Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37122012C87811F19BA6A1FDCE1D38B0.roa
File:                     37122012C87811F19BA6A1FDCE1D38B0.roa (raw, json)
Hash identifier:          rfybtVKy5IJCl03cB0ZK1G46F3uIk3nvFhlOAu4x2Z0=
Subject key identifier:   53:D1:4B:F4:EB:53:8E:5F:6A:C9:2F:0D:8F:8B:C9:7C:56:64:3A:64
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DDAB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37122012C87811F19BA6A1FDCE1D38B0.roa
Signing time:             Thu 15 Oct 2026 09:10:07 +0000
ROA not before:           Thu 15 Oct 2026 09:10:02 +0000
ROA not after:            Sun 22 Nov 2026 09:10:02 +0000
asID:                     8796
IP address blocks:        156.233.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122283 (0x1ddab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 15 09:10:02 2026 GMT
            Not After : Nov 22 09:10:02 2026 GMT
        Subject: CN=6ad0986f-3893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:d4:f6:3b:8a:e3:ed:40:5a:c5:a5:0b:46:
                    a8:eb:9c:45:1c:8e:50:c0:a0:8e:c8:11:8b:51:c6:
                    52:eb:e0:15:6a:1f:cb:21:de:19:ba:d5:ca:2b:d7:
                    9f:93:c8:a9:bd:35:48:7e:2a:5d:7a:c2:6b:d6:5d:
                    60:7a:b4:ff:97:34:b6:99:01:33:d2:6e:83:ab:aa:
                    ee:09:93:2d:d9:e8:73:89:cb:11:ce:54:5b:bd:36:
                    13:f3:3c:f2:f2:27:9e:d7:9d:ce:65:d3:3e:7d:0c:
                    98:22:d6:58:d7:ac:de:fa:0b:7c:cc:e7:1a:0f:1d:
                    a7:5b:16:50:05:ae:d2:47:c0:47:af:9a:40:a8:5e:
                    06:50:a9:93:b1:b8:86:fc:2b:5f:c4:3e:44:ce:88:
                    28:6b:49:fa:69:4c:18:8f:a9:ce:32:c2:c6:21:47:
                    55:bb:15:c7:a0:32:db:ea:16:33:68:8b:08:b2:de:
                    b1:ca:14:68:32:e3:85:0a:f0:23:a2:22:42:e5:ea:
                    b5:10:f0:50:1c:77:e2:7b:19:d3:36:73:f0:db:5d:
                    92:16:08:51:b5:ba:d9:1e:79:2c:2a:3b:ac:f5:91:
                    b8:e5:cb:aa:94:f2:b0:ce:e0:dd:f8:1c:bd:c8:1d:
                    8a:56:36:b4:1e:46:70:97:6f:8b:28:cb:f8:fc:5e:
                    83:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D1:4B:F4:EB:53:8E:5F:6A:C9:2F:0D:8F:8B:C9:7C:56:64:3A:64
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/37122012C87811F19BA6A1FDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         33:4d:ef:a7:81:f0:b9:5a:a4:3d:e7:5a:aa:f6:cc:68:43:c7:
         5e:27:21:2b:c8:69:76:96:43:cd:64:8f:ff:98:46:06:e4:39:
         aa:02:2f:9c:5a:91:66:bc:24:26:a2:65:e2:6b:93:99:88:85:
         df:51:cc:df:6e:60:db:07:b3:d7:e6:14:96:77:20:db:c9:eb:
         62:4f:5e:89:87:99:12:8e:02:26:72:ec:42:77:6a:0c:bb:ba:
         17:8b:21:a3:e6:6f:72:ed:21:5e:55:2b:e2:cc:87:3e:14:a3:
         1c:85:c1:85:7d:ac:19:d7:8b:59:6e:3f:b3:16:e2:4c:b7:04:
         9d:e3:8d:cb:a5:20:30:b2:11:89:5b:5c:9b:47:4c:26:aa:92:
         b7:ff:3c:2c:60:e5:2b:76:d9:92:5f:d3:9b:ff:39:a4:f4:6a:
         f8:44:16:c8:d9:61:83:05:c2:84:fd:cf:7e:6c:58:93:3d:0a:
         23:da:f8:6f:c5:d0:43:73:c9:e1:ff:02:68:fb:88:0c:e2:45:
         fd:a5:bf:d0:08:75:35:29:35:e9:50:3d:a5:46:22:72:0f:1d:
         cf:aa:ef:bc:5d:b0:7a:1e:43:6b:bf:49:69:30:6d:32:37:c0:
         5e:97:77:70:83:8d:ed:cc:64:a7:b2:f7:3b:60:69:14:a3:83:
         f4:a0:e1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----