Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BD67BDCBE3211F1A52D8DE1CE1D38B0.roa
File:                     5BD67BDCBE3211F1A52D8DE1CE1D38B0.roa (raw, json)
Hash identifier:          6jUpyUTy2qjulBInoYvrb+H6aSUKcJS8N+au2sFPRc8=
Subject key identifier:   D1:62:3C:6F:92:6D:47:32:08:27:33:23:ED:73:BB:73:89:BC:3B:22
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D9F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BD67BDCBE3211F1A52D8DE1CE1D38B0.roa
Signing time:             Fri 02 Oct 2026 07:24:53 +0000
ROA not before:           Fri 02 Oct 2026 07:24:49 +0000
ROA not after:            Mon 09 Nov 2026 07:24:49 +0000
asID:                     62610
IP address blocks:        156.232.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121333 (0x1d9f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  2 07:24:49 2026 GMT
            Not After : Nov  9 07:24:49 2026 GMT
        Subject: CN=6abf5c45-9db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:39:b6:26:eb:28:da:62:c6:f0:b2:da:34:09:
                    37:e4:81:99:21:98:00:6b:04:73:5e:4a:be:46:24:
                    fb:74:cd:3d:a3:02:1c:e7:f5:21:1e:74:6a:3b:43:
                    ea:f4:f2:1f:90:c1:9a:a7:01:29:c0:ca:d5:26:e9:
                    ef:a9:97:ad:b8:87:18:7c:f3:90:e6:8e:1e:1e:08:
                    2c:7e:3a:38:a1:f9:04:4d:56:62:7a:bc:6c:62:3e:
                    01:81:e4:ce:8d:94:d5:4f:6a:1f:c7:ab:22:95:ef:
                    c5:c1:5f:99:ae:f3:ac:a3:62:2e:4a:a2:52:78:62:
                    0b:e4:00:6a:02:c8:2a:c1:09:08:84:71:6b:0d:bf:
                    3d:0d:d3:84:1f:39:d0:3c:75:2d:2a:5a:75:d2:9c:
                    27:dc:1f:29:51:f5:ee:e6:6e:64:be:bb:61:2f:d4:
                    c0:b1:f8:9d:e2:f3:4c:3b:e6:b4:37:d2:b6:cd:79:
                    29:03:4f:ba:30:0b:87:4c:8b:27:d4:5a:32:7c:44:
                    c5:f6:b8:36:a0:da:92:8d:76:ff:e8:d7:57:bb:99:
                    71:7c:77:61:ba:7f:c8:2d:8c:06:f7:a6:57:59:9f:
                    12:fd:4f:25:ca:98:a1:3c:d9:10:25:1c:83:26:65:
                    8c:60:29:66:a9:75:71:bb:07:8d:80:5a:e7:92:3b:
                    55:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:62:3C:6F:92:6D:47:32:08:27:33:23:ED:73:BB:73:89:BC:3B:22
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BD67BDCBE3211F1A52D8DE1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.232.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:3e:e1:09:eb:53:30:20:d3:1e:11:2a:44:7e:3d:0e:1b:c5:
         50:0f:33:7d:bb:41:1b:a6:3f:93:8c:5b:44:31:e5:08:c3:75:
         0b:e0:2b:fc:ca:ed:9b:1f:78:2e:2f:76:10:5d:f9:57:64:32:
         02:83:f8:34:b5:01:c7:31:bc:20:eb:03:92:f2:06:3b:b0:83:
         e8:0d:56:fc:9b:26:37:24:4f:d6:db:1e:78:27:8c:a9:1e:6f:
         58:29:ec:a6:06:73:c7:3e:47:83:07:8d:ce:e2:47:37:7a:64:
         61:c3:43:53:e9:cc:7b:83:1c:91:85:ef:7a:44:c1:95:df:74:
         52:57:1c:49:45:df:6a:40:87:db:e5:2c:2b:b1:8d:1b:c2:81:
         16:1d:d8:36:2b:9d:b4:d0:fc:c7:d6:e7:60:4b:74:ba:60:f8:
         5b:41:c1:50:4e:9f:79:41:3f:e8:93:b0:7f:0c:6a:23:8d:48:
         13:67:4b:22:ac:91:ab:f2:cd:3f:47:f1:67:bc:48:d6:1f:c9:
         71:6a:21:a9:53:44:bf:73:39:8c:59:ec:d8:ec:40:8a:4d:ef:
         75:1a:83:f1:a5:74:b0:6b:44:5d:dd:37:06:d2:d1:12:3d:57:
         4b:79:04:22:82:b2:c1:e1:b6:1f:e2:80:8b:31:24:1a:82:e7:
         6d:a7:89:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----