Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32BB402EC89211F1B5512EA4CE1D38B0.roa
File:                     32BB402EC89211F1B5512EA4CE1D38B0.roa (raw, json)
Hash identifier:          xl5fAtDtMtALpXm2T3kV5bRNGpidZ9uBwBdANEG/AD0=
Subject key identifier:   FB:1C:93:94:7F:70:89:91:A3:5D:71:92:50:97:91:85:14:8B:E3:44
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DDC1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32BB402EC89211F1B5512EA4CE1D38B0.roa
Signing time:             Thu 15 Oct 2026 12:16:07 +0000
ROA not before:           Thu 15 Oct 2026 12:16:03 +0000
ROA not after:            Tue 24 Nov 2026 12:16:03 +0000
asID:                     63099
IP address blocks:        156.225.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122305 (0x1ddc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 15 12:16:03 2026 GMT
            Not After : Nov 24 12:16:03 2026 GMT
        Subject: CN=6ad0c407-2913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:07:63:25:a8:9b:52:ac:af:40:86:7e:fc:
                    10:c9:89:6d:f8:a6:2e:9b:ab:b5:6d:24:a8:b4:8b:
                    4e:8b:a8:f6:f4:ec:e7:c4:97:a4:99:37:0a:32:ed:
                    fe:49:ed:2d:81:3a:bf:35:58:9f:ec:d1:72:ac:a4:
                    0c:83:3b:cf:c0:6e:00:ab:c6:71:d8:be:c1:52:2d:
                    cf:1e:6a:9d:12:94:ac:c4:bf:7f:e5:a9:8c:98:28:
                    b8:5b:d8:92:4d:30:5c:11:6d:b0:c8:7d:bf:1b:85:
                    c1:7e:6b:f0:a9:5f:4a:08:3b:3e:6c:fa:82:93:cc:
                    d0:68:fa:f7:97:65:e9:2b:cc:7e:aa:c6:73:5e:21:
                    bf:02:de:ea:6e:bd:0f:35:34:d6:e1:36:35:6e:ef:
                    22:c3:a0:ba:f8:25:20:96:6e:de:d0:21:80:aa:c9:
                    c9:04:b4:01:86:b3:13:db:bf:ee:f5:26:6a:f1:64:
                    6a:01:40:9a:b0:c2:7e:a2:c1:12:b1:cc:b0:f5:a5:
                    4e:a6:8d:47:42:48:2d:1a:0d:f5:27:70:c9:7d:4e:
                    47:53:e5:6a:f3:0f:f6:1c:ca:98:bb:44:ec:d2:b0:
                    36:e7:5a:1b:f7:7a:74:9a:6a:b0:17:37:c5:f2:40:
                    ce:76:cd:fe:1c:6e:a1:7a:5f:d7:ec:19:74:92:aa:
                    c7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1C:93:94:7F:70:89:91:A3:5D:71:92:50:97:91:85:14:8B:E3:44
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32BB402EC89211F1B5512EA4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:51:e9:3c:52:08:fa:52:37:fd:b8:ee:12:f2:3c:7d:79:e0:
         05:70:3f:57:bd:54:ce:5e:db:57:fb:aa:5c:61:04:1e:f5:1b:
         54:28:8f:e6:09:a7:12:e2:36:14:36:32:9f:95:95:57:84:f1:
         9d:8c:be:ad:5e:2f:60:17:1a:4c:53:58:c9:68:23:06:26:47:
         eb:93:24:c2:01:f6:cf:54:70:c0:db:68:7b:7f:52:49:84:2a:
         6e:ba:42:b5:7c:4b:51:a0:fc:5b:f6:c1:be:0e:29:bf:4d:97:
         40:f5:1b:63:23:82:cd:2e:82:a1:cc:88:f3:9e:51:28:a0:96:
         da:33:5b:2a:67:65:33:6b:a2:d7:c8:21:af:43:e2:d0:78:e8:
         5a:02:82:0e:83:12:d8:96:62:a3:c2:ec:16:de:33:ac:57:3e:
         df:b3:ac:2f:92:5c:0a:cd:29:c0:fa:83:9a:28:49:fb:cd:f8:
         4b:68:5d:e1:d5:8d:49:25:2b:c0:6a:98:8e:1a:09:eb:67:d0:
         a4:7a:10:ea:5d:56:47:e7:03:6d:a4:38:12:ea:a3:f3:35:e7:
         51:39:23:47:fd:6b:7c:ae:4a:fc:a4:a5:24:49:41:81:8a:cb:
         10:d6:13:9d:d4:4f:54:18:05:c9:81:30:41:88:d7:54:f5:78:
         3c:d7:8c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----