Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15FC81C2A1F111F181F32810CF1D38B0.roa
File:                     15FC81C2A1F111F181F32810CF1D38B0.roa (raw, json)
Hash identifier:          Pm5v2m5sf3oCm+KqixnAS6IR6wmKpH/46nupV2tVCyY=
Subject key identifier:   D1:A4:FB:57:86:C8:01:29:4F:CB:C8:6B:BA:A0:FF:DC:48:90:84:2D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D17E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15FC81C2A1F111F181F32810CF1D38B0.roa
Signing time:             Thu 27 Aug 2026 08:27:06 +0000
ROA not before:           Thu 27 Aug 2026 08:26:55 +0000
ROA not after:            Sun 04 Oct 2026 08:26:55 +0000
asID:                     14618
IP address blocks:        156.254.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119166 (0x1d17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 27 08:26:55 2026 GMT
            Not After : Oct  4 08:26:55 2026 GMT
        Subject: CN=6a8ff4d9-e2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2d:88:d8:fe:18:d5:5b:10:04:d6:82:cf:ed:
                    ea:ac:51:d1:98:9a:b0:36:12:3c:88:d9:cf:23:0f:
                    75:31:63:4f:0a:c7:29:e1:a0:4d:1c:98:b3:d0:db:
                    a8:c9:e9:b4:f2:a3:99:93:96:4d:26:e7:3e:b9:b2:
                    20:03:06:aa:84:10:0f:1b:13:e7:09:ac:43:73:ec:
                    87:f1:d5:3e:82:46:f8:5a:ba:e6:d5:96:44:df:b0:
                    72:fb:2b:40:18:f2:11:47:04:1f:9d:ab:ca:9f:58:
                    68:56:26:fc:cf:5e:a0:6e:17:6e:20:2e:ff:70:4d:
                    a9:63:bc:b9:6a:f5:89:d3:6b:43:63:43:2b:4e:fb:
                    e3:93:e4:38:12:f9:80:81:92:a6:03:c0:5b:9c:50:
                    9d:85:99:12:36:21:0b:cf:a8:5c:14:0d:90:0b:5a:
                    47:2a:98:5e:ce:fe:36:78:c1:15:de:7d:f6:f8:1c:
                    ef:6a:f9:1e:44:d3:e5:d5:10:63:ce:05:8f:5a:67:
                    22:84:9f:c1:9b:80:b4:68:ee:d3:ee:a4:e3:2d:be:
                    4a:9a:6d:69:db:6c:84:de:d8:b3:6c:22:ee:a8:5b:
                    da:03:e7:e9:3e:ed:db:3e:a6:84:1a:d6:1c:74:74:
                    61:a7:14:3a:b6:af:9d:6e:23:ae:23:5c:99:0e:ab:
                    c9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A4:FB:57:86:C8:01:29:4F:CB:C8:6B:BA:A0:FF:DC:48:90:84:2D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15FC81C2A1F111F181F32810CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:bb:20:60:e6:d5:30:0b:95:e9:ba:94:3a:4e:fb:3a:c5:c7:
         df:04:ed:8c:aa:3b:29:46:1c:cc:d3:ce:39:35:fd:08:7b:0d:
         5a:61:0c:b1:29:b0:d3:1b:8e:3d:3e:13:1a:2d:ab:a6:f9:60:
         3a:fc:0f:74:19:1a:ac:6b:ab:14:39:4b:74:df:5a:10:bc:4d:
         d1:62:74:78:6b:a3:c2:07:67:89:a6:0e:8d:d7:07:c0:3e:5c:
         48:a0:1d:32:d6:c4:07:70:50:63:c3:4a:2e:ef:64:de:a0:f4:
         5f:a7:42:ea:9e:61:ea:4f:a5:0e:3a:6d:b0:1e:9d:8e:92:27:
         f8:07:90:17:a1:d1:d8:e8:2f:54:e3:19:70:33:6b:04:95:15:
         82:70:48:9a:d2:b8:1d:c2:eb:9f:7d:5b:bd:03:60:69:ed:e0:
         1d:e8:8a:c9:b1:5f:f1:08:c8:89:49:c0:72:94:e6:47:f7:e9:
         04:db:07:eb:3a:2d:c9:bf:f3:bb:f0:8b:3c:ad:00:2c:a0:55:
         c2:c9:00:f9:dc:41:6d:af:27:69:1f:eb:6d:08:57:f0:82:cb:
         a7:d7:68:74:31:f8:5b:22:34:09:d7:2b:54:7f:cc:ab:d5:23:
         d9:8f:8f:28:cc:fe:4e:0f:b5:7a:0a:37:f2:01:19:30:10:50:
         0f:e0:d1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----