Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/075D5144C86811F1A3D22514CF1D38B0.roa
File:                     075D5144C86811F1A3D22514CF1D38B0.roa (raw, json)
Hash identifier:          zG2aGs7EZlsbSJexfKiJ6rV2qWxC4gOzteQBEbovSQY=
Subject key identifier:   5C:A2:ED:F6:9F:D8:49:FA:59:C6:3B:96:10:8C:F0:5C:2E:FB:AB:9A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DD82
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/075D5144C86811F1A3D22514CF1D38B0.roa
Signing time:             Thu 15 Oct 2026 07:14:15 +0000
ROA not before:           Thu 15 Oct 2026 07:14:11 +0000
ROA not after:            Sun 22 Nov 2026 07:14:11 +0000
asID:                     16509
IP address blocks:        156.225.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122242 (0x1dd82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 15 07:14:11 2026 GMT
            Not After : Nov 22 07:14:11 2026 GMT
        Subject: CN=6ad07d47-d879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:c5:0d:7b:39:95:ba:91:d2:f2:35:bb:9a:
                    11:d8:9d:d8:f6:09:1d:09:fd:97:53:6a:44:ca:cc:
                    af:fa:e0:d4:ef:1f:11:12:4f:21:e0:c2:d1:d9:fa:
                    6f:72:19:fd:6f:6c:47:0e:fb:29:38:e4:f3:55:48:
                    35:08:3a:73:5b:a0:a9:e1:15:0d:4d:a2:44:03:74:
                    06:ec:00:22:d7:1e:4d:ae:62:a3:aa:ae:1c:87:28:
                    15:72:c3:8a:ae:7f:b7:fa:bd:10:73:f9:04:13:aa:
                    c4:83:c9:a4:2e:5f:c2:ed:70:a1:a8:56:1f:bc:3f:
                    ac:0b:07:bb:66:fc:b4:43:40:7c:b8:0f:3d:f2:b3:
                    46:78:40:2f:f5:36:8c:b9:23:42:03:c8:53:05:cf:
                    4b:45:f2:3e:b3:3a:50:47:09:90:64:48:5b:4e:45:
                    0f:41:94:cd:c1:ad:1d:7d:f4:1f:89:be:a4:b8:3d:
                    86:62:9f:95:0c:37:b5:fe:f6:e7:84:bb:05:4a:34:
                    13:23:0d:fe:11:9f:51:01:8e:c6:6f:ee:e9:a9:58:
                    7b:ff:2a:55:69:63:24:49:6d:7c:ff:23:30:92:33:
                    f0:63:7c:25:61:91:c4:d1:0e:39:fe:9a:aa:48:01:
                    d2:f9:e4:b0:47:9c:1d:c6:fd:7d:c7:5d:c3:d0:4c:
                    47:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A2:ED:F6:9F:D8:49:FA:59:C6:3B:96:10:8C:F0:5C:2E:FB:AB:9A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/075D5144C86811F1A3D22514CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:17:a9:af:93:dc:8e:8b:f9:f5:80:a0:17:33:74:8f:8b:52:
         a0:4a:f9:b9:83:7e:53:b7:76:da:d1:d1:bf:5c:6f:0b:b9:c8:
         cb:75:b0:3d:24:0c:69:94:af:6c:3e:14:69:8b:d9:aa:06:2d:
         a7:87:67:3f:58:98:0f:fc:f2:b1:ea:17:d9:ae:60:a3:c4:eb:
         54:ff:60:0c:77:db:50:57:7d:5c:88:82:31:19:0a:c2:83:b6:
         7f:ad:b9:dc:06:12:c2:4c:a4:31:fd:1b:66:2a:a9:c5:3b:1f:
         9f:04:13:29:30:34:47:59:be:df:b3:b9:23:9f:dc:88:97:05:
         fc:d9:dc:17:09:b5:e7:b9:aa:80:60:54:f7:73:89:40:3f:e6:
         3b:7c:f0:aa:50:11:ad:a3:c8:ea:bb:b2:fc:6b:3a:e6:d6:f5:
         ec:21:b2:db:b4:40:f6:d0:56:99:53:ab:2b:c1:3d:da:d0:23:
         fb:34:91:bb:39:9f:0a:36:21:f3:2b:69:6b:5e:ed:06:e7:80:
         f2:42:4e:c3:ec:4d:41:c9:50:97:ae:46:ff:64:9c:52:8e:29:
         76:42:b3:0b:bd:5a:7a:cb:30:b0:f2:e0:e0:8e:53:68:77:c9:
         f1:98:21:a4:42:3b:d1:c7:a4:61:8b:15:21:ea:a7:0b:ef:65:
         1d:11:4a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----