Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EE1D0A49D2D11F1AA23D5EECE1D38B0.roa
File:                     5EE1D0A49D2D11F1AA23D5EECE1D38B0.roa (raw, json)
Hash identifier:          IpZTS8Q8zPUuGY9VixZIVUw1N8TBhZgnsEe+CuQnBLs=
Subject key identifier:   F4:7F:9A:97:EE:68:22:C7:29:12:43:16:00:46:3B:75:F1:3A:78:EB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CF52
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EE1D0A49D2D11F1AA23D5EECE1D38B0.roa
Signing time:             Fri 21 Aug 2026 06:56:02 +0000
ROA not before:           Fri 21 Aug 2026 06:55:58 +0000
ROA not after:            Sat 19 Sep 2026 06:55:58 +0000
asID:                     36137
IP address blocks:        156.245.64.0/18 maxlen: 24
                          156.245.64.0/20 maxlen: 24
                          156.245.80.0/20 maxlen: 24
                          156.245.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118610 (0x1cf52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 06:55:58 2026 GMT
            Not After : Sep 19 06:55:58 2026 GMT
        Subject: CN=6a87f682-f6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b4:af:37:9e:db:e6:ad:21:3a:cb:0d:39:ad:
                    9b:02:f5:ed:e7:b3:a8:09:f8:9f:8c:07:05:a4:d6:
                    7d:bb:82:eb:8c:1d:87:04:55:8d:68:35:f4:71:2b:
                    57:27:b1:04:83:e6:8b:9c:61:59:14:3e:62:52:1f:
                    68:ce:ef:11:4f:76:36:e4:27:2b:86:17:17:8f:d9:
                    ef:af:57:4e:73:0f:88:a3:fe:f9:b7:8d:47:93:a5:
                    2f:62:4c:86:6e:0d:b6:78:c1:98:71:65:15:e5:b2:
                    92:57:65:d6:3c:c6:5b:64:90:eb:98:fd:43:d3:ab:
                    43:71:39:3a:d9:e6:a9:74:99:4c:14:30:65:16:cc:
                    6b:8c:ed:9b:db:46:70:d3:3d:a4:39:62:6a:d8:09:
                    dd:90:9a:a7:f3:84:95:63:24:c9:7c:e7:38:3e:09:
                    ba:30:eb:c6:06:f6:6e:e9:c8:f4:91:c5:98:8c:f0:
                    e8:11:a1:da:1c:82:d5:b9:d7:5d:a5:2b:6d:b1:d6:
                    fa:1b:f9:c5:8c:ba:95:b5:ce:a0:36:d4:41:34:0e:
                    cb:82:47:24:d2:f3:a2:89:39:14:77:18:5f:38:14:
                    99:58:1a:dc:e1:1e:1a:aa:00:5a:8f:b4:ca:61:fa:
                    26:eb:87:7c:ba:0f:d5:4a:66:58:11:61:ea:62:97:
                    ea:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7F:9A:97:EE:68:22:C7:29:12:43:16:00:46:3B:75:F1:3A:78:EB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5EE1D0A49D2D11F1AA23D5EECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0f:e0:a6:40:04:49:61:50:40:8e:0f:5e:12:4c:47:d2:ef:ae:
         ce:93:b9:75:6d:88:ed:01:11:8f:aa:ac:85:05:59:6d:df:2f:
         cf:22:19:cc:e0:1d:98:2a:4e:67:83:9f:67:ea:24:7e:c7:87:
         b1:82:2f:ca:e8:19:57:68:77:7d:b8:f1:4e:52:3c:9f:81:5c:
         6c:06:6b:6f:13:f9:74:b6:da:b9:07:b9:47:a7:b4:68:9e:d0:
         07:b0:6c:39:69:60:76:45:29:05:22:15:f5:b4:84:99:cd:52:
         22:b0:44:58:3e:64:bf:9b:a1:16:0b:6f:22:db:30:34:c5:aa:
         4d:c7:27:4a:ab:f9:3d:ef:3b:bc:95:3b:a3:ef:71:d4:c8:b7:
         17:e7:f0:58:05:8d:c2:f9:54:07:73:cd:81:8b:de:a8:16:63:
         99:c2:dd:6d:26:54:66:7c:88:e7:07:63:f8:a1:8a:79:f8:cf:
         9e:42:9a:5b:56:be:60:ac:d2:cc:b1:ad:5f:0a:be:b9:18:a0:
         2c:12:01:41:5e:98:9e:4d:13:2c:3d:d9:77:b7:5a:7e:42:5d:
         1e:74:1e:d0:b1:91:07:5a:ec:3f:8d:6b:cc:41:f6:cf:25:67:
         1f:9c:d5:06:21:f7:3c:88:a5:1a:95:08:8e:c0:77:13:1b:9a:
         93:b8:cd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----