000
ROA not before:           Mon 05 Oct 2026 15:05:07 +0000
ROA not after:            Tue 05 Oct 2027 15:05:07 +0000
asID:                     328199
IP address blocks:        156.0.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642DBC/4D0B0652C0CD11F1B0A6C8D9CE1D38B0/69luHbn6eKk21PMiZ2g9Z9rcToE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642DBC/4D0B0652C0CD11F1B0A6C8D9CE1D38B0/69luHbn6eKk21PMiZ2g9Z9rcToE.mft
                          rsync://rpki.afrinic.net/repository/arin/69luHbn6eKk21PMiZ2g9Z9rcToE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642DBCAR, serialNumber=EBD96E1DB9FA78A936D4F32267683D67DADC4E81
        Validity
            Not Before: Oct  5 15:05:07 2026 GMT
            Not After : Oct  5 15:05:07 2027 GMT
        Subject: CN=6ac3bca8-498b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:84:8d:d0:89:68:67:f9:24:47:64:a6:a1:a3:
                    75:f5:50:40:8a:9f:6f:9a:b9:19:1d:8c:5d:ef:15:
                    6c:fa:81:e2:0a:c5:9b:3a:03:4e:16:4a:d7:b4:97:
                    3f:28:2c:cd:72:1e:fd:2d:37:bf:bb:bc:5d:6c:81:
                    be:e6:3d:5c:ed:9f:27:c3:92:ae:1d:39:0a:dc:0a:
                    d0:19:d4:3f:33:ee:a9:ae:61:3b:c4:a5:6b:7c:a0:
                    98:69:a1:d2:01:ad:60:00:4a:89:aa:71:0f:f4:6f:
                    1d:03:16:bd:6a:f6:6f:e4:81:66:79:a0:7a:ff:85:
                    7d:e0:33:cc:55:8e:b0:b1:f9:06:38:bb:89:ac:67:
                    f9:aa:9d:cf:8e:ea:eb:f5:49:2b:26:4a:4c:20:c2:
                    65:21:ee:66:a3:0f:30:7b:f4:6d:00:85:e6:7f:6a:
                    54:a6:13:b7:05:bb:01:d3:b0:13:87:9c:28:e3:df:
                    10:03:4f:39:a7:ba:5b:c3:a0:18:71:1f:78:a0:40:
                    fc:19:6b:b5:f9:c8:52:60:aa:00:d1:07:bb:a5:e3:
                    85:62:74:d8:a9:f8:ef:81:8a:19:6c:b3:c3:cc:ae:
                    ca:d7:a4:81:3a:b2:cd:b6:ae:29:e7:8e:b4:f4:0f:
                    d2:02:82:00:70:7f:12:fa:0e:26:2d:c2:87:23:0e:
                    ab:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3F:70:1A:51:F4:73:E2:68:EB:D9:3D:3F:40:42:46:4C:33:F8:FD
            X509v3 Authority Key Identifier:
                keyid:EB:D9:6E:1D:B9:FA:78:A9:36:D4:F3:22:67:68:3D:67:DA:DC:4E:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642DBC/4D0B0652C0CD11F1B0A6C8D9CE1D38B0/69luHbn6eKk21PMiZ2g9Z9rcToE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/69luHbn6eKk21PMiZ2g9Z9rcToE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642DBC/4D0B0652C0CD11F1B0A6C8D9CE1D38B0/296BF2E6C0CE11F19B8E92DECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.0.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:2e:69:b9:85:29:c6:44:56:88:40:fe:a0:66:c2:f2:96:87:
         b7:97:06:99:cb:4a:22:dc:10:c9:e4:2c:db:73:a5:d3:d3:8c:
         66:20:1a:86:f6:a5:94:45:41:c8:bd:39:de:c1:16:b1:23:ca:
         56:a4:5e:2b:18:05:f5:c9:26:d0:da:3c:3f:20:3c:70:72:90:
         de:b0:6b:7c:3e:8f:6d:86:db:c7:6e:f9:7d:6b:21:e4:69:a8:
         e2:4b:8d:e7:7c:5b:53:7a:cc:f4:88:b4:56:fc:5f:97:94:61:
         df:8e:39:fd:1c:06:40:7a:a8:e2:a2:9f:c2:09:35:23:2e:3a:
         9e:11:04:e2:73:81:2f:a5:ae:4c:48:7c:d9:fa:d0:45:c4:94:
         9b:03:b4:7d:aa:c7:6c:8d:d9:af:42:eb:71:c6:b3:c5:07:7d:
         28:3f:25:4d:ed:71:50:1d:f4:15:29:f5:b7:92:7b:a5:df:23:
         16:38:95:de:3f:98:71:9d:47:89:4a:40:72:0c:b4:fb:93:d8:
         f2:6a:04:be:f8:97:02:7c:01:dd:ca:0a:b1:2b:28:a0:7b:ea:
         12:a8:d8:8b:4f:36:8b:80:52:82:2e:53:cf:6f:67:4f:0b:d9:
         7b:82:06:df:eb:ac:6f:c4:40:51:10:9e:35:6b:c3:33:e1:7b:
         90:cf:52:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----