Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41C3D0449BAC11F1B66A65CCCE1D38B0.roa
File:                     41C3D0449BAC11F1B66A65CCCE1D38B0.roa (raw, json)
Hash identifier:          1OKRR3AdWfYYOO8ny815hpfZ1uvpktoigBsyMCILE7c=
Subject key identifier:   54:F9:D3:56:A4:EA:42:3E:B9:34:BC:73:4A:31:B7:66:57:31:3B:01
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41C3D0449BAC11F1B66A65CCCE1D38B0.roa
Signing time:             Wed 19 Aug 2026 08:59:17 +0000
ROA not before:           Wed 19 Aug 2026 08:59:13 +0000
ROA not after:            Sat 03 Oct 2026 08:59:13 +0000
asID:                     62563
IP address blocks:        156.233.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118357 (0x1ce55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 19 08:59:13 2026 GMT
            Not After : Oct  3 08:59:13 2026 GMT
        Subject: CN=6a857065-00bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dd:e9:fb:ad:e7:82:13:05:c7:c3:b2:80:a3:
                    6f:7c:b1:40:e4:9c:c8:7c:01:33:a9:58:0c:a2:65:
                    f3:35:4a:c8:bd:0c:70:06:da:3d:9d:c9:b5:7f:50:
                    f7:66:fa:64:3e:99:56:48:d3:d9:20:87:4f:e6:33:
                    05:9c:ff:c3:66:b2:07:ec:7b:3f:92:45:60:6c:a4:
                    05:b8:98:16:8d:77:2d:57:c5:e7:dc:50:cc:8a:7d:
                    3b:f7:d7:55:97:07:30:d1:50:12:c3:b7:98:23:17:
                    07:30:b4:d8:bf:e1:f0:bb:a5:ae:ed:d2:6f:a5:99:
                    3f:e1:0a:61:ec:2f:e6:cc:3b:9a:f7:e9:c9:c1:5c:
                    a6:fd:66:80:d3:cd:09:c0:56:a1:08:1f:f3:d9:e4:
                    48:3e:28:ed:22:30:9c:ca:fb:f7:4d:06:8a:81:b3:
                    55:16:17:cf:74:f0:f0:78:b3:1a:85:55:35:a6:00:
                    ce:40:d1:13:ac:be:80:48:9d:cc:bc:b9:e0:fc:d8:
                    4c:92:51:c3:23:ce:57:66:a1:67:7d:ee:ec:17:7a:
                    dd:2c:60:11:f9:f5:ff:60:4b:41:59:13:60:e2:7e:
                    d3:9f:bf:ab:0a:e2:a7:d7:f8:4d:a6:33:48:27:bb:
                    d4:c3:1f:19:53:6f:9c:93:ce:90:c7:38:7d:22:fa:
                    9b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F9:D3:56:A4:EA:42:3E:B9:34:BC:73:4A:31:B7:66:57:31:3B:01
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/41C3D0449BAC11F1B66A65CCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:c6:7d:36:08:9b:d7:94:2f:6a:44:3c:42:fe:c0:84:36:62:
         17:d1:63:96:79:1a:c3:60:4d:d2:5f:62:f5:29:91:c1:eb:f1:
         5f:41:32:26:ee:cd:0c:00:de:fa:a9:64:0d:cc:2a:0d:74:a7:
         29:47:f0:14:b9:1b:ea:c6:0b:e3:2e:8e:42:b2:aa:09:9f:3f:
         6b:ae:cb:0e:fd:0a:1f:a1:5f:54:5f:55:bd:c3:2c:b2:23:55:
         43:37:5c:41:8a:ad:b1:03:77:29:e0:7e:f8:fe:7c:b6:b1:0c:
         43:28:67:55:0b:25:86:5c:80:68:3a:6b:be:44:f0:cf:ee:61:
         81:d6:33:95:65:23:60:34:a3:8d:a9:76:e5:05:fc:9d:d4:63:
         19:92:0b:e9:b7:51:20:8a:cc:96:48:de:af:bb:5d:16:3f:ed:
         e5:cb:7e:0d:75:13:39:31:ab:3e:d4:b9:b8:e5:83:36:bd:ec:
         ea:fe:d9:72:fd:53:91:77:e5:91:af:9b:0d:1a:f9:e2:a0:bc:
         f0:ff:7a:42:f7:61:f9:e0:da:d6:43:c4:2d:ae:1b:05:36:be:
         76:12:d9:9c:f4:44:e1:12:ab:3f:72:51:0b:2b:9a:d8:db:be:
         46:87:8e:4e:54:6b:6a:8b:1d:dc:73:fb:6c:90:a7:ac:5e:e8:
         48:80:c0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----