Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60485D98A1C711F19C055A08CF1D38B0.roa
File:                     60485D98A1C711F19C055A08CF1D38B0.roa (raw, json)
Hash identifier:          PSCBpT7PFHYtZzkdOgN8dk/fjYmbeiKvOXyrdAdLFwM=
Subject key identifier:   E2:A7:44:37:A0:9D:5D:81:31:4E:50:11:74:EA:AB:06:14:7D:18:88
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D160
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60485D98A1C711F19C055A08CF1D38B0.roa
Signing time:             Thu 27 Aug 2026 03:28:31 +0000
ROA not before:           Thu 27 Aug 2026 03:28:26 +0000
ROA not after:            Thu 03 Sep 2026 03:28:26 +0000
asID:                     13335
IP address blocks:        156.234.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119136 (0x1d160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 27 03:28:26 2026 GMT
            Not After : Sep  3 03:28:26 2026 GMT
        Subject: CN=6a8faedf-84a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1d:2e:0e:e1:08:93:c8:9f:4e:1e:99:92:a8:
                    60:33:31:d3:bd:d3:d9:0f:b8:0b:f6:54:81:9e:27:
                    c4:2b:f5:c1:6c:21:de:f4:68:ca:ab:f0:a4:9b:76:
                    69:4f:d2:28:e8:6b:77:66:b5:d8:e6:f8:6a:69:34:
                    7b:b7:4a:81:25:55:5f:a0:c6:3c:bd:05:80:6a:d6:
                    c4:61:09:cf:20:b1:3f:8c:64:bb:7b:09:c2:60:42:
                    63:d0:85:c6:77:aa:5c:5b:5a:08:a7:2d:eb:05:12:
                    11:3b:c5:32:cd:97:ed:5c:7e:79:6f:99:f0:9f:45:
                    18:5b:d8:bc:9a:a3:cd:8e:55:b0:68:ec:61:f5:46:
                    c3:31:ad:c1:39:c8:cd:2a:0c:d3:16:20:5a:58:c9:
                    78:3d:f2:5b:4f:c1:3e:f4:d6:2b:de:b9:98:3e:fd:
                    af:39:81:cf:1f:7a:87:d7:fc:58:e7:e0:eb:85:a2:
                    60:80:ad:a9:1d:0a:fd:92:4a:13:12:4b:7d:9c:7b:
                    ee:9f:23:46:5e:b2:1a:03:25:bb:68:75:b9:32:79:
                    59:fc:9d:4b:e8:53:38:97:94:42:b2:3c:58:2d:a2:
                    32:f5:a1:b1:79:f8:97:80:04:1e:78:21:67:fb:71:
                    e0:3e:36:a9:8e:56:60:b5:d8:c5:8a:33:02:44:80:
                    19:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:A7:44:37:A0:9D:5D:81:31:4E:50:11:74:EA:AB:06:14:7D:18:88
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60485D98A1C711F19C055A08CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:c6:f3:8a:21:dd:34:35:37:a7:76:c7:be:30:b1:bd:1f:9a:
         07:f3:ad:a5:23:39:3a:9b:49:69:6d:49:7a:1d:a2:3a:f8:6e:
         69:ae:3f:ef:88:b6:df:7c:84:eb:d4:f3:f9:5d:23:4f:73:b7:
         f9:27:fd:51:7d:00:91:7c:9b:7f:99:14:bd:af:9e:99:cb:98:
         9d:f4:61:6d:04:b1:ab:dd:82:9b:25:9d:28:b8:1d:11:c3:84:
         a3:db:80:32:ea:ee:e2:72:20:eb:1f:41:99:f7:6e:37:90:cb:
         ef:76:4a:f9:62:94:00:1e:69:98:71:07:49:4d:01:6d:e9:23:
         33:a3:f0:31:cf:f4:bf:74:50:32:13:a9:7a:57:f2:29:cc:1a:
         9c:19:b8:21:a3:fa:60:3c:f5:8e:a1:e9:22:79:da:23:70:0b:
         2a:fd:81:8d:45:c6:4b:1f:1d:89:8e:54:01:25:7d:ce:2c:c0:
         3d:94:3b:b5:56:4d:69:ba:4a:4c:f7:f5:51:a2:58:57:3e:17:
         46:56:50:69:04:f6:77:e5:f1:c1:a5:bf:f5:ae:91:4e:00:2d:
         a3:79:ec:c0:39:a0:b3:3f:1d:7b:96:26:d9:c0:74:4d:f4:d6:
         b6:80:d9:f1:5a:ed:ca:3b:a4:94:0c:01:94:1d:50:12:e2:30:
         60:32:11:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----