Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F5C5028962411F19EAD40BBCE1D38B0.roa
File:                     0F5C5028962411F19EAD40BBCE1D38B0.roa (raw, json)
Hash identifier:          JoRn42TLZ8oW1jNxvMPx5+q0nAZ2x+6fp1iN/i5IeQA=
Subject key identifier:   46:25:AE:80:F7:A4:84:40:A8:E1:6B:B7:E3:78:BE:E1:F2:D4:D7:C6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CBC1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F5C5028962411F19EAD40BBCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 08:01:45 +0000
ROA not before:           Wed 12 Aug 2026 08:01:41 +0000
ROA not after:            Sat 19 Sep 2026 08:01:41 +0000
asID:                     11404
IP address blocks:        156.226.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117697 (0x1cbc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 08:01:41 2026 GMT
            Not After : Sep 19 08:01:41 2026 GMT
        Subject: CN=6a7c2869-c592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:dd:cf:3d:b7:c1:41:e9:5e:c4:15:69:5b:
                    99:7b:7c:23:bd:de:85:3b:65:28:74:33:cf:35:8c:
                    14:6c:76:ee:8a:7e:83:2f:1e:c5:f0:de:d0:2e:d6:
                    5a:d3:15:ee:db:bd:d2:83:a8:bc:a4:6c:48:f1:62:
                    6e:b3:6c:d8:28:b9:80:d0:d4:7e:88:8d:28:bb:7c:
                    66:c6:d9:d8:e6:db:a8:45:a6:2d:dc:ed:a1:64:e2:
                    cd:cb:50:96:41:c4:61:67:3b:74:6a:50:f9:a9:4f:
                    76:97:4a:9f:a3:08:c5:fe:21:06:ae:8c:a0:6e:73:
                    5f:f8:ae:7f:77:b1:d0:29:0d:b4:cf:c4:ad:30:18:
                    ca:2a:07:7e:ec:b4:11:ed:12:2e:03:c1:1b:73:0a:
                    5e:71:39:3d:2c:dc:54:45:3e:c6:15:0a:0d:39:16:
                    44:64:a8:75:b2:6c:f2:d5:37:c2:54:a9:0a:aa:c9:
                    de:90:52:e0:51:de:be:28:81:31:7a:9f:e0:aa:90:
                    1f:42:9f:2e:80:db:22:55:64:fc:0d:a1:83:6d:3d:
                    79:9f:fb:0d:75:c9:9b:23:11:33:c9:c4:5c:54:00:
                    6e:9d:16:a6:56:03:c3:f1:33:ad:78:ae:99:26:b6:
                    12:6a:f7:8d:7c:7c:53:21:97:d2:aa:fc:37:c6:a1:
                    8b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:25:AE:80:F7:A4:84:40:A8:E1:6B:B7:E3:78:BE:E1:F2:D4:D7:C6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F5C5028962411F19EAD40BBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:e6:8d:a4:fa:02:57:28:3e:13:66:93:73:84:20:f4:e5:a1:
         07:eb:b2:8c:3c:74:04:29:07:4c:c9:b3:15:c9:3b:66:4d:b5:
         79:32:f0:bc:e1:cb:48:6c:1a:76:e7:ce:d8:e0:ea:cf:3b:ff:
         0b:f0:76:28:4f:cb:6c:45:27:f3:c4:1b:87:16:dd:86:c6:49:
         d9:b9:55:0a:23:98:6b:95:21:04:2a:88:73:df:7a:76:c4:30:
         d8:e5:36:f0:7a:f5:11:e8:6d:ab:35:3c:3a:65:0a:25:3b:ee:
         7e:f1:55:05:75:0c:e8:a5:47:5e:f2:6b:6b:5c:8a:da:31:88:
         29:c1:59:08:70:00:f2:f5:e2:26:4c:be:7f:61:30:d6:04:9f:
         e2:7b:5c:7d:67:e9:13:49:88:f9:81:bd:4c:39:44:b8:c0:e7:
         2d:19:49:d5:5d:df:a8:fd:4c:d1:52:05:05:ae:82:70:c9:b8:
         4b:71:b9:d2:ed:b5:f3:41:57:5a:1c:22:49:fd:b0:f0:93:44:
         bc:25:b6:19:7e:2b:9c:79:6d:0e:3b:24:a5:86:51:09:0f:07:
         4d:70:f4:f9:92:9f:47:10:9f:f6:47:85:da:35:51:54:db:2a:
         a3:a5:3e:38:80:d0:e5:8c:95:8b:1d:b3:f3:3d:5e:af:26:c7:
         8c:56:96:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----