Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EB703B8955E11F1B516CE0DCF1D38B0.roa
File:                     1EB703B8955E11F1B516CE0DCF1D38B0.roa (raw, json)
Hash identifier:          qWKRDck9UvUaoM5IpUAgBFl3Hz/wqCo7G5fNeUAvHw0=
Subject key identifier:   D4:66:AB:3C:22:17:5D:02:F5:C5:16:80:68:FA:A5:23:59:A6:CA:1F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CB77
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EB703B8955E11F1B516CE0DCF1D38B0.roa
Signing time:             Tue 11 Aug 2026 08:24:50 +0000
ROA not before:           Tue 11 Aug 2026 08:24:46 +0000
ROA not after:            Wed 09 Sep 2026 08:24:46 +0000
asID:                     274065
IP address blocks:        156.238.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117623 (0x1cb77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 11 08:24:46 2026 GMT
            Not After : Sep  9 08:24:46 2026 GMT
        Subject: CN=6a7adc52-d5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dd:3d:59:32:de:59:38:8f:52:3a:7a:f1:c0:
                    f3:07:da:c9:73:3b:34:38:86:d2:bf:ca:82:f7:47:
                    76:09:1f:9c:1a:52:c4:e1:dd:57:fa:40:41:c6:3b:
                    18:a8:3f:82:68:52:6f:74:3a:35:ea:ad:e9:e2:e1:
                    b9:d7:10:28:74:5d:07:d5:d6:d8:5f:f8:87:a3:c2:
                    39:0e:4f:e5:d0:e2:c5:47:91:23:62:51:cb:71:f1:
                    02:05:85:4e:32:7e:7b:20:54:31:91:bc:da:ee:66:
                    1e:7e:8c:00:ea:d9:5d:f9:42:4d:ac:77:bf:c7:ee:
                    25:b7:34:8c:41:37:da:cc:ff:01:a7:87:c3:ec:05:
                    30:7f:a0:5c:13:05:12:df:e1:52:05:2e:79:be:16:
                    63:d1:05:fc:91:5e:07:11:e4:d0:be:9e:a4:ef:8b:
                    ce:08:b3:f8:e2:91:8a:5e:cb:2e:0f:10:7d:52:5e:
                    4a:90:eb:52:3e:c6:da:95:89:55:6d:c7:0c:7d:4c:
                    3a:c3:d1:91:18:7e:ec:0f:b4:1d:a3:5c:49:0a:5a:
                    e8:90:92:e0:8d:28:dc:58:08:1d:d9:64:7a:04:30:
                    52:f7:a1:0d:bd:0e:f6:54:dc:2e:31:85:ad:d2:e4:
                    ad:80:34:90:5a:78:48:68:37:0f:ec:a0:f8:39:dd:
                    ab:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:66:AB:3C:22:17:5D:02:F5:C5:16:80:68:FA:A5:23:59:A6:CA:1F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EB703B8955E11F1B516CE0DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:79:0a:ec:04:cc:46:20:8f:5b:4a:c0:a1:62:2a:7d:67:d4:
         d1:90:1f:46:e3:0f:2e:db:5e:35:89:ca:7a:e4:a0:14:fa:db:
         bc:6a:4f:21:72:5e:79:48:e7:03:eb:0c:ab:66:ca:dd:1f:31:
         1d:c6:13:7a:6e:43:51:01:43:9e:7a:22:19:00:66:fb:99:72:
         14:9a:8a:a3:8a:90:0f:93:0e:ff:0b:b0:23:60:20:9c:29:c4:
         9d:a0:ee:39:08:5f:79:d4:97:0f:61:6a:e7:d6:d6:ce:ec:d4:
         15:3d:89:2c:80:cd:66:98:92:d6:0c:45:17:fe:a5:7f:72:e8:
         c6:fa:d8:8e:02:e9:f9:5b:d1:ec:52:bc:bd:72:fa:e2:ae:7b:
         85:83:58:02:4c:f5:44:ea:f7:a1:0f:7f:57:8d:2e:59:97:57:
         29:f2:33:47:24:7d:6a:75:1b:15:61:da:ea:1a:01:8e:60:a8:
         5e:c2:6c:93:37:66:7d:c6:4d:0a:7a:4a:6a:21:30:fa:82:93:
         67:47:2f:39:60:9f:3d:a7:40:35:16:eb:b8:23:a2:59:34:a2:
         73:23:1a:37:df:d5:62:b4:0e:13:63:d6:6c:9f:29:58:12:52:
         6f:fc:e6:36:7d:13:6e:71:59:a6:3d:32:ba:cc:e8:50:eb:eb:
         51:c2:79:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----