Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BA11B74CB8B11F1AB28DD0BCF1D38B0.roa
File:                     1BA11B74CB8B11F1AB28DD0BCF1D38B0.roa (raw, json)
Hash identifier:          9FfFz6AdY+LXtufq3lOer9eYIsAOpcu6PNxTLvBSbFY=
Subject key identifier:   9D:9E:8E:38:DA:AC:38:57:66:C1:1D:07:C7:3D:0F:E9:9E:DB:8F:EC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DEB2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BA11B74CB8B11F1AB28DD0BCF1D38B0.roa
Signing time:             Mon 19 Oct 2026 07:02:55 +0000
ROA not before:           Mon 19 Oct 2026 07:02:50 +0000
ROA not after:            Thu 03 Dec 2026 07:02:50 +0000
asID:                     62563
IP address blocks:        156.233.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122546 (0x1deb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 19 07:02:50 2026 GMT
            Not After : Dec  3 07:02:50 2026 GMT
        Subject: CN=6ad5c09f-a8c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:25:3d:1c:4c:98:fd:3f:de:0c:a4:e8:0d:f5:
                    47:2b:75:9f:c2:59:b3:d2:87:01:20:9a:ce:1c:ee:
                    57:df:0d:bb:c3:ee:20:64:98:80:eb:12:63:ce:e1:
                    d2:90:97:8b:05:79:df:03:b6:19:25:8d:d6:3f:8c:
                    8a:eb:b1:79:80:2f:64:00:e9:93:67:e9:a6:bd:29:
                    69:c7:97:f9:38:b7:d3:02:2d:88:78:3e:52:ca:fa:
                    0f:98:00:f1:4f:e3:d2:bb:a2:8e:58:d0:81:95:05:
                    26:54:b3:7a:0c:fe:ec:6c:f6:79:31:aa:2f:21:17:
                    f1:74:55:78:e6:d3:b9:80:32:fa:30:5a:6d:30:fc:
                    c1:3b:bb:63:e4:bb:ae:c9:a5:7a:3f:df:3e:2a:94:
                    e4:21:a9:40:bb:6a:d9:bd:e0:95:57:72:d7:eb:50:
                    95:18:5a:96:1c:36:9d:46:f0:f8:1b:b2:15:9e:0d:
                    e2:71:f3:33:8f:02:f9:18:dd:ab:a7:82:71:6a:9c:
                    b7:db:35:ef:3c:aa:be:c9:15:a4:79:5b:ec:05:eb:
                    1f:fe:53:db:7d:ab:11:b9:85:41:3f:c4:7d:ee:c7:
                    45:11:3e:e1:6c:ef:0c:92:e2:48:91:e7:f0:06:46:
                    8f:f8:a4:c0:9c:a9:18:80:5d:7c:7b:98:61:8c:26:
                    c7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9E:8E:38:DA:AC:38:57:66:C1:1D:07:C7:3D:0F:E9:9E:DB:8F:EC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1BA11B74CB8B11F1AB28DD0BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:df:c2:6a:67:96:fc:b4:d1:8c:36:f9:7a:cd:2b:d1:7c:a6:
         06:ae:8f:3b:02:e7:7f:3d:74:f8:f0:c0:14:86:97:5a:03:f5:
         3c:27:5f:4c:85:fa:94:81:6e:f2:4c:16:66:cb:b5:13:e8:f7:
         c8:30:aa:88:96:26:16:13:62:42:51:44:bd:d9:fe:1e:fc:42:
         2c:db:60:da:b9:fa:c2:7d:aa:de:f5:25:0e:13:85:f9:d2:c1:
         3f:4d:e9:67:fa:78:19:42:d1:1a:da:2e:e8:11:79:2e:dc:e1:
         b9:3e:6a:e3:93:3b:58:66:0e:ae:77:68:41:a6:47:60:b9:57:
         40:da:f5:2f:37:c7:14:4c:d3:5d:0d:fb:86:ae:6c:5c:b9:50:
         9d:2c:eb:5f:cb:df:3a:95:20:70:23:44:a6:ad:c5:c1:51:ae:
         c6:20:10:fa:93:b8:94:90:3f:5e:2d:c0:34:c2:bd:b7:72:3e:
         62:4d:b5:58:b2:70:ae:68:ab:c9:11:aa:84:94:c4:14:67:a6:
         5c:2d:42:b3:1d:08:f9:ee:cf:40:69:e3:1d:69:bd:0e:ce:e0:
         b3:65:b2:e5:75:ac:5c:c4:a1:d7:2b:54:90:b2:63:50:b2:31:
         d7:cc:1e:de:e6:3d:8e:b6:19:e4:ad:b3:b3:19:37:28:50:cd:
         d7:b1:3e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----