Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53A33126949311F1B59247C0CE1D38B0.roa
File:                     53A33126949311F1B59247C0CE1D38B0.roa (raw, json)
Hash identifier:          gh8PhSrpKPi42d8Yuc+YpyeByjJgkjIuCuHfkN78wmY=
Subject key identifier:   9D:7A:1D:4F:3A:6D:EA:A6:C4:01:18:FD:D9:43:2E:B6:F1:F7:20:D7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CADD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53A33126949311F1B59247C0CE1D38B0.roa
Signing time:             Mon 10 Aug 2026 08:13:11 +0000
ROA not before:           Mon 10 Aug 2026 08:13:07 +0000
ROA not after:            Thu 10 Sep 2026 08:13:07 +0000
asID:                     32167
IP address blocks:        156.226.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117469 (0x1cadd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 10 08:13:07 2026 GMT
            Not After : Sep 10 08:13:07 2026 GMT
        Subject: CN=6a798817-190d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:aa:f9:44:7b:25:05:60:42:df:cb:49:d2:51:
                    b6:e0:27:c3:41:36:c2:3b:e2:94:23:2b:2a:3f:64:
                    05:0e:96:4c:45:8b:8a:be:c2:9f:6e:db:bd:a5:89:
                    e0:9f:e6:f0:95:80:2c:32:fb:d3:0d:b9:fc:bd:93:
                    b5:ce:ba:0c:bc:c0:f7:d4:ac:0f:52:ce:75:42:63:
                    c1:34:5f:5b:a5:5a:5f:0c:3b:3e:53:5c:75:9b:7a:
                    6b:ae:d6:7d:eb:8e:66:c8:3c:c4:98:d5:f5:0a:27:
                    4d:71:ab:af:16:96:e2:41:e4:4f:23:7f:7e:24:bb:
                    19:6b:f7:3d:84:53:61:9e:67:b4:e5:3e:fc:7c:4f:
                    a9:06:c8:eb:85:33:d9:68:7d:63:16:71:4c:74:e2:
                    f8:c7:66:88:1e:f2:c0:9e:c4:d3:1d:5a:d7:24:31:
                    fb:9b:55:28:29:30:35:23:26:dd:72:74:e3:c5:31:
                    d8:15:19:a1:15:8e:ff:32:a7:3d:c5:dc:0e:9d:7d:
                    04:3e:82:82:1e:de:31:f8:d7:f4:a3:1b:a1:e5:d1:
                    e9:a8:25:7e:7b:0c:62:22:fd:f8:ab:16:b5:a3:df:
                    9f:77:d0:b6:94:56:e9:89:8f:7e:55:47:e5:d6:b7:
                    c9:db:29:4c:2b:a0:70:16:57:20:30:ad:3f:3b:c0:
                    b8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:7A:1D:4F:3A:6D:EA:A6:C4:01:18:FD:D9:43:2E:B6:F1:F7:20:D7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53A33126949311F1B59247C0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:23:47:dd:0a:15:d4:3b:59:44:9d:7e:0e:83:57:67:a4:23:
         99:79:ad:d1:77:a9:1a:4b:0f:f2:f4:3e:cf:6c:c6:6c:41:ee:
         40:94:40:0c:cd:8b:f4:24:2d:cc:b9:af:28:8e:08:02:ae:42:
         64:b2:f4:e6:e0:64:27:0a:62:51:d4:c8:a9:87:1f:3a:58:04:
         3c:b3:7c:42:da:ee:2a:79:88:b1:50:61:9c:20:5e:45:1b:22:
         af:91:57:a6:46:39:56:c8:fe:3b:f4:40:8f:b2:b1:26:77:48:
         25:2c:8a:ad:72:d4:84:7d:d3:73:d1:99:60:f7:68:4c:eb:97:
         4a:cd:2d:2e:41:f5:8b:cc:b8:7e:35:10:73:f5:61:74:b6:34:
         23:4d:0a:f5:73:ab:9d:1a:97:2e:5a:b0:c3:1b:9a:70:ce:56:
         c7:fe:92:be:a3:74:77:3f:2a:8e:b1:57:58:eb:48:40:b8:37:
         c6:28:1b:fa:f3:96:6f:87:78:37:e0:b9:59:7c:5c:b9:b6:9f:
         bc:bd:dc:f8:8c:d8:53:92:22:a5:9d:50:ab:5b:94:0e:68:42:
         e6:39:f6:ee:b6:fa:0c:f9:35:92:a5:4e:3c:71:9b:ed:49:b3:
         69:4d:64:5f:09:33:b6:81:42:e9:f2:37:4b:af:b3:ca:b0:04:
         7e:58:82:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----