Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7950617C955711F19EB896E4CE1D38B0.roa
File:                     7950617C955711F19EB896E4CE1D38B0.roa (raw, json)
Hash identifier:          yvLY95a/lRCMAYdsnsQ7+KeS4ujuhM4d3oudyyqNjmk=
Subject key identifier:   8E:7F:9F:23:EB:C6:55:AA:D5:21:B2:72:AC:0E:CE:B2:5A:45:FA:13
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CB5B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7950617C955711F19EB896E4CE1D38B0.roa
Signing time:             Tue 11 Aug 2026 07:37:16 +0000
ROA not before:           Tue 11 Aug 2026 07:37:12 +0000
ROA not after:            Sun 20 Sep 2026 07:37:12 +0000
asID:                     63018
IP address blocks:        156.233.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117595 (0x1cb5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 11 07:37:12 2026 GMT
            Not After : Sep 20 07:37:12 2026 GMT
        Subject: CN=6a7ad12c-1d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f1:70:ef:d2:e3:8f:de:c6:3f:02:d4:db:a4:
                    22:91:78:cc:d0:cf:05:b5:11:0c:75:20:d8:17:fa:
                    33:5d:f3:92:4a:23:55:96:0f:d0:cf:6f:3f:c9:78:
                    b6:e8:3d:0e:cd:35:f4:7d:7b:06:b6:0a:7a:50:1c:
                    eb:fd:39:0b:12:ca:77:c0:ba:f0:4d:14:a4:88:65:
                    5a:e6:a3:58:7e:e1:ac:1e:89:29:fe:45:d2:2a:26:
                    a5:98:4c:63:4c:08:f1:ef:01:61:ca:97:d2:45:0d:
                    fe:da:ff:92:19:8a:03:c7:7b:07:0e:06:6b:f1:92:
                    6e:84:a7:fd:24:86:c6:cd:c6:00:02:0a:bc:04:6b:
                    88:c6:b1:24:bd:8e:47:db:b5:cc:0c:96:50:15:9e:
                    b1:d7:87:b7:1f:70:97:85:82:a4:8c:c5:df:33:8a:
                    00:a9:e0:82:e4:9f:17:36:49:00:91:11:9e:22:3c:
                    c3:e3:0a:ca:d1:cd:6d:04:57:27:aa:45:5f:4e:01:
                    e9:d9:a4:ce:51:4d:62:1f:b7:5e:ab:9a:ec:23:2c:
                    cc:0a:f6:aa:a1:5f:10:ac:a2:90:ab:2f:c8:e8:3e:
                    a0:4d:ce:aa:0c:4b:ec:a7:27:aa:d3:33:28:3a:69:
                    2f:ee:41:30:f7:55:6c:95:92:9f:78:7a:bd:d4:3d:
                    b9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:7F:9F:23:EB:C6:55:AA:D5:21:B2:72:AC:0E:CE:B2:5A:45:FA:13
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7950617C955711F19EB896E4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:09:6a:73:af:81:40:f0:0e:31:ec:38:98:39:57:80:04:a8:
         b7:17:50:ad:1b:b2:de:61:09:03:60:63:8a:56:53:01:61:16:
         f8:86:f5:0c:ac:25:11:46:5f:f4:09:ab:68:ac:4a:99:27:5d:
         8c:86:6c:40:bc:e6:ed:39:68:d0:c5:67:21:db:58:95:3a:6b:
         35:ef:51:35:05:28:6e:61:3b:50:46:4c:be:25:5d:34:08:20:
         98:72:53:cd:84:72:e6:c6:a5:4a:42:76:39:10:37:74:ad:25:
         cf:92:b4:ee:12:28:62:1b:8d:aa:a4:a3:1f:a7:7c:dd:ff:08:
         f5:dd:ad:97:6e:00:b5:84:40:b0:3d:6e:76:f5:e6:f4:4a:4d:
         e4:b7:4f:f0:44:fb:c1:10:41:7f:95:a8:c8:cd:33:21:d0:0d:
         02:ae:df:f0:2e:36:55:dc:16:c3:11:df:9b:e0:1a:4b:07:96:
         0b:be:af:eb:b3:ab:ae:e8:8e:6f:2e:d8:18:7f:13:02:b5:f4:
         84:88:86:0c:7f:a1:d8:00:08:01:8a:00:50:a4:bf:9d:12:15:
         4f:f5:79:6b:b3:e5:fd:b4:94:46:26:53:70:03:dd:c2:05:4a:
         9b:41:32:36:5a:a4:bc:10:1f:5c:d5:e9:4b:06:3d:c2:d5:eb:
         fd:5b:76:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----