Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E689410C6DB11F1A07226F7CE1D38B0.roa
File:                     4E689410C6DB11F1A07226F7CE1D38B0.roa (raw, json)
Hash identifier:          l5fvkQGtvl6xvVlkUyWPci7zKAJde6SGN1A3KsEx8Rs=
Subject key identifier:   AE:BD:5B:D0:67:FA:D2:28:C9:A6:F7:A1:31:B9:8D:81:EE:A1:2F:C7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DD09
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E689410C6DB11F1A07226F7CE1D38B0.roa
Signing time:             Tue 13 Oct 2026 07:54:24 +0000
ROA not before:           Tue 13 Oct 2026 07:54:20 +0000
ROA not after:            Fri 23 Oct 2026 07:54:20 +0000
asID:                     6079
IP address blocks:        156.229.172.0/24 maxlen: 24
                          156.233.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122121 (0x1dd09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 13 07:54:20 2026 GMT
            Not After : Oct 23 07:54:20 2026 GMT
        Subject: CN=6acde3b0-0564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c7:81:dd:90:8f:8b:4e:92:5a:68:11:74:7e:
                    47:c2:fc:e0:d7:21:20:8f:f9:3b:49:6c:42:ac:a5:
                    57:c1:ee:95:ce:82:22:a7:c0:12:0a:4f:f2:fe:88:
                    cd:87:57:81:4d:35:c4:96:59:44:7c:b9:05:1d:fa:
                    37:b3:0d:40:0e:80:77:7c:03:e3:d4:12:bf:b5:0f:
                    ea:74:f9:e9:6e:68:8d:ef:e5:da:f7:2b:7d:e2:3a:
                    5a:60:d6:05:56:e9:79:d9:a7:8e:58:31:4f:50:62:
                    28:bc:e8:2d:68:e3:c9:15:0d:3a:24:46:f5:be:44:
                    a5:ab:da:f3:48:83:2c:95:62:e1:12:5e:fb:d0:d5:
                    66:29:2e:9e:fa:b1:fa:fb:27:f6:d2:82:e5:31:3a:
                    a8:b7:cf:69:8c:68:23:3b:d4:26:1c:c6:7d:0e:5a:
                    2f:b3:ff:2d:b1:03:e0:2c:0f:b4:e4:e3:4c:7e:74:
                    6a:21:e4:c8:28:25:a3:66:85:1a:48:45:a3:db:ce:
                    aa:14:54:56:ac:32:e0:40:f5:1a:5e:25:21:52:ed:
                    9a:d2:bd:9a:32:0d:85:99:1a:e4:34:bf:23:e4:4f:
                    43:4c:f9:23:63:db:10:6c:f0:d0:48:08:c1:38:56:
                    35:9b:20:c1:5c:48:35:e0:d4:a4:86:e8:06:26:14:
                    b4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BD:5B:D0:67:FA:D2:28:C9:A6:F7:A1:31:B9:8D:81:EE:A1:2F:C7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E689410C6DB11F1A07226F7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.172.0/24
                  156.233.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:30:8e:6b:69:fd:9c:13:2b:e1:2b:d9:48:7d:08:14:51:99:
         9e:53:ea:0b:2e:9a:32:82:e6:00:97:c5:74:1e:ba:ad:cc:b1:
         73:f4:2d:ab:c7:0b:83:de:8f:81:14:39:93:9e:55:53:f5:2e:
         9f:be:c4:e3:d9:a8:8f:5b:7d:10:3b:8d:a1:79:f1:98:95:9f:
         24:69:a8:8e:03:94:f9:bc:9a:91:78:16:46:ec:f3:c3:ce:f7:
         73:9d:ab:8f:86:ca:50:34:c4:e0:55:8b:51:e9:05:f3:52:32:
         94:73:8a:ae:77:7f:31:20:9d:b3:c6:28:af:2d:df:75:5d:11:
         27:d4:68:9c:8b:7e:9c:c6:cd:5f:71:cb:51:31:39:0f:53:d3:
         3e:e2:bd:b2:d5:0e:77:da:f4:be:bc:62:64:f6:09:6b:b9:c3:
         07:d4:ad:88:30:83:e5:ee:0e:0d:a0:c3:6d:23:9b:02:93:d6:
         b5:d6:60:5f:82:a8:89:f9:7b:57:6e:53:b4:c4:3d:23:97:61:
         0c:13:aa:42:74:0a:1c:c2:af:97:1d:43:11:42:a8:90:f2:f5:
         63:e7:b0:5b:2e:77:11:23:7f:17:78:4b:b5:18:6d:c7:2a:3f:
         b2:ac:4c:c2:93:f1:46:27:23:5a:43:9e:42:a3:36:08:de:f1:
         02:c1:e2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----