Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03F7BA9AC9F211F185AA00A1CE1D38B0.roa
File:                     03F7BA9AC9F211F185AA00A1CE1D38B0.roa (raw, json)
Hash identifier:          N+X7QYdz7l32dFPFy8EEMV1R49ZSvrUAh9cujI0bqbc=
Subject key identifier:   A7:EE:CC:D3:E4:DC:C9:39:31:70:49:07:7B:B4:3D:E3:12:BA:23:4F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DE0A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03F7BA9AC9F211F185AA00A1CE1D38B0.roa
Signing time:             Sat 17 Oct 2026 06:14:31 +0000
ROA not before:           Sat 17 Oct 2026 06:14:27 +0000
ROA not after:            Mon 16 Nov 2026 06:14:27 +0000
asID:                     17497
IP address blocks:        156.245.8.0/22 maxlen: 24
                          156.245.8.0/24 maxlen: 24
                          156.245.9.0/24 maxlen: 24
                          156.245.10.0/24 maxlen: 24
                          156.245.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 13:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122378 (0x1de0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 17 06:14:27 2026 GMT
            Not After : Nov 16 06:14:27 2026 GMT
        Subject: CN=6ad31247-8ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8a:ae:9b:2e:9c:7e:30:fb:8c:c1:d1:a7:f7:
                    cb:06:9a:eb:44:43:d5:7b:b2:c3:e2:86:54:23:7a:
                    2a:a2:29:fa:57:e6:44:16:ea:50:64:0f:55:36:10:
                    d9:39:d1:2a:a8:2f:da:d1:6c:75:38:b0:15:a7:00:
                    c0:dd:cf:f3:81:40:2f:69:b6:bf:c3:d6:8d:94:9d:
                    00:da:17:f6:2e:a0:3c:ce:bd:a6:ad:e9:02:5c:a3:
                    72:56:4f:48:d5:a1:d1:81:e7:76:42:d5:45:5d:fd:
                    1e:66:29:5b:f6:18:38:b9:1f:99:da:ee:66:84:de:
                    0d:0d:f1:8a:06:bc:74:e3:fe:6f:0d:1a:30:e6:8f:
                    57:2c:8c:58:89:34:fc:2b:82:dd:26:bc:93:d2:d1:
                    60:6f:b3:7a:63:6f:7c:67:1e:d5:9b:11:98:45:3f:
                    40:b7:aa:6b:d0:d1:53:e3:c5:1e:16:54:bb:5c:3d:
                    1a:99:9d:01:f4:c1:c0:fe:5f:cb:7a:69:99:e4:32:
                    7e:b8:25:58:40:97:8a:3a:10:81:8b:19:62:b9:d9:
                    d5:17:ba:e6:51:ea:b3:58:a7:27:ed:39:45:82:d1:
                    73:64:9d:f1:eb:97:64:33:11:5f:ef:06:5b:13:0f:
                    18:6e:1d:70:db:56:46:4e:ba:e8:04:2b:46:f8:2c:
                    ae:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:EE:CC:D3:E4:DC:C9:39:31:70:49:07:7B:B4:3D:E3:12:BA:23:4F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/03F7BA9AC9F211F185AA00A1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:06:74:52:a1:20:32:2a:0c:3f:40:a7:c7:da:f5:aa:33:64:
         9d:23:9f:a7:b5:91:fc:ec:f3:6f:16:08:31:29:97:76:d2:3c:
         5b:66:f5:a7:3d:fb:a6:d8:4c:e4:19:e7:d4:90:2e:e8:fd:73:
         c2:e4:c6:78:af:a3:48:d1:8e:24:c3:ad:09:16:df:09:81:c4:
         56:e9:39:e0:8d:d1:cb:88:bc:b9:fa:b5:66:42:f6:a7:20:d2:
         32:a1:7f:fe:e6:d4:27:2f:70:cb:c2:1e:87:1b:38:ca:09:ca:
         89:4b:1d:3e:b4:ce:24:b6:2c:08:d7:30:d6:31:5f:b6:d7:9a:
         2a:41:30:55:4b:84:28:a1:fb:79:08:a5:bb:63:96:e7:48:4a:
         12:06:6f:6f:79:85:3a:ce:d8:db:e5:8e:a5:12:6e:c0:66:58:
         36:81:c6:c5:d4:bb:8d:c1:eb:2c:ec:6e:d8:d8:b0:f5:eb:49:
         02:2f:28:9e:b0:d6:a4:8b:65:33:b6:3c:aa:65:11:af:9e:25:
         97:bc:23:be:e1:4e:29:2e:e0:2c:0a:17:b4:f7:0b:69:95:6a:
         b9:5e:7f:b9:c0:01:b8:c4:00:6d:f5:53:b1:4b:de:9c:47:dc:
         a9:b5:87:12:c4:ec:24:c8:c0:f9:15:ef:0a:2a:e6:ef:66:c1:
         7f:db:85:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----