Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76FE251E8D9411F18146C1D3CE1D38B0.roa
File:                     76FE251E8D9411F18146C1D3CE1D38B0.roa (raw, json)
Hash identifier:          UyigMYGVHLSu/mnFxKSIrHFKftFOSdGxaOD6vApQjx8=
Subject key identifier:   A4:84:C4:35:2D:E2:C8:EE:66:3A:6A:64:56:4A:BE:66:0E:D4:26:AB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C902
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76FE251E8D9411F18146C1D3CE1D38B0.roa
Signing time:             Sat 01 Aug 2026 10:33:42 +0000
ROA not before:           Sat 01 Aug 2026 10:33:38 +0000
ROA not after:            Mon 05 Oct 2026 10:33:38 +0000
asID:                     13335
IP address blocks:        156.224.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116994 (0x1c902)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  1 10:33:38 2026 GMT
            Not After : Oct  5 10:33:38 2026 GMT
        Subject: CN=6a6dcb86-44f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:96:1a:f9:a0:bc:c7:51:af:81:71:54:7d:ed:
                    8f:ec:9b:3c:86:56:07:b5:53:eb:0f:8a:5b:95:a2:
                    6a:f8:58:b3:e1:b0:7b:bd:2d:aa:8c:51:52:74:e5:
                    66:6b:46:44:d0:0c:26:1b:a0:9c:14:e8:db:2b:c8:
                    85:55:2a:9b:0b:ae:60:8a:93:f3:aa:e2:79:c2:82:
                    22:02:d0:c5:ae:28:cc:5d:5d:3d:d9:ce:8c:0f:be:
                    e0:70:bd:f9:85:53:18:80:f0:3e:77:06:b5:59:8c:
                    65:01:ea:af:19:7b:5e:5d:b7:5a:4e:ea:6f:65:02:
                    5f:bc:69:8c:61:5f:7c:31:de:4e:a9:24:e1:14:24:
                    eb:90:ec:51:ec:66:7c:fb:62:e1:98:26:ae:e1:08:
                    31:f7:73:2e:64:6e:e6:83:fe:84:8f:f9:85:db:22:
                    b4:ca:b9:c7:05:1a:9d:2c:61:db:58:b8:ff:d4:da:
                    6c:0c:07:24:d1:f6:be:ce:78:0d:2e:4f:2b:89:22:
                    fe:37:9d:24:ec:41:23:e9:2f:1a:a3:c0:c4:e1:2e:
                    25:ae:5c:df:da:d6:e0:a5:4b:59:9f:39:a2:12:4c:
                    2a:bb:58:0d:a6:6b:b1:8c:c8:f2:12:16:c6:04:2d:
                    0a:61:d8:cf:62:2e:32:83:b2:09:d7:9a:bb:35:64:
                    bd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:84:C4:35:2D:E2:C8:EE:66:3A:6A:64:56:4A:BE:66:0E:D4:26:AB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76FE251E8D9411F18146C1D3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.224.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:08:62:e0:8b:7c:1b:ed:8e:0a:2a:51:0f:92:60:1d:d6:5b:
         0f:ca:e1:9a:6b:8b:41:92:da:e4:45:29:0e:d6:34:41:c4:fd:
         ad:72:77:ca:8a:dc:54:fa:fc:90:00:68:4e:da:1c:90:dd:48:
         24:da:f0:89:d8:e8:5f:6a:ff:c3:98:ab:01:55:bd:32:55:77:
         29:aa:71:d2:76:67:f8:83:ea:8c:11:83:72:32:89:6c:eb:e3:
         bc:15:18:21:96:96:a0:bf:7e:a4:3d:a3:b9:69:a5:39:a1:03:
         f4:73:0c:16:32:ff:f4:1e:9e:cb:36:72:5a:9a:18:d9:96:ab:
         e8:f7:fd:4d:ac:53:ee:a3:35:d3:02:e3:73:c8:84:bb:63:a1:
         22:bc:da:07:dc:a7:03:e4:d7:24:bf:40:cf:78:01:49:52:f2:
         5a:31:18:2c:39:1b:73:0f:2d:59:84:4d:b8:e8:c9:d5:53:0a:
         9b:34:ef:51:62:30:3b:1b:f8:98:af:ac:91:4e:6c:79:cf:85:
         09:25:3e:6f:87:50:5e:fa:36:a0:51:48:c1:fa:b1:4d:b6:7e:
         e8:2a:43:ce:a1:62:f8:0a:bd:88:c8:f7:a8:4d:9f:17:4e:cf:
         17:d6:ce:df:09:a5:cf:93:6b:f2:88:b1:44:90:88:00:fd:71:
         7b:f3:45:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----