Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63E627E6A30711F1BFB25E17CF1D38B0.roa
File:                     63E627E6A30711F1BFB25E17CF1D38B0.roa (raw, json)
Hash identifier:          a8+QffI957YN53B2sH/qWPGCRP0R5w9bTiqXFY3CQuk=
Subject key identifier:   88:E7:FB:9E:AD:56:AC:62:A7:BC:A5:28:0F:D0:20:A5:46:AC:33:36
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D1BD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63E627E6A30711F1BFB25E17CF1D38B0.roa
Signing time:             Fri 28 Aug 2026 17:39:16 +0000
ROA not before:           Fri 28 Aug 2026 17:39:12 +0000
ROA not after:            Tue 06 Oct 2026 17:39:12 +0000
asID:                     8796
IP address blocks:        156.238.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119229 (0x1d1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 28 17:39:12 2026 GMT
            Not After : Oct  6 17:39:12 2026 GMT
        Subject: CN=6a91c7c4-e9d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:18:26:60:80:e4:36:a8:f7:06:e5:c7:11:2f:
                    87:fa:09:e3:f1:87:0f:17:4c:6d:81:6d:90:c9:8a:
                    93:93:67:06:55:64:b5:8a:bf:36:33:37:21:2b:8d:
                    e7:68:78:e2:77:72:d5:ee:d4:3a:46:d6:20:74:21:
                    8e:c2:fb:05:6b:63:ae:ef:ca:05:6d:ad:9e:43:94:
                    9d:9e:99:c7:5a:f3:29:f7:b0:e0:c3:62:09:3e:a2:
                    3a:de:72:ce:5f:0e:88:09:5b:92:bd:c8:dd:62:5f:
                    53:12:b9:c0:af:20:33:f5:9d:22:2c:51:85:c0:a3:
                    bf:b0:30:5d:3b:e2:a8:31:2e:83:31:cb:ba:ec:f4:
                    33:17:78:7f:7d:b6:75:e6:43:a7:28:d9:e3:eb:45:
                    cb:44:82:47:84:28:54:49:d9:0f:5a:fb:24:80:df:
                    80:5a:89:71:d5:33:9b:e9:d8:a7:0e:0e:ae:a7:a2:
                    5b:4f:ca:5b:7d:8a:3c:05:e0:aa:6a:60:c6:da:47:
                    60:a4:f4:12:22:22:c8:80:4c:9b:52:3a:1a:06:e8:
                    d1:62:90:8c:e7:80:0c:65:9e:d6:ff:32:98:08:f3:
                    49:d1:39:97:f4:d5:4a:33:2f:9f:04:db:3a:f9:8c:
                    b1:67:3a:22:e5:0a:f3:6b:88:66:a3:27:55:d7:93:
                    44:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E7:FB:9E:AD:56:AC:62:A7:BC:A5:28:0F:D0:20:A5:46:AC:33:36
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63E627E6A30711F1BFB25E17CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         96:54:cb:79:bf:be:a6:38:cf:12:af:5a:9e:20:dc:03:15:e5:
         ac:8f:56:ec:49:70:df:31:75:83:fa:79:3a:c6:0c:45:48:f6:
         df:67:aa:ba:bc:81:be:fb:2e:60:e3:73:f1:3e:39:40:8e:0f:
         49:8e:9c:72:a9:22:3c:c3:ac:56:a2:d0:0f:01:fd:f4:ff:ac:
         40:4d:9f:05:4b:2e:fb:85:f6:80:53:12:7f:f6:dc:24:b7:c1:
         ca:56:b4:86:a8:51:f2:90:65:8e:8c:6a:44:f2:ed:1a:d4:c2:
         fa:70:54:87:ea:60:c7:b0:8f:11:4c:15:89:58:db:12:27:30:
         ec:48:7e:c5:3b:07:71:a9:15:a5:2f:1b:71:45:b6:4b:46:05:
         d4:3c:82:5c:a4:87:f8:d1:e8:10:6f:dc:f0:3b:61:97:43:b9:
         14:e5:c3:2f:7b:a2:b7:af:ec:31:16:c5:d0:0f:fe:2d:33:b3:
         ab:0d:d3:03:51:ab:b8:52:e2:76:38:4e:ab:2a:42:87:60:4c:
         fc:d0:30:f6:ea:26:a0:99:8e:e3:51:b7:6e:dc:cb:f5:30:d9:
         f8:b9:6f:2c:10:20:dc:d3:4b:e3:93:28:02:79:64:a7:ce:eb:
         99:47:d3:2d:f9:7c:e7:53:85:85:88:39:8b:a5:70:86:ad:37:
         8f:93:d3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----