Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/694146A08BC711F1BA2558CFCE1D38B0.roa
File:                     694146A08BC711F1BA2558CFCE1D38B0.roa (raw, json)
Hash identifier:          ZiSk0IJLHhWyFXMOoHDlrmd0dHvN506e95EeauKfib0=
Subject key identifier:   86:37:B6:B1:6E:30:73:AD:8D:5C:4C:59:74:F5:F4:55:A9:7D:90:31
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C8AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/694146A08BC711F1BA2558CFCE1D38B0.roa
Signing time:             Thu 30 Jul 2026 03:33:21 +0000
ROA not before:           Thu 30 Jul 2026 03:33:17 +0000
ROA not after:            Fri 28 Aug 2026 03:33:17 +0000
asID:                     64013
IP address blocks:        156.234.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 27 Aug 2026 20:44:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116908 (0x1c8ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 30 03:33:17 2026 GMT
            Not After : Aug 28 03:33:17 2026 GMT
        Subject: CN=6a6ac601-9793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:91:3d:e6:f7:2a:8e:43:70:97:f5:79:1d:fa:
                    38:f5:02:4b:4d:ce:3e:1e:14:cd:52:46:a7:a4:57:
                    72:70:d9:e0:89:b5:87:d2:d8:31:4c:67:c6:d3:56:
                    28:29:14:95:0c:f9:3b:4c:38:64:0e:a9:15:9b:68:
                    74:cf:65:fb:a1:e5:00:03:10:21:fa:53:d7:c8:b4:
                    1d:be:3b:89:bb:0b:f9:64:e0:d4:12:99:47:2e:95:
                    3c:7e:ba:0d:21:06:23:f6:8e:c9:95:a2:65:2e:83:
                    30:c9:65:9e:ea:7b:7a:7f:32:fa:1c:3d:f0:6b:f3:
                    26:1a:67:f9:01:36:cf:13:8a:59:62:16:a8:61:d3:
                    aa:7e:d0:65:d3:0f:5a:c0:96:d1:a1:e5:f1:8d:26:
                    c5:d6:22:c9:07:17:24:b0:bd:3d:ea:ec:e9:81:bc:
                    a8:90:06:ed:da:20:76:9b:99:e1:98:52:b7:b6:87:
                    d1:3e:9e:77:89:f1:93:7b:fd:37:d8:e9:75:54:09:
                    a7:3e:c2:ca:cd:0c:a4:10:85:07:7e:0c:80:96:c5:
                    91:26:5d:a4:cc:8b:c8:c0:8b:d0:28:ef:e8:6b:44:
                    ae:76:75:d8:9c:60:90:39:25:ac:57:56:4d:00:e2:
                    60:91:1a:55:be:db:62:49:88:20:ca:31:00:ca:66:
                    87:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:37:B6:B1:6E:30:73:AD:8D:5C:4C:59:74:F5:F4:55:A9:7D:90:31
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/694146A08BC711F1BA2558CFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         90:f6:1f:68:90:37:cd:c2:40:7e:0a:5f:c8:52:d2:47:d5:97:
         fb:6e:f8:0a:eb:ab:21:82:51:67:26:81:34:6e:90:b7:98:57:
         58:28:89:aa:aa:6e:f6:d9:97:1a:73:60:ac:4b:4f:a5:48:18:
         8a:df:fa:ba:be:e2:c1:32:00:03:24:2f:70:49:17:4b:5b:90:
         0a:f8:a3:ea:ea:0b:c8:85:75:2f:9c:2a:d5:44:12:89:0d:7a:
         33:7c:03:2c:ed:7c:9d:90:2b:a4:e1:e8:bf:73:f8:a3:61:f9:
         25:65:5d:0a:ec:72:be:f6:69:d8:19:a2:61:bb:6f:40:2c:13:
         01:ff:16:b2:f2:27:ce:f6:f0:59:1d:40:64:4a:aa:b4:47:bd:
         ed:a6:c3:92:2e:ee:1b:af:6d:cb:80:c2:5f:8d:30:9b:20:53:
         9d:7b:d6:d6:63:11:80:aa:3a:e9:8b:0e:98:9f:f4:a6:e7:27:
         f7:55:bf:53:f1:c9:bb:ea:02:65:6d:98:39:67:54:a0:68:dd:
         88:f5:e9:b4:a8:93:4f:f7:5a:62:82:9f:9b:c2:92:d5:cb:73:
         db:61:c3:f7:c1:ea:0a:47:c7:ec:8d:a7:1f:ae:1e:ed:db:6b:
         45:9d:32:e7:0d:9e:9e:5b:2f:df:0e:17:df:c7:a0:0c:db:19:
         f2:35:fd:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----