Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/106A403C9C7911F19523C2A3CE1D38B0.roa
File:                     106A403C9C7911F19523C2A3CE1D38B0.roa (raw, json)
Hash identifier:          EwdqNBsSiaEI86N2cgZuNYLCmzetH/+QzWmUyk7chnY=
Subject key identifier:   5D:58:18:5B:84:BF:A5:01:F7:7B:40:93:6B:19:DD:5A:ED:F9:AF:52
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CEAC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/106A403C9C7911F19523C2A3CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 09:25:21 +0000
ROA not before:           Thu 20 Aug 2026 09:25:17 +0000
ROA not after:            Sun 20 Sep 2026 09:25:17 +0000
asID:                     214432
IP address blocks:        156.254.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118444 (0x1ceac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 09:25:17 2026 GMT
            Not After : Sep 20 09:25:17 2026 GMT
        Subject: CN=6a86c801-31db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:58:ce:79:ff:52:77:8a:26:b4:d6:56:79:d0:
                    7d:97:99:6e:6f:e3:68:5b:7b:7f:f6:ad:7b:d4:96:
                    74:75:19:cd:ce:8f:69:0e:ba:0a:e0:92:8e:a9:89:
                    08:d1:e8:b6:fa:0d:5e:82:93:cb:a0:e6:be:f2:46:
                    ea:55:cb:76:58:e0:60:36:14:94:d2:db:d6:77:b2:
                    a3:82:2f:e1:04:8e:fc:cc:eb:91:52:d7:cc:88:53:
                    4c:13:f3:c0:fe:e9:e7:3a:9e:81:57:ee:66:57:38:
                    91:d2:f3:6f:31:54:02:06:4d:20:ed:30:a6:62:08:
                    a2:e0:14:bd:94:e6:a5:4a:91:28:76:b3:29:73:d2:
                    66:37:57:c5:b0:47:93:42:85:2b:a3:85:01:90:e6:
                    b0:bd:f3:91:c6:9a:34:bb:de:cd:60:a6:36:65:59:
                    49:26:27:5b:00:d7:28:00:c8:47:83:ec:c6:52:c9:
                    0c:09:94:80:23:46:4f:63:bc:56:ea:13:e0:27:54:
                    b6:64:73:e8:19:8e:43:dd:83:bb:18:e3:5e:0f:22:
                    38:bc:b9:fd:04:21:6f:f5:d4:bc:d1:36:17:17:ac:
                    dd:ac:58:29:79:d0:13:c1:3f:bd:b3:77:1f:7c:8b:
                    04:38:24:15:d5:7c:6e:2e:e0:ef:c5:12:6b:ad:8d:
                    5a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:58:18:5B:84:BF:A5:01:F7:7B:40:93:6B:19:DD:5A:ED:F9:AF:52
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/106A403C9C7911F19523C2A3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:63:99:78:2b:e6:a2:dd:94:06:77:b1:e7:33:f3:6a:da:10:
         54:4b:f2:e6:ba:fc:48:c4:03:e5:e7:2d:a3:99:c5:8d:8f:ec:
         89:0e:82:3e:69:72:50:60:fb:1c:44:c3:0e:8b:bc:f7:1b:ca:
         ce:c2:82:72:07:5b:54:d5:a8:73:75:a9:57:08:6c:ef:3e:ec:
         92:d1:97:25:c9:6f:c7:6a:a4:ef:62:4f:ec:42:b8:05:8d:3d:
         c6:a9:27:13:ff:06:a8:c3:97:c4:43:72:98:3e:1c:69:ee:fc:
         19:23:aa:7b:13:59:27:90:64:71:02:81:80:13:54:a3:65:8f:
         1e:fa:40:d6:6f:04:fe:c7:73:b5:9e:fc:97:c1:94:27:e0:87:
         29:b0:e0:53:ac:27:75:88:75:d0:d2:d1:99:3a:ce:79:58:36:
         6d:83:c5:2b:c0:e5:39:ac:76:74:2f:53:d8:6f:80:a3:f8:48:
         bc:6c:66:bc:4b:28:0b:ed:b5:04:3e:10:08:63:b3:d3:5b:3f:
         e9:23:2b:02:4e:f8:01:ea:56:b6:6d:31:29:0a:2d:87:c2:52:
         5c:4c:9d:b3:0c:23:96:08:b4:4b:1e:60:b1:f4:3e:07:79:d7:
         83:a0:ba:90:9b:4b:e5:1a:f2:14:3f:e6:c0:6f:7c:49:97:c2:
         77:2c:3e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----