Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FD77DC8C0B511F1BF7558BECE1D38B0.roa
File:                     0FD77DC8C0B511F1BF7558BECE1D38B0.roa (raw, json)
Hash identifier:          jjoj6TXITWKt7xu83rtgXxXY8vzt+/kN9dv//4H7hhM=
Subject key identifier:   49:5E:B9:1B:CF:61:4B:AA:C7:DE:1A:FF:6F:D0:86:79:8A:E7:00:3A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DB46
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FD77DC8C0B511F1BF7558BECE1D38B0.roa
Signing time:             Mon 05 Oct 2026 12:05:31 +0000
ROA not before:           Mon 05 Oct 2026 12:05:28 +0000
ROA not after:            Mon 09 Nov 2026 12:05:28 +0000
asID:                     139238
IP address blocks:        156.238.64.0/24 maxlen: 24
                          156.238.65.0/24 maxlen: 24
                          156.238.66.0/24 maxlen: 24
                          156.238.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121670 (0x1db46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  5 12:05:28 2026 GMT
            Not After : Nov  9 12:05:28 2026 GMT
        Subject: CN=6ac3928b-a638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bd:5a:ee:6e:85:87:3d:51:f2:ba:73:b1:59:
                    fc:02:78:9a:fc:e3:9e:52:fe:82:40:e0:5b:3a:12:
                    94:45:37:0e:3a:3d:95:44:57:a5:05:97:9c:ca:0d:
                    2a:62:59:2b:32:92:92:28:11:36:37:0e:e0:6f:4a:
                    65:bf:b8:5a:4a:06:c0:04:96:29:35:56:d6:90:96:
                    68:51:a3:2e:cd:50:ae:da:d3:29:bc:20:7a:6d:11:
                    90:bd:13:2b:9b:dd:d0:78:c5:85:36:76:3a:2b:af:
                    35:22:67:18:38:b0:79:5a:16:cb:fc:ac:ef:07:90:
                    fd:b4:3c:e5:3d:9f:a3:aa:a7:b2:3d:3e:dc:4d:d1:
                    6b:3a:02:bb:b8:39:2e:c3:98:c1:23:4b:ee:7c:10:
                    42:aa:e1:db:33:f3:d5:b2:8a:d1:e3:11:cf:b5:4b:
                    c2:7e:92:31:98:67:8c:b4:0f:78:2b:cd:cc:c8:43:
                    01:fc:0c:45:30:15:3c:ba:cd:46:2b:50:b2:86:27:
                    72:1b:57:38:87:62:af:10:f8:7f:91:07:1a:d8:c2:
                    31:34:25:eb:fc:3e:19:4b:c0:1f:fd:b4:48:89:4b:
                    8c:12:6d:48:89:ac:74:98:e6:dc:4b:4b:f7:c4:f0:
                    b4:30:78:6e:ff:24:84:3b:89:64:ec:cb:0b:84:55:
                    17:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5E:B9:1B:CF:61:4B:AA:C7:DE:1A:FF:6F:D0:86:79:8A:E7:00:3A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FD77DC8C0B511F1BF7558BECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:29:5c:76:fc:c4:12:bf:e1:84:78:6c:85:f6:50:8c:da:4c:
         90:1b:11:57:5c:7f:a4:a7:2a:85:78:ac:49:60:9a:40:16:b8:
         1f:28:a7:cc:1d:9b:4a:3d:82:37:6e:12:49:fe:14:e6:c8:cb:
         cd:c7:26:dc:97:b3:61:93:aa:bf:45:28:65:7d:71:64:76:55:
         c1:e6:04:fb:f7:ad:fd:d5:9f:cb:20:0a:33:95:e9:b0:0a:7c:
         7f:0f:c5:ec:bc:a7:c9:5c:70:46:d3:e1:ed:b8:7c:a7:9f:3f:
         57:87:8f:65:ea:59:0f:b2:6e:fe:37:2b:2a:d9:d0:9d:e1:5c:
         09:69:37:0b:48:46:10:f4:3c:52:5f:f8:0e:b3:4d:26:a4:bc:
         41:92:09:65:f4:39:85:ed:40:aa:86:02:89:5b:5d:04:22:b9:
         fb:fc:7a:5b:0a:ae:75:55:fc:6d:4f:44:52:7b:0c:e0:f3:db:
         86:e4:e4:5c:b7:6c:94:b9:f1:1a:13:1d:ff:ca:c8:6f:bb:84:
         a2:17:6a:d6:f1:df:55:95:5a:1b:6b:8f:44:23:3d:08:04:43:
         b7:81:fd:9c:08:dc:eb:e8:78:2e:5d:66:a8:e2:1b:21:6e:72:
         f0:ec:07:97:8d:60:9b:56:a3:fd:66:9f:97:c2:d0:ec:a9:ac:
         b5:4a:3d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----