Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/449173E2C94911F18EDEB4D1CE1D38B0.roa
File:                     449173E2C94911F18EDEB4D1CE1D38B0.roa (raw, json)
Hash identifier:          xjM42hvx0d+GSvxDHOjttz7dK0J9fFRYBTyDK2AXvxE=
Subject key identifier:   A3:0D:CB:8C:C9:FB:9A:7F:22:E6:5F:61:87:E9:EC:8F:35:06:74:70
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DDF4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/449173E2C94911F18EDEB4D1CE1D38B0.roa
Signing time:             Fri 16 Oct 2026 10:06:35 +0000
ROA not before:           Fri 16 Oct 2026 10:05:14 +0000
ROA not after:            Fri 23 Oct 2026 10:05:14 +0000
asID:                     17497
IP address blocks:        156.245.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122356 (0x1ddf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 16 10:05:14 2026 GMT
            Not After : Oct 23 10:05:14 2026 GMT
        Subject: CN=6ad1f72b-302e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f0:27:ff:08:15:53:ec:6b:48:6f:f1:1a:a4:
                    6b:3a:32:a4:6d:16:a2:b8:a2:b5:35:36:44:c9:ec:
                    8b:2f:a4:d9:1d:85:5a:cb:cd:74:97:ba:21:bc:4e:
                    27:11:4e:14:04:b4:6a:0a:bc:d8:40:a1:ff:4b:69:
                    c5:9d:fe:02:51:57:4b:0a:5e:d1:d5:27:f0:f2:2d:
                    a5:3c:97:96:34:8d:d3:c2:9a:3c:d3:80:f7:5e:94:
                    2b:a6:e9:df:1a:57:b2:61:a8:87:bf:78:97:3a:d6:
                    a4:9f:90:03:b7:1c:f8:36:54:67:24:19:6b:62:4f:
                    5a:14:64:ed:17:58:4d:84:16:8f:4e:8d:9c:cd:8c:
                    bf:8e:e5:7d:fa:49:3a:71:e7:a5:0e:56:d0:ed:c8:
                    08:85:7a:c5:9c:8c:99:06:6f:2c:09:64:c1:4b:9c:
                    58:fa:97:74:3e:f3:35:b6:d8:cd:97:29:3a:2f:3e:
                    0c:20:2f:75:f5:cd:61:f7:a6:78:d0:01:42:99:24:
                    8f:07:6d:fa:7c:59:cb:79:a1:ff:4f:1b:d7:90:bd:
                    cb:3e:ca:c0:c1:0c:6b:19:d1:94:15:48:b5:2c:96:
                    46:ea:2a:40:c4:ce:0b:66:8d:e2:61:f7:df:c2:49:
                    fa:3f:a4:2c:ac:ef:d0:d6:28:e7:2e:19:c8:d5:f8:
                    ff:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0D:CB:8C:C9:FB:9A:7F:22:E6:5F:61:87:E9:EC:8F:35:06:74:70
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/449173E2C94911F18EDEB4D1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:6d:93:10:da:58:da:3b:c8:99:aa:a8:0d:64:75:78:fa:7a:
         a9:c0:a1:81:e5:23:18:0d:9f:70:86:2a:e4:31:9e:ce:08:43:
         c5:73:9f:e6:a0:e9:e2:7a:83:75:d0:c4:33:67:de:74:72:67:
         99:93:5f:5c:5d:c4:e1:71:42:2b:02:0c:88:78:4b:d0:70:13:
         37:40:6a:5a:a0:9e:ce:55:a5:78:f6:56:77:e3:77:b0:99:7f:
         84:6c:e1:25:76:56:fe:1a:c7:af:56:74:f3:6a:46:f1:c5:81:
         9f:24:de:3e:fd:ef:01:51:d3:80:b0:a6:54:a0:8b:02:c1:df:
         c2:a7:0f:cf:06:ea:a6:f3:e5:96:dd:46:0e:6f:56:d8:e3:fb:
         ed:4b:ef:87:31:c9:4b:7d:82:6a:84:cc:e0:47:9f:04:96:26:
         af:6b:cc:0b:6b:98:3a:f9:6c:cf:d1:5e:d6:c8:b1:ba:b5:93:
         15:2d:9d:af:e2:b4:8b:a7:fd:00:9b:e9:9d:71:cf:53:1b:32:
         f6:5b:b7:e4:8f:bf:df:01:07:d7:28:69:52:c7:b8:bc:8c:66:
         b1:86:93:24:b4:fe:a7:f5:26:ec:fc:9a:0a:7c:2a:b7:fa:7c:
         fd:66:c9:14:21:fe:5c:03:91:6f:eb:63:b6:cd:11:92:b2:74:
         82:7a:31:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----