Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69ED0D60955D11F1B81BB108CF1D38B0.roa
File:                     69ED0D60955D11F1B81BB108CF1D38B0.roa (raw, json)
Hash identifier:          uyxC3uDQaj29jbSMfEMuctF+40XGo0uUTksQxBJEAbU=
Subject key identifier:   C4:A1:40:97:AC:C5:F7:EA:78:31:31:10:98:13:7F:82:4A:8C:4C:D3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CB75
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69ED0D60955D11F1B81BB108CF1D38B0.roa
Signing time:             Tue 11 Aug 2026 08:19:47 +0000
ROA not before:           Tue 11 Aug 2026 08:19:43 +0000
ROA not after:            Wed 09 Sep 2026 08:19:43 +0000
asID:                     24435
IP address blocks:        156.238.82.0/24 maxlen: 24
                          156.238.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117621 (0x1cb75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 11 08:19:43 2026 GMT
            Not After : Sep  9 08:19:43 2026 GMT
        Subject: CN=6a7adb23-f369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:76:94:0d:c5:d4:43:c8:90:fe:ba:5a:86:00:
                    fa:98:4f:28:9b:84:5f:2e:b8:f3:3f:a9:6d:26:19:
                    00:2d:6b:5e:cf:d0:cc:7b:ca:99:61:d1:4c:73:11:
                    5c:0f:e7:6d:dc:1f:3d:7d:7d:7e:92:47:d9:9c:39:
                    78:6e:c6:99:df:ef:4d:5b:8e:f0:3b:d2:7b:e6:aa:
                    a5:5a:6a:4a:c0:12:76:cf:c7:c0:96:dc:83:07:80:
                    30:b7:21:e1:6a:72:85:fc:7a:67:80:0d:7f:c2:8a:
                    31:07:0e:bb:42:14:67:1d:ed:ef:d3:fc:d3:76:e1:
                    17:c4:5a:a4:f2:19:4b:75:75:cc:cc:e9:d1:a3:5e:
                    81:e8:23:eb:cb:18:ce:81:2f:59:b7:44:eb:28:41:
                    dd:46:07:0f:43:f0:a1:f0:ef:f8:be:fd:ac:14:7b:
                    f5:56:0a:46:7a:81:1d:dc:e6:f3:1d:5d:32:fe:9f:
                    4f:48:70:36:18:10:19:05:74:16:dc:90:54:73:e1:
                    d8:87:75:19:8c:1d:ed:89:20:10:79:1c:fa:e1:13:
                    b5:b7:15:94:f8:86:78:27:e1:9f:f2:9e:3e:16:2b:
                    06:44:3d:56:dc:6a:60:7f:8a:ab:f0:8b:9e:6e:86:
                    6a:dc:7d:d9:7b:96:0a:a5:9e:cf:be:53:2a:be:82:
                    fd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A1:40:97:AC:C5:F7:EA:78:31:31:10:98:13:7F:82:4A:8C:4C:D3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69ED0D60955D11F1B81BB108CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:67:f0:b5:8a:94:98:ef:a9:d4:de:36:bd:e7:ac:9f:6a:60:
         e8:98:e9:35:03:1e:76:b1:2d:d1:13:88:4e:bb:f7:76:f2:07:
         ed:7a:f7:f9:55:f9:54:de:83:40:3a:16:2b:bc:ff:6b:c6:9a:
         24:45:32:28:10:c8:db:81:f1:35:50:79:d1:cf:72:f2:7b:00:
         cd:2a:9c:ea:8f:45:09:79:47:b8:34:59:db:7f:62:ca:d9:53:
         11:e4:bd:f4:cf:78:2f:ac:75:ea:71:b7:84:a9:43:59:29:5b:
         bc:a1:79:94:40:07:7e:51:7f:60:16:11:d9:ec:83:ca:03:a0:
         5c:1b:79:7a:f3:18:21:74:c0:c9:48:0a:22:dd:05:ac:53:de:
         64:32:0e:98:ac:3f:f9:22:90:aa:e3:f8:60:f4:60:50:cf:92:
         ef:e5:06:0a:9e:69:23:22:7d:31:cb:f5:59:87:bc:98:73:24:
         57:9d:39:0a:bd:cb:69:70:f9:68:47:97:84:f3:56:25:d3:80:
         06:35:14:7b:17:62:25:91:54:18:a5:46:bd:20:49:2a:19:78:
         9f:03:c7:c1:c7:4f:d0:f4:4c:7e:7f:13:4b:31:61:2c:8e:d6:
         1c:32:ea:49:c5:e6:ca:82:f2:c5:67:1a:ae:31:33:7f:9c:50:
         70:9b:01:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----