Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/042DB8E0C3BA11F1B6FCE90BCF1D38B0.roa
File:                     042DB8E0C3BA11F1B6FCE90BCF1D38B0.roa (raw, json)
Hash identifier:          z//3gE+U3PmG1nEvTmPVA/hx2VVY8ZFeIlzRA/GQhcg=
Subject key identifier:   58:01:49:BC:A2:82:94:8E:2D:82:6A:EA:CD:B0:A1:FD:B1:05:6A:A1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC18
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/042DB8E0C3BA11F1B6FCE90BCF1D38B0.roa
Signing time:             Fri 09 Oct 2026 08:18:33 +0000
ROA not before:           Fri 09 Oct 2026 08:18:28 +0000
ROA not after:            Sat 09 Oct 2027 08:18:28 +0000
asID:                     132839
IP address blocks:        156.250.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121880 (0x1dc18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  9 08:18:28 2026 GMT
            Not After : Oct  9 08:18:28 2027 GMT
        Subject: CN=6ac8a359-f0b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:37:f5:fd:3f:91:8b:6d:16:a3:bd:38:d5:df:
                    53:4a:db:d8:d5:f6:68:20:0a:33:2c:dd:83:77:95:
                    74:58:57:fc:b3:7d:45:bf:82:02:5e:dc:55:f1:1f:
                    bc:49:69:ec:17:d5:44:0f:ed:8d:97:0e:2c:8a:0b:
                    44:4d:44:91:28:23:07:62:a3:72:77:d7:ff:d7:12:
                    29:b8:de:85:db:84:cb:d3:7f:1f:fe:d9:0b:0c:1c:
                    3f:7e:a4:d0:c1:e1:55:19:1a:6f:f5:74:68:29:6a:
                    d7:4f:c6:bc:e7:02:6c:d6:b0:fb:8a:8e:5f:85:89:
                    28:ec:f4:0c:c7:63:70:87:be:bd:8b:a0:cf:1a:9f:
                    44:e5:c2:b3:9a:41:0d:15:2c:5c:c0:3d:a7:7a:fc:
                    58:16:f1:8e:5a:75:bb:d7:ac:24:ed:f6:21:da:84:
                    f7:46:db:03:01:26:4b:55:3f:82:ea:09:e0:72:23:
                    dd:bc:28:04:64:7d:f2:a3:4e:23:fe:10:f4:e0:09:
                    2d:d0:96:1f:a8:ee:30:fa:7a:33:01:d4:5b:7d:41:
                    b2:5d:48:68:30:f3:67:6a:dd:71:43:94:aa:3a:2b:
                    3d:6b:95:69:c6:a8:c6:77:71:0e:3c:81:5b:5e:4d:
                    8b:9d:33:9f:7d:a5:ed:b5:1e:ef:6b:b6:a1:37:96:
                    ea:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:01:49:BC:A2:82:94:8E:2D:82:6A:EA:CD:B0:A1:FD:B1:05:6A:A1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/042DB8E0C3BA11F1B6FCE90BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.250.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         ae:cf:14:b2:a1:3d:af:ef:d6:3f:b2:4e:ea:4f:80:67:c3:99:
         4b:8e:0c:6e:c0:6a:0c:78:df:00:6b:62:54:d6:b4:5e:84:b4:
         df:c3:48:7f:3c:cd:d3:39:aa:73:5f:01:c6:33:4e:31:94:22:
         7a:8f:20:00:37:2b:cb:e6:23:5e:18:39:f4:81:05:fe:26:cf:
         4a:7b:46:45:c9:23:5a:0d:6d:5d:07:4a:45:0c:72:8f:13:38:
         aa:2d:a2:4c:15:6b:40:23:44:44:d1:93:97:81:e7:db:c7:c3:
         87:5e:73:f9:3b:f5:3f:7d:73:8c:51:c3:f9:44:76:7a:65:32:
         cc:0a:1c:2a:80:2c:8a:ac:55:ba:a1:6c:07:a6:2f:d3:03:6e:
         5f:dc:0b:5e:69:55:2b:eb:e5:1c:23:27:52:ea:5d:9c:8a:c3:
         4f:26:13:58:3b:be:eb:46:18:76:e9:2a:14:2c:6b:39:5c:ee:
         e0:34:5c:70:95:4a:e7:56:02:c7:d3:32:91:cf:97:86:65:b3:
         51:eb:0b:da:7d:19:21:0f:9e:08:0d:f4:1f:0f:51:fd:af:65:
         9d:5b:e4:71:2d:9a:dc:23:d0:c3:23:31:1a:93:7c:c3:08:68:
         21:35:f9:97:ee:09:bd:eb:2a:b2:3b:3a:1a:97:6a:d8:58:2e:
         e8:75:95:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----