Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2508FB649D3711F19691C0A9CE1D38B0.roa
File:                     2508FB649D3711F19691C0A9CE1D38B0.roa (raw, json)
Hash identifier:          fUX05bKRDXlJvP/KFLWSvuUPKaAFSVRJogd0bvUZZdE=
Subject key identifier:   A1:C0:07:68:F6:A4:95:8B:84:DA:59:E5:3E:F6:69:36:A3:CC:35:36
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CF6F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2508FB649D3711F19691C0A9CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 08:06:00 +0000
ROA not before:           Fri 21 Aug 2026 08:05:56 +0000
ROA not after:            Tue 24 Aug 2027 08:05:56 +0000
asID:                     138415
IP address blocks:        156.247.32.0/19 maxlen: 32
                          156.247.32.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118639 (0x1cf6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 08:05:56 2026 GMT
            Not After : Aug 24 08:05:56 2027 GMT
        Subject: CN=6a8806e8-396c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2e:3d:b8:93:e3:91:2a:31:3a:c9:ba:4c:b7:
                    28:e5:24:55:64:09:a5:60:5d:be:e8:20:4e:ff:79:
                    2e:cc:80:00:f0:d0:75:8e:75:7f:04:a9:74:eb:18:
                    87:95:a1:a6:e2:4b:45:e8:af:7f:18:81:f5:de:73:
                    63:ae:54:f4:8b:dc:29:31:91:fb:f3:60:b9:3e:2a:
                    01:c7:75:b8:85:4a:22:ef:76:3b:e2:a9:5b:d4:7c:
                    a0:1b:5d:b8:38:3b:93:dd:a5:eb:96:a6:eb:9d:c7:
                    17:91:00:dd:14:94:b4:71:79:1d:d3:10:89:91:61:
                    ed:7a:56:17:f2:64:94:8d:b6:a4:05:3c:66:85:3b:
                    03:ba:69:a5:28:41:5a:6b:74:14:ab:5f:1c:8f:a1:
                    4a:b8:21:64:3f:d7:1b:de:b7:99:ef:6f:f0:73:f4:
                    96:ec:85:37:f7:e5:aa:ec:64:c1:96:8d:4b:cf:ec:
                    c9:92:a8:e8:c9:32:c5:7a:0e:03:80:53:8f:18:65:
                    23:9f:33:fc:97:90:1c:23:a3:ae:a4:38:38:1d:b5:
                    33:ad:11:bf:77:76:30:0e:62:b2:64:d7:be:99:14:
                    19:c6:59:00:e1:65:7d:45:13:e6:61:d1:b0:56:e4:
                    ef:53:e7:a9:8b:7e:55:93:55:7b:53:f8:b4:5b:20:
                    b8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C0:07:68:F6:A4:95:8B:84:DA:59:E5:3E:F6:69:36:A3:CC:35:36
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2508FB649D3711F19691C0A9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:d2:48:04:f0:f8:ef:71:c3:20:e1:08:5d:d4:39:34:a4:e6:
         86:32:11:0b:98:23:21:40:1c:11:80:98:7d:d0:93:cf:36:f1:
         7e:e4:4c:98:df:41:32:61:fb:0c:a8:cc:8c:5e:e9:36:64:33:
         c2:46:df:18:c7:64:cf:56:2f:31:1b:f1:48:46:3b:fe:a8:fe:
         59:54:79:68:9f:d5:9d:ae:fe:82:e3:55:29:8d:ad:4b:ec:1d:
         7b:09:04:58:f2:f9:85:bb:7a:c0:21:84:07:1e:3d:18:5f:09:
         eb:de:a5:0b:db:a3:6e:aa:b2:68:f5:7c:7b:2e:31:fd:23:37:
         c9:70:fd:da:0b:bf:c1:ec:97:fb:bd:13:b3:ca:34:88:30:ed:
         4c:d9:f4:bc:eb:2a:dd:d7:60:db:df:5f:cb:a5:a5:7e:76:88:
         ed:b5:5f:de:09:16:b8:d7:3b:41:43:d6:2d:ba:02:80:9e:1a:
         c8:48:68:4d:d5:72:d5:20:5a:b3:4c:0e:87:a1:44:06:92:3a:
         bf:13:4a:11:40:50:0c:27:b4:60:67:d4:49:65:b9:67:a4:d9:
         b7:98:c7:eb:f4:bd:e8:17:46:7b:dc:6c:de:06:ba:19:13:1b:
         1f:a2:9e:ad:87:21:24:28:a4:34:3a:7e:f8:e7:5a:18:d8:99:
         4a:fb:d3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----