Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F614CB3A9C7D11F1A6F349C0CE1D38B0.roa
File:                     F614CB3A9C7D11F1A6F349C0CE1D38B0.roa (raw, json)
Hash identifier:          XpomNz+xp1CYzLHkQcDR9MEZw6yp4BcBF10SN16S0TE=
Subject key identifier:   5B:C5:94:7B:1D:AC:31:B0:97:26:7A:C0:92:3A:71:6F:F3:BC:B8:3B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01E06A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F614CB3A9C7D11F1A6F349C0CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 10:00:24 +0000
ROA not before:           Thu 20 Aug 2026 10:00:20 +0000
ROA not after:            Thu 24 Sep 2026 10:00:20 +0000
asID:                     40065
IP address blocks:        154.89.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 12:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122986 (0x1e06a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Aug 20 10:00:20 2026 GMT
            Not After : Sep 24 10:00:20 2026 GMT
        Subject: CN=6a86d038-dae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6e:48:7d:cb:be:79:4c:78:26:0a:dc:ba:8e:
                    da:8f:71:f0:e7:4a:81:32:ff:9c:9c:c1:75:61:33:
                    f0:7f:00:28:d8:db:d5:4d:3c:04:d3:9d:66:8a:e5:
                    15:70:1e:32:cb:64:e4:9a:a5:63:f4:0d:bc:ee:cf:
                    b1:fc:65:21:12:21:96:a8:ce:8f:2a:d0:db:48:2b:
                    ec:56:43:6b:7b:9d:38:66:54:21:d0:82:0c:c1:48:
                    ac:16:98:ce:8e:55:4c:48:52:bd:bf:ef:42:d1:62:
                    6c:1f:69:b9:c6:7f:74:5c:69:4c:0b:6f:da:19:36:
                    ac:15:3c:84:ed:85:1b:c1:5f:83:19:8d:89:ae:ef:
                    b0:5e:5d:21:bb:c7:c9:80:c8:44:23:4f:77:5e:91:
                    8a:2a:86:39:64:a3:83:5a:22:8f:3e:ec:ee:eb:00:
                    7a:06:6a:1e:d5:89:04:06:db:14:5f:e6:0a:86:62:
                    fa:2a:17:df:ba:91:4d:c3:ba:42:55:55:6d:56:ab:
                    20:4c:90:c3:ca:c3:23:5d:3b:cc:66:76:d3:2c:65:
                    28:67:87:27:9b:f2:86:48:b4:07:70:0d:67:0c:ba:
                    9e:cc:fd:05:59:0f:70:00:16:07:e8:5f:a0:7a:24:
                    2c:81:5f:46:00:d8:bb:4f:60:3e:ae:74:2e:28:04:
                    70:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C5:94:7B:1D:AC:31:B0:97:26:7A:C0:92:3A:71:6F:F3:BC:B8:3B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F614CB3A9C7D11F1A6F349C0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.89.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c7:66:7d:c1:a2:44:f2:41:f9:49:2c:03:d0:b2:e7:7b:45:ad:
         64:2b:8f:7a:95:85:1a:de:2b:25:5b:98:8d:b8:c3:3d:7f:c7:
         48:55:84:bf:f1:4f:cb:6b:82:0a:38:a8:38:d4:ea:0e:e8:84:
         93:3a:90:6c:4e:4a:8f:53:aa:49:c3:ed:a5:af:d3:a1:db:08:
         60:25:3d:12:47:4e:93:24:df:4e:58:df:48:7c:bb:a4:45:d6:
         d6:aa:b3:d6:a2:7c:3c:66:54:45:5f:29:4d:61:26:0a:66:ac:
         e3:df:b3:05:af:e4:ed:f6:01:02:d9:dd:84:62:fd:fc:c8:ff:
         ef:70:b1:16:20:39:9d:88:11:4e:2b:9b:5d:e6:ba:40:28:73:
         87:94:ef:70:31:14:a3:e1:00:58:57:33:fa:44:2d:88:44:28:
         74:51:d3:28:c3:fc:4e:e6:ec:17:f0:5e:bb:9f:d0:86:10:a9:
         56:9e:40:6a:cd:d4:da:ca:85:f6:9c:d8:0f:0f:47:7a:14:50:
         b7:34:72:ab:e5:c8:0e:3a:de:9d:de:57:56:11:e3:61:18:fe:
         21:1d:59:7d:99:06:a3:e0:4b:2d:ff:2a:12:79:bf:8b:0c:3e:
         81:f8:37:5e:54:62:bb:4e:68:87:fc:89:01:cc:19:09:78:ea:
         ff:18:45:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----