Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22F145649B9F11F1BB5E2FFDCE1D38B0.roa
File:                     22F145649B9F11F1BB5E2FFDCE1D38B0.roa (raw, json)
Hash identifier:          UM0TKaAw+KGlJUoQH9k1yDn+x6Kz3x1CrvRY8dAHXHQ=
Subject key identifier:   2B:0D:76:B8:AD:0A:D3:82:CF:BC:30:3B:95:8C:1A:B2:3F:29:CF:6D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE20
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22F145649B9F11F1BB5E2FFDCE1D38B0.roa
Signing time:             Wed 19 Aug 2026 07:25:22 +0000
ROA not before:           Wed 19 Aug 2026 07:25:18 +0000
ROA not after:            Sun 08 Nov 2026 07:25:18 +0000
asID:                     219499
IP address blocks:        156.236.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118304 (0x1ce20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 19 07:25:18 2026 GMT
            Not After : Nov  8 07:25:18 2026 GMT
        Subject: CN=6a855a62-362f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:33:da:09:5d:78:a5:c1:a2:6a:81:46:c0:
                    70:d1:36:62:89:41:c3:e5:45:d3:2b:c9:12:13:bf:
                    fe:e5:4f:b4:c4:01:6d:c0:54:1f:39:c6:db:18:35:
                    08:33:20:6a:f5:68:1f:c7:9a:6d:d3:3f:47:35:dd:
                    c4:39:47:cb:6a:3d:bf:29:5b:5e:9a:d9:e8:cf:cf:
                    9a:a7:31:3a:9e:9a:68:9d:cc:55:bb:83:55:ec:d1:
                    29:86:11:76:ae:c7:6e:36:cb:c6:44:08:f6:83:0a:
                    e0:00:47:91:63:c2:d9:e4:02:1c:ee:25:8b:7c:e2:
                    47:50:b7:90:01:6e:ad:11:89:d7:5f:3b:45:d5:8b:
                    bf:05:0d:80:d6:71:1d:42:59:9c:22:38:d9:45:c5:
                    f2:f0:46:85:e4:ea:7f:10:b7:a6:36:ea:91:70:b1:
                    f7:f3:ea:c7:f6:83:fd:d8:81:6f:a9:75:5f:aa:5c:
                    a0:ea:ca:98:4b:24:48:67:d1:36:70:0c:b3:bb:53:
                    d6:0d:e8:5b:24:ea:8d:f0:17:ed:cf:c2:03:2b:6b:
                    39:05:9a:4a:c9:1d:2a:0a:e6:a9:24:92:31:db:1d:
                    d3:a8:a2:72:69:39:24:18:0c:fd:15:15:0f:48:27:
                    96:d8:02:77:bb:6e:aa:6d:30:1e:f2:27:aa:9c:e1:
                    7c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0D:76:B8:AD:0A:D3:82:CF:BC:30:3B:95:8C:1A:B2:3F:29:CF:6D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22F145649B9F11F1BB5E2FFDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:34:50:37:b1:11:b0:47:7f:1d:73:e2:ca:f7:05:d8:65:22:
         d5:c1:06:11:d0:8c:8a:75:23:41:5f:64:66:0f:78:ed:04:aa:
         a4:c5:a5:b8:ca:9d:30:ad:8a:3c:b1:70:88:46:ab:4a:70:80:
         30:b0:34:c4:53:14:f9:d6:5e:21:bf:64:64:28:f3:97:95:38:
         f5:77:10:04:d0:78:fd:90:c0:b2:cd:5c:3a:b2:de:0e:f8:fb:
         64:61:18:7b:03:ab:56:16:7d:41:e3:7d:9d:f0:81:87:d1:9b:
         e2:00:57:64:21:8d:34:61:4a:44:d8:c0:8b:43:77:91:7d:b0:
         1f:ef:23:39:ca:de:45:df:b7:ae:58:3b:9a:69:60:56:3f:32:
         1f:4d:10:8f:6b:14:61:a7:78:a2:fb:54:6e:ee:75:c9:01:65:
         c4:34:78:54:5f:0b:3c:a6:a4:f0:d3:91:34:f4:42:35:4d:cc:
         4d:16:05:4d:b2:1d:bb:c2:43:7e:dd:60:5f:df:18:43:63:c9:
         4e:67:d8:50:b2:6c:89:e8:75:94:df:59:92:b8:ba:42:d3:ac:
         d5:2b:0a:b0:5a:3c:64:86:76:4b:42:3d:f2:3d:53:02:03:22:
         14:9b:53:07:7d:b8:05:d5:71:da:6e:63:ab:f8:0a:5f:91:5b:
         27:64:07:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----