Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/755734FEC57911F1813029EECE1D38B0.roa
File:                     755734FEC57911F1813029EECE1D38B0.roa (raw, json)
Hash identifier:          s/MwXjcN3y26+2D0lLBBELv7Pe9qsjtPUBq27b8p8CU=
Subject key identifier:   DA:17:9A:10:9A:49:AA:E9:C1:20:88:FF:A8:27:0F:E2:50:82:E3:6D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DCCF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/755734FEC57911F1813029EECE1D38B0.roa
Signing time:             Sun 11 Oct 2026 13:41:28 +0000
ROA not before:           Sun 11 Oct 2026 13:41:23 +0000
ROA not after:            Mon 18 Oct 2027 13:41:23 +0000
asID:                     132585
IP address blocks:        156.241.4.0/23 maxlen: 24
                          156.241.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 23 Oct 2026 13:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122063 (0x1dccf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 11 13:41:23 2026 GMT
            Not After : Oct 18 13:41:23 2027 GMT
        Subject: CN=6acb9208-8aa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:39:14:3c:2f:93:4a:fe:dc:a9:66:d5:50:37:
                    32:14:7d:91:25:b5:46:0a:5f:58:06:af:32:1a:be:
                    f4:de:13:67:1d:13:29:2a:99:a2:5f:f6:88:6e:8e:
                    dc:b4:a1:92:4d:a9:ec:9c:2a:e5:1c:b6:e8:ff:7c:
                    b0:dd:25:92:8c:22:5d:8a:65:5a:bc:16:cf:5a:b1:
                    1a:c2:da:7e:c6:f5:5c:d1:f7:60:fe:b6:14:f7:38:
                    95:93:10:66:ec:12:36:bd:d5:84:fc:1d:e5:2c:86:
                    43:f8:a3:d7:5b:4d:99:c2:12:8e:ce:84:35:04:da:
                    15:e9:03:e7:09:06:4f:04:4a:83:71:be:a3:9b:cc:
                    de:93:bf:bb:17:09:eb:ae:9b:15:94:73:65:07:28:
                    cc:ac:d8:10:ef:49:c7:8e:a2:41:75:12:3d:78:a4:
                    0a:c0:83:95:79:51:f0:4a:47:7d:82:3d:ad:49:de:
                    6b:71:3f:66:b2:09:6d:7c:ba:e6:e6:b9:7c:80:6b:
                    26:82:b9:8b:ef:68:05:51:b7:ca:d5:be:1c:fa:c1:
                    3b:b5:bb:2f:d2:0c:5e:31:e6:f0:23:f1:27:0a:73:
                    12:16:c8:63:b7:f2:85:5a:f5:6f:ed:a7:b1:3c:ef:
                    12:bc:11:df:6a:60:e3:e1:05:da:27:17:7d:55:33:
                    7b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:17:9A:10:9A:49:AA:E9:C1:20:88:FF:A8:27:0F:E2:50:82:E3:6D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/755734FEC57911F1813029EECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.241.4.0/23
                  156.241.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:45:5c:2c:d3:f5:68:fd:05:da:fc:25:e2:65:97:da:8a:c5:
         b5:ff:b3:a2:5c:c2:06:03:e0:64:c8:b4:6a:aa:26:eb:54:95:
         d7:39:e8:1a:90:bb:f2:d9:61:de:41:7c:d2:c2:0f:8d:8c:dd:
         bb:47:57:51:59:2b:f6:57:67:37:61:ae:a8:eb:6b:ff:d3:23:
         83:4c:b9:58:a1:80:fc:f0:4b:e8:3e:cd:b6:4e:3a:86:4d:30:
         4a:26:b4:33:5e:11:a8:ec:f9:be:cd:f4:dc:08:4e:49:9b:36:
         e8:43:c5:31:a1:26:6b:d5:37:31:8b:29:9d:71:64:5b:b7:16:
         f7:29:b4:c0:c9:cf:d9:95:b1:4c:3e:46:b2:43:67:1c:72:c5:
         af:d8:5b:48:e4:7e:b2:61:7a:b5:b8:fb:59:81:fc:95:9e:ba:
         ec:63:3c:c7:07:d9:8b:a5:10:b1:32:c4:62:b1:c0:f5:ff:b2:
         22:99:70:f0:13:fc:a9:cd:e8:99:c1:07:e7:44:00:0b:e3:e2:
         ff:89:aa:f3:f0:1e:ed:6a:6b:0f:92:f3:f8:60:bf:fe:89:71:
         c7:12:5e:ea:09:f4:67:6c:2b:04:ac:45:19:f8:68:1d:0f:37:
         f9:42:69:1f:13:6b:71:c3:22:c9:5c:9a:b3:23:82:b8:c7:ad:
         9f:47:96:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----