Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D9AAE4AD11C11F1821E881ACF1D38B0.roa
File:                     1D9AAE4AD11C11F1821E881ACF1D38B0.roa (raw, json)
Hash identifier:          Id9kRiERi68H3eKRBN//dpw4gkuAEkXG/TCnzlbNgg8=
Subject key identifier:   DA:84:8A:1D:85:C1:9F:3F:9A:F1:36:FE:5D:57:57:31:66:51:47:82
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01E06B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D9AAE4AD11C11F1821E881ACF1D38B0.roa
Signing time:             Mon 26 Oct 2026 09:03:31 +0000
ROA not before:           Mon 26 Oct 2026 09:03:27 +0000
ROA not after:            Tue 01 Dec 2026 09:03:27 +0000
asID:                     153656
IP address blocks:        156.254.32.0/19 maxlen: 24
                          156.254.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122987 (0x1e06b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 26 09:03:27 2026 GMT
            Not After : Dec  1 09:03:27 2026 GMT
        Subject: CN=6adf1763-729a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:38:4d:b5:53:ce:1f:4c:1f:1a:b0:24:b6:49:
                    43:86:1b:1c:71:15:47:74:67:fc:07:d6:bb:06:06:
                    09:2c:78:6e:1f:19:d2:12:b7:f2:1d:31:02:22:f6:
                    3f:ed:e7:6e:8b:f1:1f:ba:87:ab:e0:16:cf:60:74:
                    03:ed:c8:0c:fe:9b:5a:5d:a7:5d:72:47:73:70:59:
                    5d:7a:0b:6d:35:75:9d:3e:f1:bb:a3:ec:8d:13:5e:
                    c3:cd:54:1f:b8:30:dd:92:c6:f8:8f:4a:dc:6e:7f:
                    b3:bb:03:07:b1:8d:aa:f3:9e:45:d4:da:fa:45:f5:
                    ec:80:9b:5d:43:b2:b8:6f:6b:fa:cb:6d:91:4c:bb:
                    5a:35:22:a9:19:6c:e2:d4:73:8f:07:58:a2:1f:ce:
                    90:85:ac:d0:28:75:4f:7c:61:e9:57:95:6a:02:98:
                    e9:78:5d:a3:ad:fb:7a:66:94:67:49:dd:8f:f3:3f:
                    3c:68:04:37:af:e2:4e:1d:3e:e9:25:e4:42:fe:fe:
                    68:03:b0:55:bf:51:6b:02:b9:cf:73:56:40:90:3d:
                    04:4d:59:e7:8c:d7:30:65:81:33:24:a6:0e:7b:5b:
                    92:ab:53:a7:ea:cf:9b:c9:87:2f:2a:09:f7:7a:09:
                    af:9d:12:52:ab:57:01:65:97:4a:1f:74:4d:27:73:
                    64:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:84:8A:1D:85:C1:9F:3F:9A:F1:36:FE:5D:57:57:31:66:51:47:82
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D9AAE4AD11C11F1821E881ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.32.0-156.254.95.255

    Signature Algorithm: sha256WithRSAEncryption
         9a:5e:ae:ca:7c:53:6a:27:af:6e:c3:44:c4:63:85:13:29:ac:
         3d:a0:b5:67:3b:ea:a3:71:22:b6:d7:8c:d4:2e:30:96:56:df:
         84:1b:ab:f8:16:d6:9b:e6:39:a9:b5:6a:ef:c0:a0:e4:75:02:
         36:d3:2e:ea:72:33:50:2c:e3:b4:09:e4:ce:f5:f9:b7:e8:7d:
         7d:f3:1e:fc:ae:92:ea:69:3e:50:75:fb:41:84:e4:74:9f:c6:
         ff:5f:e6:6d:8a:4d:8a:a8:59:89:5f:7a:6f:a8:01:4b:19:1c:
         3d:12:ef:cc:80:81:f5:d8:33:58:3d:1d:a3:a6:45:39:cd:d1:
         a7:06:19:24:37:f1:6e:6d:ed:3c:a2:cb:ab:17:c7:52:f8:4b:
         04:cf:f4:09:26:80:11:b5:a5:67:cd:55:ef:47:25:10:a5:27:
         8e:bf:7c:c0:09:13:c1:d7:ce:c2:8d:7b:34:12:6c:47:69:ad:
         18:92:01:22:91:a1:e3:7f:42:42:c3:0e:eb:8e:39:a1:9a:1f:
         4d:c3:ca:3d:12:14:a7:a6:fd:24:fb:11:26:62:f0:24:c6:75:
         89:4a:86:cd:2a:30:a5:f8:71:4e:3f:8f:85:de:71:e2:8f:ec:
         6a:b0:3b:11:60:5b:0f:da:5d:28:6f:57:e7:23:78:15:34:f9:
         76:14:10:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----