Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71FFE3669C8711F1A06801F8CE1D38B0.roa
File:                     71FFE3669C8711F1A06801F8CE1D38B0.roa (raw, json)
Hash identifier:          eRPJ8bdCZDw6jH7uwsdWj6lE+eQyw34DB3/0e9tK2vA=
Subject key identifier:   A4:CD:86:CA:61:F0:69:28:BC:88:08:79:54:31:1B:EE:E0:42:8D:EA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CED0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71FFE3669C8711F1A06801F8CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 11:08:18 +0000
ROA not before:           Thu 20 Aug 2026 11:08:13 +0000
ROA not after:            Sat 10 Oct 2026 11:08:13 +0000
asID:                     3257
IP address blocks:        156.225.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118480 (0x1ced0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 11:08:13 2026 GMT
            Not After : Oct 10 11:08:13 2026 GMT
        Subject: CN=6a86e021-21ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1a:e3:a3:0d:42:37:be:17:c9:32:ca:18:92:
                    f6:c1:54:8d:80:60:b8:d5:62:d2:f9:41:5c:1a:09:
                    b2:f0:19:01:b6:c0:1e:79:90:20:03:db:1f:03:00:
                    0e:1e:02:c5:0a:41:40:bf:ab:7b:28:b9:1e:47:fa:
                    99:fb:53:d6:f6:f8:eb:31:ed:3b:43:47:68:98:74:
                    9f:83:c2:fc:ff:fa:4c:47:59:89:44:7b:cd:87:02:
                    c3:08:24:88:4e:bb:b9:1a:1f:f1:8b:c0:d3:b7:4a:
                    e1:3b:15:3c:12:f3:f9:18:82:b0:67:39:85:ac:f0:
                    a2:1d:f2:e0:c8:cd:c5:2c:38:82:e0:7b:78:73:87:
                    86:0a:41:7b:2f:02:09:d1:9c:2d:17:ee:ab:f0:0c:
                    0f:c6:7e:15:d2:e2:56:3b:2a:1e:4b:4c:e4:04:50:
                    02:ac:a0:40:c3:93:57:a3:5c:36:44:f6:27:8b:8b:
                    e8:69:ff:97:a9:65:24:98:2e:59:a7:02:d3:09:8d:
                    b9:c0:8a:c8:c9:ac:15:5c:f6:79:6a:15:6d:06:97:
                    5b:5c:96:42:aa:fe:be:9b:68:94:ce:77:ee:55:aa:
                    cf:78:2b:80:8a:9f:23:df:bf:d0:7c:a3:80:44:5d:
                    3f:2e:db:c1:55:3d:c4:26:3d:91:17:92:80:6e:61:
                    68:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CD:86:CA:61:F0:69:28:BC:88:08:79:54:31:1B:EE:E0:42:8D:EA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71FFE3669C8711F1A06801F8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:be:c6:17:25:73:24:cc:29:e9:48:ef:d5:e9:ad:b2:72:5e:
         2a:a8:8c:2e:a3:25:d5:d1:9a:b0:94:8a:1d:d0:5e:1e:20:3b:
         79:23:b3:29:44:40:2d:54:64:e8:96:f2:3c:ae:5f:07:d6:b6:
         5c:b4:99:95:c6:22:d8:33:ad:5c:d7:60:9e:dd:3b:83:65:9b:
         83:a0:c0:2b:d5:05:a8:89:f9:f6:c5:c5:b8:ff:b6:d9:65:14:
         6a:54:07:17:a9:3b:24:52:c2:d6:fd:71:5b:e3:69:f0:ee:fe:
         d4:bb:cd:bc:e1:8a:ba:db:70:ac:ff:24:d5:d9:55:9d:99:41:
         c5:14:e9:83:58:5c:5d:d4:4f:7d:c7:de:94:91:fb:cb:56:77:
         e8:7e:63:0a:37:8b:af:d1:73:1b:e0:5e:4d:52:b8:7c:a1:62:
         34:99:96:88:ac:c1:e3:d4:be:46:03:b7:d8:56:76:16:a8:34:
         58:fe:bc:3c:c1:a4:55:3e:3d:14:78:64:5b:3a:da:bd:16:66:
         05:6b:c0:70:e6:0b:95:11:1c:2b:ef:6d:e7:14:32:2d:69:e8:
         75:c3:ae:09:92:c7:37:ee:b8:50:7d:cb:e7:2a:0a:20:07:37:
         02:2f:0d:4a:9f:65:70:12:a1:1c:a7:e4:6d:c7:af:7e:6c:da:
         95:e7:82:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----