Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0081D8BEBF2511F1AFEEE809CF1D38B0.roa
File:                     0081D8BEBF2511F1AFEEE809CF1D38B0.roa (raw, json)
Hash identifier:          C1DlDPqOq85Zlrs8QLxYRN3uHQ9gMKQzSxYVBm8NzG4=
Subject key identifier:   4B:23:39:52:24:5A:2D:F4:E3:6E:2C:31:5A:D8:3B:EE:DA:F5:10:F7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA6D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0081D8BEBF2511F1AFEEE809CF1D38B0.roa
Signing time:             Sat 03 Oct 2026 12:21:47 +0000
ROA not before:           Sat 03 Oct 2026 12:21:43 +0000
ROA not after:            Sun 08 Nov 2026 12:21:43 +0000
asID:                     213999
IP address blocks:        156.253.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121453 (0x1da6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  3 12:21:43 2026 GMT
            Not After : Nov  8 12:21:43 2026 GMT
        Subject: CN=6ac0f35b-837e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:de:a8:e9:ae:c8:82:ed:eb:e3:f6:47:72:
                    a4:dd:27:27:1a:0f:ee:8f:c7:ad:59:54:dc:30:93:
                    c9:55:c6:1a:34:ef:21:0b:25:3e:d3:66:5f:1c:8b:
                    3d:be:01:7d:27:4e:5e:38:e0:2e:89:ee:44:e2:ff:
                    4f:55:c3:f1:6c:97:42:2d:e4:61:91:bc:99:f5:0d:
                    b0:2c:d6:ca:c9:ad:7c:68:33:4e:5e:ae:1b:ee:47:
                    86:5d:aa:8d:69:1a:a9:c7:58:c3:b2:8f:0a:b9:e9:
                    5b:80:d5:53:4a:e7:3a:61:fd:d5:0b:22:b3:4f:ac:
                    2e:d4:83:98:5a:ff:e4:1f:26:2e:80:65:c8:fa:00:
                    06:fa:7a:4c:ef:49:4c:71:a6:fc:5d:69:0f:7c:36:
                    e1:bf:13:45:52:34:e3:2a:58:13:00:e4:fb:39:cd:
                    56:a4:69:d2:4a:ef:59:45:4a:bf:d1:b4:46:3a:3b:
                    e0:67:09:c5:bd:98:38:9d:f0:43:78:92:ec:8b:0d:
                    3b:8c:72:ac:c6:c1:18:9e:0c:b3:9a:eb:86:bb:89:
                    be:a2:5c:be:7a:9b:ac:66:16:59:14:dd:75:8d:e7:
                    ef:2b:91:ce:49:58:bd:35:f8:95:5e:c4:48:b7:86:
                    a2:ac:43:d9:d7:37:5a:39:52:4b:d7:7f:17:87:33:
                    62:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:23:39:52:24:5A:2D:F4:E3:6E:2C:31:5A:D8:3B:EE:DA:F5:10:F7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0081D8BEBF2511F1AFEEE809CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.253.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:ea:05:d6:fa:2b:7a:9d:a1:f6:aa:83:45:d0:9b:71:84:65:
         07:ad:6d:2a:c7:68:7f:c2:dc:3a:a5:0e:1b:e0:5d:d4:66:25:
         d1:1b:69:0f:02:4c:e6:64:ac:01:47:0c:45:9d:32:a7:ee:77:
         a6:51:c1:2d:16:0c:4b:c0:0a:d9:69:fb:9d:4c:b2:be:57:c3:
         dc:2f:07:01:d4:b3:d7:8c:78:80:6c:ef:c4:b0:f4:9d:43:0e:
         65:8b:67:b7:d3:17:f9:f9:b5:e4:cb:ff:48:e1:2b:13:76:e8:
         f5:cb:07:39:e1:7f:78:06:e6:94:a1:31:b8:a7:8c:37:39:10:
         3d:bb:fd:59:3c:8b:70:63:9a:80:3b:0d:d7:83:a5:6a:df:46:
         64:a1:73:b0:3c:3c:98:ff:13:5b:ce:87:ef:fc:98:32:5c:9c:
         af:03:58:87:08:e7:80:4a:c4:0b:ce:25:19:89:ee:fa:b6:d5:
         01:63:92:19:88:c7:24:93:35:94:a4:ae:c0:29:2a:84:ec:0e:
         b3:d2:0d:db:65:7a:b3:f7:05:b2:51:60:67:49:d4:54:63:e5:
         df:39:9e:f0:e7:16:b9:42:6c:e3:bc:53:0f:96:de:db:80:e9:
         70:a4:1c:58:cd:eb:04:28:df:8b:6a:3d:af:7d:76:2e:7f:7f:
         2e:3e:a7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----