Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B063C4CC93911F19FADD1EACE1D38B0.roa
File:                     2B063C4CC93911F19FADD1EACE1D38B0.roa (raw, json)
Hash identifier:          u6KVwspxfbOfpig+jcSY3dMsJcyVnutzfPml5LUV4TQ=
Subject key identifier:   83:7F:84:5B:02:68:D7:2D:47:D2:3D:36:57:BC:D6:E0:AA:D1:BC:85
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DDE0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B063C4CC93911F19FADD1EACE1D38B0.roa
Signing time:             Fri 16 Oct 2026 08:11:20 +0000
ROA not before:           Fri 16 Oct 2026 08:11:15 +0000
ROA not after:            Fri 20 Nov 2026 08:11:15 +0000
asID:                     214432
IP address blocks:        156.254.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122336 (0x1dde0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 16 08:11:15 2026 GMT
            Not After : Nov 20 08:11:15 2026 GMT
        Subject: CN=6ad1dc28-1645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8f:05:9f:43:bb:e8:39:7d:2f:24:a4:6e:a6:
                    a1:53:5a:7f:c3:32:18:dc:0f:4f:98:3a:21:f0:25:
                    09:c6:a2:55:84:e0:d9:35:7d:b5:8c:ba:a4:f9:78:
                    69:30:cf:34:68:e3:2e:b1:fa:b7:d5:08:64:d2:52:
                    2d:3a:f0:5c:ad:12:93:58:76:5c:e6:0c:31:c1:49:
                    e8:0b:1b:af:6e:8a:17:04:40:f1:bd:bc:02:c9:4a:
                    27:79:a1:11:47:93:eb:c6:f3:d8:36:aa:56:fe:78:
                    0c:a4:46:c9:1d:cd:ac:cc:10:52:d6:36:d8:d9:cf:
                    2e:c4:fb:66:a7:70:75:80:59:ec:49:c3:94:a9:bd:
                    73:45:94:4f:9e:1f:58:4c:c1:65:ee:e6:4d:fd:79:
                    b3:b4:0b:d8:2e:c4:82:b0:df:92:56:b0:41:49:c8:
                    1e:db:32:26:d9:5d:0a:ef:e5:b8:33:5e:d8:38:97:
                    9d:7b:75:c3:42:1e:8e:3e:be:6b:34:fa:24:f2:af:
                    04:84:61:4b:a2:29:72:04:48:3b:2d:2a:7e:fd:1d:
                    4a:30:93:55:a1:88:b0:b4:5d:c8:3b:92:2d:5c:ef:
                    38:90:f9:30:81:8a:ef:80:fa:7b:74:74:56:a7:2c:
                    77:6f:f5:24:55:ba:05:5b:54:38:6a:f9:dc:28:41:
                    6e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7F:84:5B:02:68:D7:2D:47:D2:3D:36:57:BC:D6:E0:AA:D1:BC:85
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B063C4CC93911F19FADD1EACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:d6:24:98:03:c3:31:9b:47:5e:a3:08:8e:ec:5e:55:0e:f9:
         ec:09:bb:fb:6d:f7:1c:85:a0:fb:f8:c1:03:7f:cd:76:06:67:
         3f:6d:d7:f8:35:fa:38:2f:03:cf:31:c4:c9:a3:a5:49:f4:88:
         05:0a:e5:ce:dd:da:b0:e0:22:64:20:6e:57:8d:f6:9d:22:c4:
         3c:3e:57:4c:04:48:c2:61:12:64:32:45:7f:28:16:7f:ee:12:
         93:bb:66:d6:a9:22:cb:a7:14:1e:72:58:9d:99:c7:24:0a:fe:
         b9:01:9c:d5:61:9e:d8:7c:b8:34:f9:a7:3e:e1:da:23:e8:30:
         6d:41:b0:0e:79:11:07:40:9f:9b:be:42:7f:48:60:75:25:ed:
         a6:99:21:ad:0e:bc:78:c2:f6:0f:83:cc:f0:1c:8d:c5:2d:f1:
         e7:ea:9e:ff:fd:63:93:ff:88:ac:b9:d3:90:e1:9a:5d:48:82:
         38:08:0b:4f:c0:51:81:34:c4:7e:08:8a:c7:ca:3b:e3:0c:ae:
         9d:e1:a4:ca:01:65:a3:0d:54:85:87:11:94:87:4a:92:86:1e:
         fc:80:3c:a2:e8:a6:d3:bb:9a:9c:92:44:fc:42:e0:d4:be:ec:
         b8:be:e0:ca:b0:d8:e7:e3:0a:a8:f4:e6:8e:1a:97:ad:34:73:
         12:46:ed:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----