Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA66B6D8B26711F1BC7A5FBBCE1D38B0.roa
File:                     CA66B6D8B26711F1BC7A5FBBCE1D38B0.roa (raw, json)
Hash identifier:          nZZrepnfGnL06aNJdQg8/v5ohwrpqMGG6HbZfR6A8Cc=
Subject key identifier:   14:43:2D:9B:74:DB:EB:58:AD:C0:E8:64:68:DE:0A:E4:23:4D:6E:F8
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E89E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA66B6D8B26711F1BC7A5FBBCE1D38B0.roa
Signing time:             Thu 17 Sep 2026 07:17:08 +0000
ROA not before:           Thu 17 Sep 2026 07:17:04 +0000
ROA not after:            Sun 27 Sep 2026 07:17:04 +0000
asID:                     395886
IP address blocks:        154.89.144.0/20 maxlen: 24
                          154.89.160.0/19 maxlen: 24
                          154.89.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125086 (0x1e89e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Sep 17 07:17:04 2026 GMT
            Not After : Sep 27 07:17:04 2026 GMT
        Subject: CN=6aab93f3-f989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:35:9f:9b:4a:53:3f:ca:98:98:2b:5d:dc:
                    6b:62:2a:d6:25:82:3a:a7:fe:0a:6c:a0:ec:7e:4a:
                    20:47:cf:d8:b9:38:75:dd:20:46:dc:07:b4:cc:6f:
                    dc:c5:48:ff:04:56:98:53:89:68:ae:c9:2f:ce:d8:
                    b1:8f:bd:bd:58:f1:c8:78:4f:f4:e5:c9:91:07:7f:
                    15:92:82:2b:4d:fa:49:b1:e5:fd:09:ab:53:44:20:
                    7f:e5:38:c8:75:ea:63:26:49:41:ab:9c:37:2b:dc:
                    5c:7e:6e:e8:e5:ae:98:a9:a5:2c:06:4b:05:f9:17:
                    41:c4:bc:38:fa:10:15:3f:90:b1:1d:8e:df:33:f2:
                    27:11:a5:ef:2f:fa:75:7b:28:97:d3:ff:c8:2b:f4:
                    0d:ca:85:bd:58:2f:44:9c:84:09:ed:11:36:af:04:
                    0f:af:4d:a1:0c:58:b9:04:7a:cc:5f:e0:d7:8a:ac:
                    db:6d:ee:cf:5c:61:6a:51:55:9d:c2:38:d1:0a:e7:
                    b6:e7:e3:74:cf:4b:d2:c2:fd:40:52:46:d5:71:5d:
                    a6:a6:f3:06:d1:c7:98:c9:37:64:24:08:b9:f0:ac:
                    69:67:d6:2d:99:cd:21:6c:56:2e:5c:1d:06:d2:93:
                    19:fb:ee:63:1e:b7:e3:65:be:b6:b6:ff:59:dc:70:
                    72:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:43:2D:9B:74:DB:EB:58:AD:C0:E8:64:68:DE:0A:E4:23:4D:6E:F8
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA66B6D8B26711F1BC7A5FBBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.144.0-154.89.207.255

    Signature Algorithm: sha256WithRSAEncryption
         bd:a2:5f:29:b9:f2:2a:64:8d:67:02:30:2f:fb:e5:24:ca:0e:
         c2:2e:51:61:aa:8e:5f:07:58:d1:99:eb:21:b6:66:5d:a0:39:
         31:d0:35:ff:63:d7:12:c9:00:4c:9e:0e:e9:17:73:91:8a:f6:
         66:a4:7a:7c:d4:97:d2:d3:9b:3b:a9:f3:06:af:1d:b4:e1:a3:
         76:42:ad:0c:cd:43:20:93:4b:40:8f:a1:9b:2f:35:ed:68:11:
         bf:69:52:eb:0c:6b:64:bd:c3:f2:a9:cc:00:89:e3:88:22:74:
         99:3a:40:11:35:58:cd:6d:9a:e3:20:1d:c3:39:45:98:8f:b8:
         aa:d3:ca:0d:78:23:24:d2:a5:6b:79:eb:26:b7:a3:03:7d:c2:
         cc:d9:09:04:3c:17:2c:07:12:8b:b3:b8:c9:9d:9e:2f:54:e2:
         e4:29:86:d9:4f:1f:8f:35:d5:8a:d5:97:99:e6:3b:b9:c9:9b:
         5f:5a:6a:6d:b9:cc:8b:1c:58:89:70:4a:0d:41:f3:26:8b:37:
         ba:10:7c:70:e2:8e:cf:59:61:d3:aa:27:dc:54:eb:84:90:d9:
         de:bb:01:c4:a2:c5:be:0a:0c:f4:f2:3b:95:3d:e6:1e:76:99:
         26:72:33:b4:5e:bb:76:62:92:f9:a9:40:1c:77:6e:7b:fe:7e:
         a8:74:0a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----