Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EF1CB7EC8E211F1AE72371ECF1D38B0.roa
File:                     3EF1CB7EC8E211F1AE72371ECF1D38B0.roa (raw, json)
Hash identifier:          tG2JrN2CFgBIfWLZlhRsuzjOoYQaXV7lvbPE/zFyvD0=
Subject key identifier:   B0:8E:06:ED:07:17:31:7A:D9:26:B2:CE:4B:8F:AB:01:0A:9A:B2:A9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DDC3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EF1CB7EC8E211F1AE72371ECF1D38B0.roa
Signing time:             Thu 15 Oct 2026 21:49:07 +0000
ROA not before:           Thu 15 Oct 2026 21:49:01 +0000
ROA not after:            Mon 23 Nov 2026 21:49:01 +0000
asID:                     25198
IP address blocks:        156.252.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122307 (0x1ddc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 15 21:49:01 2026 GMT
            Not After : Nov 23 21:49:01 2026 GMT
        Subject: CN=6ad14a53-d64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7c:b7:06:c7:f4:f1:0f:90:fa:30:30:70:fa:
                    05:05:87:af:67:c0:51:b5:cd:ed:0f:0e:3a:8f:53:
                    85:f4:7c:25:b3:c4:0a:ff:db:13:d8:7d:54:54:d8:
                    33:16:da:24:33:3d:26:f8:41:42:56:13:bc:ea:a5:
                    f3:20:f7:6a:92:53:e8:7b:81:42:32:88:5b:5c:3c:
                    aa:5d:05:55:b2:ee:c8:c7:19:3e:0a:b3:9f:9a:81:
                    43:aa:c0:42:02:94:8e:3c:8b:6e:a1:0e:14:41:f3:
                    50:d2:d5:9b:41:da:c4:1c:96:3d:7c:08:91:32:0f:
                    30:be:c0:1d:bd:0d:be:86:2b:50:a9:33:d5:8a:cd:
                    51:8b:4c:5e:05:da:46:88:03:d5:d9:29:41:ec:5c:
                    58:f8:35:a9:4e:c5:ca:5c:3b:97:a9:8d:7d:5c:48:
                    66:c5:61:ec:90:75:78:78:eb:71:5f:fb:85:54:55:
                    55:f8:c8:88:75:8f:1e:cd:5d:0b:a2:8a:aa:a0:46:
                    c5:04:6d:ab:a2:6b:37:04:bb:e1:ef:1e:44:91:b5:
                    24:f3:07:a9:85:ca:a6:15:ec:5e:11:32:52:17:80:
                    57:8b:c1:98:99:85:fa:05:4a:8d:c9:5f:15:ba:c1:
                    b5:27:99:7a:fc:cc:c6:4d:3b:af:37:d4:a9:b2:43:
                    90:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8E:06:ED:07:17:31:7A:D9:26:B2:CE:4B:8F:AB:01:0A:9A:B2:A9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EF1CB7EC8E211F1AE72371ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.252.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:f1:a7:ab:d0:90:cb:6f:2e:9e:17:d6:b1:2c:9a:6e:c4:b4:
         24:86:e8:6b:ff:1a:d2:96:c3:61:2d:8d:6d:ab:6b:01:6a:b7:
         a3:76:d5:71:dc:72:25:a6:28:6a:1c:95:02:6a:e1:19:c0:01:
         d9:cb:e2:79:a3:de:da:83:4b:2e:d3:0c:f8:0f:8a:4b:c2:a4:
         eb:fd:17:78:3c:df:41:f4:50:fe:b3:b2:bd:7d:ce:88:6d:ee:
         19:ff:66:ae:a6:a7:9f:d6:19:4d:04:9e:e1:88:e3:2c:37:5c:
         ce:45:8c:fe:11:af:8b:73:8b:b1:5b:aa:16:5b:95:16:f3:d4:
         b5:42:44:0a:ca:6c:f3:08:c2:79:ac:ff:eb:52:94:45:49:31:
         ed:0e:26:dc:14:04:c3:11:1d:68:9b:ee:7b:e3:7d:4e:e5:95:
         4e:fb:5c:17:b6:f7:51:90:de:f1:f6:e8:54:c4:5a:a9:9e:5d:
         bf:d6:85:f1:41:44:e4:e3:a2:74:26:b6:43:6a:a9:81:c3:42:
         43:94:04:1f:c6:fb:a7:6c:ad:ea:28:b8:bf:ab:fe:13:d4:3f:
         89:c1:5e:ea:17:d6:8c:96:c9:4b:c1:80:32:36:5a:84:48:25:
         01:5b:83:b3:f8:68:02:64:d7:c8:03:b4:ba:f3:07:ca:0d:b5:
         71:32:a1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----