Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53C4C17EB10811F192B0D5E4CE1D38B0.roa
File:                     53C4C17EB10811F192B0D5E4CE1D38B0.roa (raw, json)
Hash identifier:          XqRXnLg/YNQkilYdMbMXgv5Opdp5OENR5LYB/CaCN34=
Subject key identifier:   71:88:7C:41:E2:68:0C:57:23:70:61:30:3C:7E:78:D9:D5:90:83:C8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D673
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53C4C17EB10811F192B0D5E4CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 13:21:15 +0000
ROA not before:           Tue 15 Sep 2026 13:21:11 +0000
ROA not after:            Sat 24 Oct 2026 13:21:11 +0000
asID:                     63099
IP address blocks:        156.225.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120435 (0x1d673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 13:21:11 2026 GMT
            Not After : Oct 24 13:21:11 2026 GMT
        Subject: CN=6aa9464b-7790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:81:73:bd:72:14:12:7a:fb:e0:01:b4:0e:24:
                    6c:33:95:13:1c:96:df:43:09:be:5b:6e:bb:b0:5a:
                    f4:b5:0e:30:b8:be:5f:e5:fd:8b:ce:22:4a:be:3c:
                    bd:8c:94:f3:83:85:32:b7:3f:df:7f:11:7a:b6:9b:
                    de:5c:0e:2b:0d:3a:05:4c:f0:01:e8:47:d1:84:4b:
                    58:c0:0f:00:b7:cc:4c:8e:f9:3a:29:18:9f:20:de:
                    67:35:c4:5b:03:ef:17:ae:07:ee:c1:9b:02:03:d8:
                    6e:63:cc:02:e8:c4:52:b1:cc:4b:26:69:9a:56:02:
                    89:7d:21:90:99:c8:0e:10:14:0f:d1:90:7f:c8:b4:
                    bd:92:df:bf:ce:8b:d6:11:a0:9e:72:9c:6d:aa:bb:
                    0c:ba:d4:bf:50:9a:01:52:1b:5f:14:5b:e8:46:cf:
                    4d:db:cd:0f:6e:db:5b:93:9c:22:23:21:ae:e9:78:
                    67:50:26:c9:b1:e0:67:b1:f1:e2:c3:4b:1a:ec:fa:
                    91:91:2f:8b:12:ba:ab:ae:97:ba:91:d7:71:9c:d3:
                    19:00:8e:a7:34:fd:5b:fb:6b:ce:59:1d:5e:0e:4d:
                    01:27:4b:fc:c4:ed:b0:df:74:ca:af:ba:c0:b3:3d:
                    5b:c7:b3:69:f0:7e:64:3b:2f:3b:b9:9b:80:39:d2:
                    b1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:88:7C:41:E2:68:0C:57:23:70:61:30:3C:7E:78:D9:D5:90:83:C8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53C4C17EB10811F192B0D5E4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:d4:b4:ec:44:b9:d0:20:83:c6:f2:84:61:fa:9d:b7:00:aa:
         2f:a5:22:80:f4:22:f2:d7:ee:f4:ce:30:9c:29:12:1d:70:d4:
         b7:d8:13:36:96:07:f5:78:68:4d:97:2e:50:59:a0:fe:3a:20:
         2c:a5:83:13:3a:df:f6:fd:5f:26:60:72:fa:e5:ba:f2:82:bc:
         1b:2e:d4:a7:f9:00:a4:02:a5:5a:ff:ca:6a:1d:c6:0e:0f:3e:
         05:df:fd:9f:27:fd:ae:39:b9:a3:f1:88:7b:51:e2:22:6b:5f:
         20:bd:09:3e:05:75:b6:ca:0e:9f:19:43:3c:01:a0:6a:3c:ef:
         a5:45:23:21:c0:23:d1:e5:5f:44:17:40:28:c1:75:83:df:a6:
         d7:e4:c7:48:47:66:97:f5:47:ba:ed:58:10:87:9a:c0:23:0d:
         26:50:d6:66:6e:64:b0:13:b0:93:6c:b0:3e:43:13:25:3e:bd:
         d0:ce:d1:5b:11:3e:48:b1:6a:65:e3:15:94:34:3f:e6:08:1d:
         b5:28:4d:9b:95:d5:02:0a:24:90:a1:e5:c8:4b:89:6c:99:3d:
         bb:98:ae:7b:4c:5c:51:a8:b5:36:3f:4c:bb:77:20:10:e9:a2:
         47:b0:07:6c:5a:7d:71:0a:1e:06:25:89:ef:17:44:32:c3:8e:
         2f:96:df:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----