Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4305FEA8C17911F1815AACBFCE1D38B0.roa
File:                     4305FEA8C17911F1815AACBFCE1D38B0.roa (raw, json)
Hash identifier:          aIAC4OdejueWoxodIl5yNgdOymSF9ggZWgls+RtF6hw=
Subject key identifier:   38:6C:A4:0B:84:46:30:86:A0:DF:87:19:FE:3D:28:3C:54:6C:CF:4D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DB8A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4305FEA8C17911F1815AACBFCE1D38B0.roa
Signing time:             Tue 06 Oct 2026 11:29:59 +0000
ROA not before:           Tue 06 Oct 2026 11:29:55 +0000
ROA not after:            Sun 08 Nov 2026 11:29:55 +0000
asID:                     20473
IP address blocks:        156.228.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121738 (0x1db8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  6 11:29:55 2026 GMT
            Not After : Nov  8 11:29:55 2026 GMT
        Subject: CN=6ac4dbb7-db51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:dd:29:6a:45:aa:21:4e:68:30:d4:21:8a:20:
                    13:80:29:39:21:39:39:20:04:3a:85:cc:f7:32:cb:
                    ce:0d:71:2c:54:1a:cb:4c:85:b2:7b:90:d8:e3:0c:
                    14:60:14:ff:d4:0d:09:94:bc:44:23:b2:e5:91:59:
                    e2:8e:4e:1e:3a:2c:81:0d:e8:53:5c:7b:4b:2e:ac:
                    e2:5f:71:09:7d:79:61:27:55:5c:52:e4:02:3e:83:
                    92:73:6e:f2:61:a6:29:a3:1f:cd:05:fa:7b:46:4e:
                    18:8d:9b:5b:9b:15:40:af:c7:a0:8a:cc:f1:23:12:
                    5b:dd:26:2d:00:2a:f8:50:80:cd:35:e5:20:00:8f:
                    cc:c6:3c:1e:a4:f4:6b:e8:8e:1f:7a:c3:6f:b1:6c:
                    e0:c8:26:21:60:28:28:b3:90:b5:3a:e2:0c:a5:4e:
                    30:af:c8:34:fe:82:f0:1c:93:f9:4e:58:a8:13:31:
                    94:bf:44:8d:28:39:9f:0e:4c:d7:6f:12:e6:73:7a:
                    27:85:b9:99:1f:70:86:1d:f4:a8:cf:ca:df:0f:77:
                    9f:e5:b1:24:58:3f:17:ed:1d:1f:9c:73:d0:1a:0e:
                    0a:87:ef:c7:b9:6d:30:2b:eb:aa:95:65:ae:96:cb:
                    1a:52:1e:e2:af:bb:a9:8b:6a:35:69:fe:ea:89:78:
                    49:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6C:A4:0B:84:46:30:86:A0:DF:87:19:FE:3D:28:3C:54:6C:CF:4D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4305FEA8C17911F1815AACBFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.228.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:90:a1:38:bd:2d:3b:f2:f7:6a:0a:67:18:c0:11:a5:9d:f0:
         fd:22:27:fd:5b:e1:a3:f0:90:0f:53:a5:62:15:82:34:8f:1b:
         a0:b5:80:dc:aa:74:ab:99:4f:01:6b:b3:3f:2b:33:c6:48:1f:
         54:28:13:49:3e:e7:54:7d:ae:ac:08:cd:ed:dd:4a:2e:58:90:
         93:17:bc:24:24:9f:58:97:62:5f:c6:49:54:6f:21:f4:42:f1:
         6c:46:3b:5f:75:66:05:5b:16:c8:c7:af:2c:42:36:12:5e:42:
         e3:f1:fa:f6:87:24:4a:f1:0a:fb:a1:1d:7d:e7:f1:31:46:90:
         93:3c:6e:57:11:92:9a:e3:d5:48:6c:05:68:7a:8e:3b:af:ec:
         27:51:ef:44:53:b2:1e:5d:48:cf:82:9a:8e:3a:26:df:b0:f5:
         34:20:03:96:60:34:2b:92:5c:10:71:ac:6d:29:7e:de:0a:f2:
         28:57:ab:56:95:72:c8:6d:20:53:8e:3f:fe:a9:22:cb:30:62:
         59:74:b1:0d:0b:c6:6d:f3:85:66:fd:c4:9d:e3:d4:eb:da:db:
         7e:ea:8a:98:34:23:f0:04:e1:4f:31:79:12:83:c0:4b:b2:9d:
         91:c5:1a:49:17:1c:38:61:b2:ad:4c:af:fc:f8:f1:d0:f4:8d:
         6e:45:8c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----