Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5240969AA51211F19ED3A600CF1D38B0.roa
File:                     5240969AA51211F19ED3A600CF1D38B0.roa (raw, json)
Hash identifier:          ZXupiXOOgLH1XFxb0wnijYVYhSYAm2fbzAvJRMDLqcA=
Subject key identifier:   75:46:31:73:FD:88:34:1C:9D:62:51:C0:A1:F5:DA:8A:65:4F:D2:9D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D20C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5240969AA51211F19ED3A600CF1D38B0.roa
Signing time:             Mon 31 Aug 2026 08:02:34 +0000
ROA not before:           Mon 31 Aug 2026 08:02:29 +0000
ROA not after:            Thu 10 Sep 2026 08:02:29 +0000
asID:                     20473
IP address blocks:        156.228.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119308 (0x1d20c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 31 08:02:29 2026 GMT
            Not After : Sep 10 08:02:29 2026 GMT
        Subject: CN=6a95351a-890e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f4:f7:bc:1b:bf:1f:6f:6b:12:ac:48:2d:13:
                    57:21:f5:06:64:7c:ee:d3:95:36:04:f1:61:e5:f2:
                    32:23:e9:76:a3:7a:e0:e7:88:06:d6:79:08:c4:a5:
                    51:49:d3:a5:b9:65:9d:7f:fd:c7:1b:83:90:58:8d:
                    76:7d:6e:b8:43:6e:62:95:be:aa:14:8e:86:c5:70:
                    4b:09:85:c7:22:b6:49:d8:e1:8f:e9:a1:34:65:b3:
                    e8:80:20:04:09:5a:27:d5:b0:be:43:1d:ab:65:6c:
                    6b:fb:7b:65:3f:b8:ad:fb:67:e6:23:be:52:5a:01:
                    47:ab:d6:c6:bd:4f:fb:4e:87:bc:8a:8e:66:8d:f9:
                    e0:cd:3b:69:3f:59:12:9d:2c:6a:f8:16:6f:c0:07:
                    7d:44:28:51:c2:b6:cb:37:2e:98:83:39:12:87:d8:
                    36:50:2b:53:4c:37:b3:f4:75:02:6b:98:ed:8d:3d:
                    e5:28:89:ce:04:47:0c:6c:e0:7d:c0:1b:a0:08:2a:
                    ab:db:44:65:c7:01:f5:cf:f6:5f:b5:1e:aa:63:86:
                    fc:c6:56:f0:c7:c4:41:a0:4e:f5:b9:85:c3:f5:0c:
                    90:e7:3f:ff:53:b8:85:ef:1c:6d:11:4f:b3:97:99:
                    d2:06:1b:1d:9f:33:c9:00:8e:36:c1:b2:e8:0f:b4:
                    1d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:46:31:73:FD:88:34:1C:9D:62:51:C0:A1:F5:DA:8A:65:4F:D2:9D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5240969AA51211F19ED3A600CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.228.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:28:74:f3:a0:2f:8c:49:88:c9:f9:bb:d9:5e:d1:17:33:51:
         a1:67:3c:ef:03:ec:62:d1:d4:76:87:56:4b:cc:30:f5:0a:b3:
         07:0f:46:a8:4f:31:80:6a:79:0e:d4:3b:3e:e5:45:eb:6b:b7:
         54:37:0d:41:69:25:6b:45:71:a1:00:b2:ef:4d:0c:5b:e5:59:
         48:02:93:99:1b:51:fb:f1:12:a5:59:d2:bf:a3:9e:a2:ba:23:
         01:76:f1:75:90:37:0f:ef:ee:cd:97:e6:90:59:5a:9e:ca:8a:
         9b:c7:6e:47:66:be:72:cd:0d:7b:62:54:3d:e2:6a:67:63:34:
         cb:85:63:50:10:41:90:10:68:ec:b7:15:79:f1:9b:f5:ca:82:
         22:c0:a1:b5:ea:22:ed:ab:78:c9:a1:ac:50:35:61:eb:04:72:
         ee:6e:2c:ba:a2:93:85:d3:85:f9:8b:e9:43:eb:15:d6:3f:25:
         d9:8a:78:eb:5b:be:c9:99:10:71:55:3d:3a:5e:e2:7b:30:61:
         eb:70:a2:66:33:26:0c:51:e6:4a:48:3e:11:60:20:fd:df:5b:
         d1:d0:a0:4c:b9:69:07:dd:bf:7d:74:f3:f5:6f:ef:c1:a9:0f:
         d9:f4:a2:d4:e3:86:89:0b:8a:11:6c:ea:d6:1f:ca:bb:a1:4d:
         1a:9d:79:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----