Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A82A6469C7211F19DAC74FBCE1D38B0.roa
File:                     7A82A6469C7211F19DAC74FBCE1D38B0.roa (raw, json)
Hash identifier:          QGN3vuKhVaIq5ZXiQyZjnG8is5380y3GKEB2Z2g0OHE=
Subject key identifier:   8D:A6:06:01:CC:3F:E8:04:D2:F0:E4:91:2C:D8:A6:E1:5D:66:8F:9F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE92
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A82A6469C7211F19DAC74FBCE1D38B0.roa
Signing time:             Thu 20 Aug 2026 08:38:12 +0000
ROA not before:           Thu 20 Aug 2026 08:38:08 +0000
ROA not after:            Sun 19 Aug 2029 08:38:08 +0000
asID:                     17561
IP address blocks:        156.226.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118418 (0x1ce92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 08:38:08 2026 GMT
            Not After : Aug 19 08:38:08 2029 GMT
        Subject: CN=6a86bcf4-8e8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:08:0a:23:08:80:96:55:c2:fd:7e:d3:32:97:
                    cf:32:e1:62:0e:8e:56:af:bf:57:6f:d5:b3:33:e9:
                    08:99:4c:60:9d:1f:8c:25:4c:eb:a0:fd:93:90:7c:
                    57:09:db:4f:be:af:f0:fd:08:d2:f9:d5:bb:14:68:
                    37:2b:51:fb:73:12:73:37:53:fb:ef:60:af:52:84:
                    97:a7:5a:b6:2e:bd:40:06:00:eb:ab:ce:8a:d9:06:
                    c1:e3:a9:be:57:a6:34:af:1d:c0:44:e9:36:2f:8b:
                    a1:f6:61:6e:3f:0f:15:81:67:61:e4:85:c6:b7:9a:
                    12:91:9f:fc:80:6b:f4:67:40:a7:18:36:10:ec:09:
                    ce:8b:93:c9:d3:07:46:fc:7b:9c:3a:4b:06:ea:67:
                    db:4b:26:85:f1:84:c8:99:59:39:dc:f8:9a:41:5f:
                    d4:42:37:e0:e7:de:b9:90:1c:fd:9f:55:e8:ec:8e:
                    db:9f:c2:4e:9f:1f:89:da:78:ed:25:93:a9:ae:b9:
                    a9:4f:c6:ba:1b:4f:e8:df:ac:7c:04:3f:fb:40:8a:
                    63:8e:61:e4:37:ba:94:c3:d9:35:8d:47:b0:52:27:
                    38:8a:73:ca:58:c5:83:aa:00:4e:37:47:4b:1c:b9:
                    51:98:cf:f8:ca:2a:20:c0:d4:8b:39:96:34:0f:69:
                    b1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A6:06:01:CC:3F:E8:04:D2:F0:E4:91:2C:D8:A6:E1:5D:66:8F:9F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A82A6469C7211F19DAC74FBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:38:94:42:ee:bc:0e:2c:c6:56:56:bc:7b:62:7e:b4:4c:a2:
         4c:ca:4e:22:e1:5b:95:e1:5c:c8:b5:4f:e8:18:82:c7:26:75:
         4f:42:f2:f8:ac:23:b7:9c:48:15:50:8a:4e:e2:f0:93:b8:93:
         e9:c9:0f:54:fe:10:e7:a2:8a:03:4d:72:4e:14:27:d6:29:43:
         19:0c:f9:3d:91:fa:f0:55:e0:8b:03:3e:66:8d:f4:aa:22:4c:
         de:57:e5:7a:55:f4:68:e8:9d:aa:e2:fb:75:d6:8b:aa:bb:7f:
         58:61:e4:08:8a:9a:46:47:0f:b2:c8:04:8f:5d:52:3b:6a:2c:
         cf:2c:c4:e3:a2:6a:ac:d4:8a:26:13:fc:39:fb:ba:da:9a:d2:
         3b:6d:9a:f1:f7:ae:3b:3c:c4:79:b1:f6:bf:54:47:55:8e:18:
         d9:d6:bd:b3:34:ee:b0:1a:0d:cd:92:f4:13:1d:05:75:3c:52:
         ff:25:04:20:1d:2d:6f:39:4c:95:57:a4:a4:63:1c:c0:6f:6c:
         6c:f6:65:de:ac:3e:b8:d5:a6:0c:c2:b5:81:27:d7:d9:25:bd:
         c9:bd:b8:0b:aa:bc:f4:7c:d7:66:2d:35:f5:41:6e:4f:98:67:
         e2:97:7d:d7:09:9f:f3:89:db:a8:e8:3f:cd:1f:55:bf:d3:40:
         52:9b:1b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----