Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4715E12CA78211F197F57CBCCE1D38B0.roa
File:                     4715E12CA78211F197F57CBCCE1D38B0.roa (raw, json)
Hash identifier:          IK9oI6xIqLpdoegxtB5h6taXgfPIz0FDqeVq/rzknUE=
Subject key identifier:   68:14:74:29:71:1F:40:BB:86:CB:65:EA:2E:E0:95:1C:67:EE:83:64
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D304
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4715E12CA78211F197F57CBCCE1D38B0.roa
Signing time:             Thu 03 Sep 2026 10:29:01 +0000
ROA not before:           Thu 03 Sep 2026 10:28:57 +0000
ROA not after:            Thu 22 Oct 2026 10:28:57 +0000
asID:                     8796
IP address blocks:        156.225.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119556 (0x1d304)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  3 10:28:57 2026 GMT
            Not After : Oct 22 10:28:57 2026 GMT
        Subject: CN=6a994bed-2609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:b8:e1:be:69:46:af:ff:a4:c5:85:d7:21:
                    e5:a1:7c:b4:9a:5f:c0:1c:21:cc:0a:8a:ea:d7:e6:
                    1c:28:23:4a:ae:26:4f:b2:83:8b:ac:d9:29:a9:f6:
                    15:63:fa:da:ce:3e:2b:0e:94:29:23:2b:d0:cf:ce:
                    3f:04:fb:13:38:0f:f5:09:b1:d3:8b:b3:cf:66:49:
                    d2:20:5c:1c:6b:78:5c:72:51:9b:b9:66:73:b4:f0:
                    81:d5:fa:ad:53:8b:db:4c:2b:36:63:0c:65:fd:2a:
                    10:39:ac:06:c3:c0:4a:f4:82:58:20:de:44:2f:66:
                    5d:2b:cc:e9:97:9f:0a:36:37:d9:08:55:da:d3:c5:
                    64:36:78:18:6d:c8:15:f6:88:44:c9:92:80:b5:88:
                    6f:69:73:16:30:04:9a:1e:41:e6:25:5c:87:4b:c2:
                    a1:78:99:5a:4d:95:9a:c5:73:9e:b3:6e:66:ff:75:
                    d5:1b:34:14:3d:08:1b:b4:e5:f7:84:7a:0d:a3:be:
                    1a:d0:cb:6c:29:33:c6:e8:2e:e9:44:c2:12:ac:14:
                    05:78:6a:94:e7:c8:ce:7f:46:10:7f:9b:f5:85:60:
                    99:8d:b8:93:45:47:3e:5d:b0:39:0d:8c:32:d3:1a:
                    a1:24:1f:b6:7d:45:da:cc:1b:d1:fd:23:aa:d5:17:
                    36:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:14:74:29:71:1F:40:BB:86:CB:65:EA:2E:E0:95:1C:67:EE:83:64
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4715E12CA78211F197F57CBCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:26:fa:7d:c0:a7:60:c0:14:e6:8b:86:dd:1b:28:e5:2a:e3:
         c7:0b:11:81:87:3a:93:5f:c5:82:11:26:69:15:43:7b:cf:72:
         12:9c:1d:9b:59:bb:ff:f2:1d:9b:28:e1:56:db:6d:27:79:86:
         0a:e2:dc:66:12:4f:29:d6:0b:8f:32:bb:8e:f6:6c:c0:0f:c2:
         ae:1c:f5:87:6a:e1:2e:e5:08:76:ba:4a:0f:8c:2a:b8:0e:cd:
         ee:fc:72:99:31:47:ae:37:ae:13:0e:1c:fd:66:e6:55:b9:c4:
         1f:a8:d7:a1:46:3b:31:e6:35:4b:46:14:c0:2b:91:16:c3:80:
         1b:db:af:7b:70:e3:6e:eb:56:3c:a7:a2:63:25:c8:be:0f:ba:
         25:40:61:24:a8:ff:79:4e:b8:fe:e6:9a:1b:e0:50:df:6f:f5:
         d3:ef:a4:27:df:64:98:6e:be:f6:c8:d9:f2:7a:85:6b:1d:47:
         1c:9a:39:74:f9:4c:65:9f:44:27:8a:25:2f:71:90:9f:2c:b9:
         d6:dc:b2:2e:38:d2:3d:9b:7f:e4:7f:9a:13:2a:60:dd:30:d7:
         b5:84:57:b0:04:fe:e1:af:a2:3d:db:84:9b:21:e8:76:5c:59:
         8a:90:6d:d2:ea:72:79:87:1d:46:c0:26:da:37:f2:bb:50:e4:
         0a:8f:13:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----