Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B720286C3B911F184AC9C07CF1D38B0.roa
File:                     7B720286C3B911F184AC9C07CF1D38B0.roa (raw, json)
Hash identifier:          b5jRK4xaTZyQHK6lARbsVGTod3KK5C/CSY3kTJ5X4pg=
Subject key identifier:   DD:26:74:46:DC:32:79:96:32:89:24:55:D8:CD:E8:EC:1E:15:9D:2B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC16
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B720286C3B911F184AC9C07CF1D38B0.roa
Signing time:             Fri 09 Oct 2026 08:14:44 +0000
ROA not before:           Fri 09 Oct 2026 08:14:39 +0000
ROA not after:            Sat 09 Oct 2027 08:14:39 +0000
asID:                     132839
IP address blocks:        156.250.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121878 (0x1dc16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  9 08:14:39 2026 GMT
            Not After : Oct  9 08:14:39 2027 GMT
        Subject: CN=6ac8a273-2b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1d:5c:b8:1c:9b:22:e2:b3:74:09:ec:79:ea:
                    f4:6b:45:be:ad:7a:9a:01:c9:cf:71:44:63:c5:98:
                    96:3d:18:99:ce:ee:b2:0f:44:65:51:df:80:ad:6e:
                    c4:19:ac:2a:dc:23:a3:16:a6:f0:d0:8e:22:5d:f1:
                    c0:8b:9f:9f:dd:25:64:70:46:24:a9:fc:5e:93:1e:
                    98:81:f7:2f:1f:76:4d:09:a2:66:b7:c4:a6:b7:08:
                    3a:51:d5:e8:1e:57:fe:6e:aa:05:91:14:62:f2:c8:
                    e6:49:00:5d:78:de:ed:00:1f:c8:94:16:54:d6:37:
                    fb:88:9f:7b:af:09:a3:3b:4c:ac:aa:60:08:d7:72:
                    7f:ee:4b:56:be:54:be:e4:fb:dd:ae:92:8d:56:f4:
                    e6:61:62:cb:02:19:7f:aa:cf:a9:12:9a:f7:64:4c:
                    77:60:6e:8e:a0:b7:e6:37:a9:a9:c6:03:19:61:fb:
                    fd:c1:74:1c:5b:9a:29:38:84:8d:79:40:01:4e:c6:
                    2c:da:f2:08:1c:64:53:1b:62:68:3e:cb:48:4a:c1:
                    c7:c2:d1:f6:df:31:f7:73:83:72:3f:ae:82:35:ce:
                    57:c1:2c:87:91:6c:27:b6:1e:5c:05:96:69:99:49:
                    61:b4:42:9e:00:68:4f:7b:2c:64:e3:9f:a8:d2:d4:
                    53:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:26:74:46:DC:32:79:96:32:89:24:55:D8:CD:E8:EC:1E:15:9D:2B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B720286C3B911F184AC9C07CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.250.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         67:8b:b4:a0:fc:6b:1d:2f:dd:21:97:51:35:77:06:44:b3:6f:
         e0:cf:41:54:e4:21:43:49:24:18:72:54:e8:3e:8a:ba:b4:33:
         d5:ff:78:6d:6f:f7:93:e4:e7:3e:bd:a6:e9:35:b4:a8:20:19:
         62:12:39:62:bf:6d:c6:e3:7a:07:66:3b:20:15:3d:8e:41:c3:
         3f:8c:cb:03:6a:d2:5b:ca:3a:2a:fc:78:56:76:a2:20:e7:2c:
         f6:aa:be:2d:ba:05:d6:30:35:18:07:ac:85:77:94:0b:d7:68:
         6d:2c:e6:04:76:8a:f7:82:fc:d5:0b:62:e5:7d:a3:d5:ce:94:
         40:74:72:5d:ee:cf:b6:db:70:77:71:b8:4f:bf:ef:5d:2b:09:
         5d:4c:57:29:f1:75:df:03:a0:e8:27:86:50:54:bf:56:8b:6c:
         9e:75:68:31:da:ae:85:a9:ca:9c:77:08:c5:14:71:d7:cd:6f:
         b7:71:3c:5f:29:86:44:57:42:1b:7a:5d:2c:f1:a9:94:d4:f6:
         bc:a1:af:fe:0e:64:12:f0:01:cc:8e:66:6e:41:46:ed:8c:43:
         70:e3:57:45:71:a2:46:21:27:61:fd:17:e2:45:03:f0:b6:21:
         16:55:cf:22:fe:2d:82:af:05:92:0f:d6:5d:ea:cc:ea:92:d1:
         4c:43:54:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----