Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68E1C62E9F9C11F1BA11F7E4CE1D38B0.roa
File:                     68E1C62E9F9C11F1BA11F7E4CE1D38B0.roa (raw, json)
Hash identifier:          ZVsQnbKrxRuULqBPKDDFv2yKq8QziUaYw1rFvREbsac=
Subject key identifier:   30:DA:9B:3E:51:3D:FA:3D:4C:F4:CC:B1:2F:18:96:A1:5F:55:AF:13
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D06D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68E1C62E9F9C11F1BA11F7E4CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 09:15:55 +0000
ROA not before:           Mon 24 Aug 2026 09:15:51 +0000
ROA not after:            Thu 19 Aug 2027 09:15:51 +0000
asID:                     13335
IP address blocks:        156.246.69.0/24 maxlen: 24
                          156.246.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118893 (0x1d06d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 24 09:15:51 2026 GMT
            Not After : Aug 19 09:15:51 2027 GMT
        Subject: CN=6a8c0bcb-e913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:88:5c:9a:19:87:56:a5:8d:17:96:13:0f:
                    f2:8e:91:ca:dc:e5:3d:ac:0d:8a:c1:67:24:91:18:
                    21:94:1f:72:5b:ca:26:f7:65:a0:7f:52:f6:e6:e0:
                    a6:dc:2c:6f:ea:8a:cc:d7:71:fa:18:5e:71:01:b9:
                    d2:82:1b:28:d4:f0:7b:cd:1f:e0:de:c8:aa:7e:9d:
                    32:fb:65:43:4c:28:27:68:93:a7:e1:7b:c3:65:8d:
                    cb:c2:94:1a:ac:65:12:5e:88:ef:01:1b:98:db:6a:
                    8b:ef:9c:81:24:f9:fd:f7:8e:cb:e3:30:19:7f:fe:
                    d8:4a:bd:4c:ed:cd:7a:83:7d:b2:54:ab:3c:db:86:
                    3e:20:32:38:b8:f2:d9:80:20:b5:c4:e4:b3:8e:aa:
                    a1:da:16:dd:1a:8b:c6:ea:3c:a8:77:46:0d:78:6b:
                    41:4f:6a:d9:1e:d4:73:f8:33:2e:c3:4d:cd:ff:80:
                    d6:66:1e:8f:77:9a:f8:1a:44:b8:f7:55:43:36:be:
                    38:59:b4:a3:b7:62:0e:be:13:ea:0f:72:90:d0:5c:
                    5d:51:22:a3:21:1b:e3:09:23:fc:12:9f:f5:e4:00:
                    b5:98:51:35:01:8d:2e:5f:4c:d3:48:b0:c2:5c:9b:
                    0f:82:42:94:63:81:51:56:2a:d9:cf:90:6c:3b:d0:
                    9f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:DA:9B:3E:51:3D:FA:3D:4C:F4:CC:B1:2F:18:96:A1:5F:55:AF:13
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68E1C62E9F9C11F1BA11F7E4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.69.0-156.246.70.255

    Signature Algorithm: sha256WithRSAEncryption
         6f:d0:0f:6c:b3:5a:2b:64:47:c3:cc:f6:e5:e0:d0:10:00:31:
         f7:3b:4f:34:72:32:d7:5c:d9:d4:12:88:b2:5d:75:54:83:6e:
         b7:c1:62:b6:fa:52:52:84:35:86:43:d9:18:73:01:e6:25:62:
         9f:a2:33:b6:6f:0d:5d:63:38:10:e9:e5:7f:ac:be:a6:33:99:
         92:93:65:87:74:4d:5f:b3:52:68:66:81:91:24:40:56:04:13:
         53:64:21:01:5d:e8:fa:e0:b7:9b:c8:16:c1:e7:39:9c:93:3a:
         a4:ea:82:7b:e2:74:55:6e:30:31:df:37:15:21:e7:b9:45:4c:
         47:26:74:3b:95:41:03:94:a6:40:09:88:d9:26:17:8f:a2:3a:
         6e:90:6f:7a:d4:aa:4c:51:10:7c:ae:a0:93:49:e3:93:e8:f5:
         a2:ac:cc:70:02:57:2d:bd:8b:d3:12:cd:10:08:bf:77:e3:b1:
         02:9d:14:3e:a3:25:83:3f:af:0b:74:9b:0a:e6:91:de:b9:98:
         70:b8:34:c8:b2:47:0a:da:91:a4:01:8a:f2:30:8d:1e:cb:9b:
         01:ad:53:9c:37:dd:28:ac:35:9a:87:67:56:78:5e:c0:80:23:
         20:05:b9:5f:f8:ea:87:cc:34:52:29:d2:6b:cc:1b:42:24:d0:
         75:bb:fa:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----