Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59DDED649AE311F182F6B108CF1D38B0.roa
File:                     59DDED649AE311F182F6B108CF1D38B0.roa (raw, json)
Hash identifier:          BQUTdrVVuLXrk0EVicDlko6U/X5qelz3QyCWJB/bCjY=
Subject key identifier:   FB:7C:A7:E1:2B:78:CE:10:59:DE:86:73:85:C7:97:45:34:8D:81:E2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CD8F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59DDED649AE311F182F6B108CF1D38B0.roa
Signing time:             Tue 18 Aug 2026 09:01:08 +0000
ROA not before:           Tue 18 Aug 2026 09:01:04 +0000
ROA not after:            Thu 08 Oct 2026 09:01:04 +0000
asID:                     21859
IP address blocks:        156.252.4.0/24 maxlen: 24
                          156.252.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 24 Aug 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118159 (0x1cd8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 18 09:01:04 2026 GMT
            Not After : Oct  8 09:01:04 2026 GMT
        Subject: CN=6a841f54-d44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9e:46:98:99:4d:b8:45:e9:1b:6f:c0:6e:0c:
                    a5:4a:f3:4b:7c:71:e8:14:64:6e:84:9e:15:7d:ac:
                    6b:0f:ec:c6:f8:66:b8:1e:03:2d:37:37:8e:98:29:
                    c7:54:30:65:ba:71:cc:a7:59:7a:fd:1d:d7:11:ca:
                    2e:88:d7:08:dd:80:67:37:ff:ef:c3:64:5c:a2:5d:
                    90:00:55:6a:c4:b6:47:19:22:69:db:35:d0:7f:ed:
                    42:14:83:21:6f:9e:59:19:e1:ec:f4:dd:3f:58:08:
                    c5:ba:28:70:36:60:69:a1:be:95:5a:4b:27:c7:f8:
                    50:9d:ee:78:94:7e:74:d0:2b:df:f6:50:cc:63:c6:
                    f9:2e:82:bd:c0:cb:8f:b4:69:60:5f:3f:ab:5f:4b:
                    74:b6:b0:ae:e1:d2:d6:98:4f:6c:dd:14:4a:fe:8f:
                    51:44:1d:5e:a7:fa:fe:62:5d:3b:af:f5:3e:b4:49:
                    25:19:a8:72:81:cf:9c:76:da:c8:73:cf:e1:4f:50:
                    e5:de:03:34:8a:18:70:47:5f:ae:d2:bd:2d:1b:62:
                    ba:73:df:6d:4a:36:ab:3f:ad:c4:3b:4f:a6:20:66:
                    5d:b1:57:77:e4:48:06:7f:52:c0:23:81:94:95:55:
                    28:dc:a5:19:ec:8b:e5:f9:5e:5b:a2:1d:94:c5:c5:
                    12:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7C:A7:E1:2B:78:CE:10:59:DE:86:73:85:C7:97:45:34:8D:81:E2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59DDED649AE311F182F6B108CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.252.4.0/24
                  156.252.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:97:6f:b0:53:86:54:0b:c7:e0:47:03:55:20:43:1f:ad:59:
         3d:41:14:04:e2:95:55:ee:7c:39:54:d3:87:2d:f8:22:ff:59:
         17:8d:55:47:f3:5c:f3:5e:4d:1c:89:a0:b1:06:7e:2d:5d:fe:
         89:7f:49:85:e5:a1:94:ba:e8:0d:64:96:de:39:33:60:ae:28:
         a7:1b:6d:22:7e:83:3f:66:db:88:12:79:83:5b:1a:80:f3:54:
         f8:5e:67:1c:07:13:a1:10:06:bf:46:6c:05:fd:46:1c:e0:f6:
         f3:99:47:5f:fd:2e:0b:07:85:e7:4e:4b:2d:fa:d9:ce:b8:dc:
         78:65:3f:37:d5:f2:7f:06:91:4b:f0:a2:58:81:28:55:99:fd:
         d7:ee:7a:43:59:b7:9b:39:57:16:35:3e:38:28:18:75:94:59:
         7d:ef:46:51:40:31:18:a7:98:d8:76:11:a3:14:12:23:0f:4f:
         52:96:75:a4:c6:d5:a5:46:91:2c:22:f2:4e:41:25:62:4f:4f:
         e3:b7:c6:83:1d:09:dd:eb:fe:3c:60:e9:cc:4d:59:ff:ee:e7:
         3e:1b:87:45:94:ba:cd:2a:3f:d8:e6:35:7c:27:0b:0b:f2:c8:
         9a:82:8f:8f:e6:9f:e7:eb:e8:69:f5:74:b7:58:62:df:5c:3d:
         3a:59:0c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----