Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ED7386A955B11F1844AF4F8CE1D38B0.roa
File:                     2ED7386A955B11F1844AF4F8CE1D38B0.roa (raw, json)
Hash identifier:          0AFAUXVYoHHs7lHaVrFAby+WUXTGVrfjWPXBhhSWClI=
Subject key identifier:   03:57:11:DD:C7:53:0C:BD:25:B5:A1:B2:67:75:AA:B5:3F:9A:C2:ED
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CB6D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ED7386A955B11F1844AF4F8CE1D38B0.roa
Signing time:             Tue 11 Aug 2026 08:03:49 +0000
ROA not before:           Tue 11 Aug 2026 08:03:45 +0000
ROA not after:            Tue 08 Sep 2026 08:03:45 +0000
asID:                     21859
IP address blocks:        156.252.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 24 Aug 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117613 (0x1cb6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 11 08:03:45 2026 GMT
            Not After : Sep  8 08:03:45 2026 GMT
        Subject: CN=6a7ad765-10fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9c:ac:87:70:fb:d2:b9:ad:5b:83:1b:08:b7:
                    f4:a6:28:11:7c:fc:20:ab:73:c4:44:a8:c5:f5:b2:
                    f9:ef:6e:82:d3:95:26:b6:23:a3:01:38:68:96:73:
                    a7:b5:91:59:14:b7:25:96:ba:69:50:ef:00:37:a1:
                    2c:99:6b:86:c3:c0:8a:7f:05:cd:8b:c9:e4:03:2c:
                    cc:72:25:3b:a6:60:c1:17:a7:1a:e3:df:52:5f:ed:
                    b3:bc:5c:08:71:01:37:96:14:a1:23:ba:c5:37:62:
                    59:6c:15:bf:52:38:f9:cc:0a:23:10:86:56:d8:18:
                    57:c6:5f:58:8b:16:47:ae:20:fb:7f:c8:20:18:b9:
                    b5:e5:4b:1d:9d:fd:97:89:e9:2c:14:83:b6:d1:e2:
                    04:4f:4c:00:a8:f6:ba:84:81:65:2f:25:44:54:0c:
                    01:91:dd:48:75:9a:f6:0a:ed:f2:9a:08:3a:7d:22:
                    81:9c:1d:6e:c8:73:bb:89:01:fe:8c:12:b2:c6:c5:
                    ae:8b:ec:d7:38:16:1a:ee:8e:2b:24:2d:29:26:42:
                    1a:7e:2e:6c:39:5f:e5:74:6d:bb:3f:a1:8c:64:82:
                    c3:a1:72:ec:91:49:ed:10:03:77:f8:0f:9b:43:5b:
                    89:2d:a3:8d:ed:23:69:1e:0c:1e:85:79:96:8a:5d:
                    1e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:57:11:DD:C7:53:0C:BD:25:B5:A1:B2:67:75:AA:B5:3F:9A:C2:ED
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ED7386A955B11F1844AF4F8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.252.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:0f:c2:ca:92:1d:13:cf:ba:f0:6d:7b:54:d7:2e:8f:d9:e8:
         d8:72:af:fd:6d:f9:88:de:87:bf:ed:13:8d:a4:76:d3:a3:22:
         55:df:05:85:a3:4a:1d:24:df:52:ce:8b:28:fe:7f:dc:b4:63:
         a3:7e:0e:b7:bb:a8:de:a3:8d:8e:c2:9a:f8:62:9b:39:ba:d9:
         06:f2:76:52:78:31:f8:43:8f:6c:69:f9:9e:73:af:e2:af:f9:
         ae:5d:22:94:31:12:ca:c5:7f:52:82:39:2e:76:9a:1f:da:3d:
         25:4a:88:0f:0a:d3:51:22:0d:7d:d8:6f:87:cd:65:5f:ff:37:
         27:35:c9:1b:e6:0b:ad:ca:9d:a9:f3:89:5f:b0:e4:63:51:04:
         c9:55:76:df:d1:0c:94:46:dc:df:69:2f:56:c4:67:b1:91:f4:
         36:35:99:2c:72:f8:2b:8e:6b:6d:bc:5b:50:4e:0c:b6:9d:f6:
         c1:12:ac:c5:73:31:7f:3e:03:2f:d7:ab:bd:03:96:74:49:db:
         49:60:a7:00:ba:5b:28:27:44:5b:6b:e8:9f:6e:a8:79:95:12:
         5a:3c:20:3f:04:64:e6:fc:88:e5:01:ef:a8:25:8a:6e:03:05:
         be:31:0c:b9:fb:f7:51:0b:59:66:13:66:3c:53:49:c1:53:7d:
         f6:c8:6f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----