Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C1BB56CCDE411F19FE699E3CE1D38B0.roa
File:                     7C1BB56CCDE411F19FE699E3CE1D38B0.roa (raw, json)
Hash identifier:          TtOnXMCptoWG8cJrRC5Ph614oY0Z8oOCjiDHglmBC4E=
Subject key identifier:   77:79:4C:77:96:45:3D:07:C6:64:A2:EC:34:82:26:B7:12:59:6D:68
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DF8F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C1BB56CCDE411F19FE699E3CE1D38B0.roa
Signing time:             Thu 22 Oct 2026 06:47:45 +0000
ROA not before:           Thu 22 Oct 2026 06:47:40 +0000
ROA not after:            Sun 22 Nov 2026 06:47:40 +0000
asID:                     17497
IP address blocks:        156.255.48.0/22 maxlen: 24
                          156.255.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122767 (0x1df8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 22 06:47:40 2026 GMT
            Not After : Nov 22 06:47:40 2026 GMT
        Subject: CN=6ad9b191-a76b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:bf:54:34:e1:3a:c1:10:0e:fb:55:0a:f7:22:
                    5d:02:c1:5f:0b:b7:b2:b7:71:17:38:89:b9:94:9a:
                    d0:df:57:9e:9b:bc:d5:db:0e:7d:e7:60:ec:dd:1a:
                    4f:77:2d:70:c3:69:dc:86:60:95:55:5c:85:11:33:
                    94:b2:f8:6e:73:8c:66:6f:4b:fe:6e:3f:ac:06:fd:
                    6c:1a:b0:9e:80:46:34:96:07:9b:88:b7:bd:a3:07:
                    ea:f6:86:48:83:a5:e3:99:97:18:91:34:e6:13:7f:
                    30:66:0c:af:95:52:23:ce:ac:e3:78:8e:85:ee:61:
                    98:a3:92:d8:a8:f8:76:1d:34:83:13:99:38:0a:55:
                    9c:a8:99:2b:ee:bc:0a:51:a4:5c:b7:a6:30:33:b9:
                    68:0e:45:c8:c7:99:1f:86:1e:30:6b:31:7c:e4:aa:
                    d6:be:e1:be:5e:6a:67:26:84:44:ef:44:0c:46:a7:
                    0a:61:5a:8c:b6:f3:b6:ba:89:ca:c3:03:c4:4c:40:
                    d0:90:54:4b:a3:43:de:75:b8:e9:dd:8e:2d:f6:46:
                    f3:b0:bf:5a:dd:84:8a:6b:c9:73:4a:42:b2:8f:7d:
                    05:63:cd:72:d1:f6:61:a7:35:88:c2:bc:b7:62:91:
                    37:89:48:fc:35:58:44:5c:36:82:91:8c:73:3d:0c:
                    79:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:79:4C:77:96:45:3D:07:C6:64:A2:EC:34:82:26:B7:12:59:6D:68
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C1BB56CCDE411F19FE699E3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.255.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:57:a4:1d:97:71:87:9c:ae:1b:71:4a:8f:7e:02:6d:60:2b:
         73:99:11:8d:4c:84:05:eb:89:b2:02:32:22:0d:4b:a4:6a:83:
         32:8e:1e:69:4c:d2:8a:f2:bb:e5:32:09:85:aa:b9:e7:12:ae:
         d6:1b:37:9c:7a:fa:f5:63:77:17:4e:98:02:74:5e:03:79:64:
         71:90:7a:1b:69:8f:1f:04:c1:8e:1e:ed:3c:7e:e2:fc:05:31:
         74:fb:f5:d7:75:99:8d:b9:cc:f8:24:97:24:d0:8c:1b:94:14:
         19:83:14:a2:50:18:53:35:cc:d3:b6:b8:f0:6d:88:5a:ba:cf:
         ef:81:1d:1c:75:26:98:e1:0f:cc:19:40:f8:48:6c:c9:a0:4f:
         ff:d3:0c:9c:bb:1b:50:1e:8d:f5:33:35:ed:51:60:92:ab:64:
         dd:a0:e4:f1:8f:71:5f:4f:e6:de:20:7c:7e:ab:d5:09:1e:1b:
         96:75:6b:22:99:6e:09:56:48:13:1e:b6:31:7f:de:d3:11:28:
         7b:32:e0:09:3f:0d:11:62:8c:ee:1f:e4:6c:52:3c:bb:ec:26:
         b5:82:c5:ba:ff:ff:60:d6:f9:51:0e:60:33:f3:17:0b:c3:4b:
         e1:32:d7:5d:d8:b7:03:e1:b4:8c:d0:a0:7b:45:cf:8d:29:db:
         56:41:68:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----