Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E85F6B8C87711F1814204F9CE1D38B0.roa
File:                     7E85F6B8C87711F1814204F9CE1D38B0.roa (raw, json)
Hash identifier:          yDZwsHBq5R8SpngZ4gQeevFGyS0vb6AYIsDcZrHf33Q=
Subject key identifier:   80:40:54:76:0A:95:A1:33:CD:3B:19:12:04:F5:6C:81:A2:D6:E3:75
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DDA9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E85F6B8C87711F1814204F9CE1D38B0.roa
Signing time:             Thu 15 Oct 2026 09:04:58 +0000
ROA not before:           Thu 15 Oct 2026 09:04:52 +0000
ROA not after:            Sun 22 Nov 2026 09:04:52 +0000
asID:                     137899
IP address blocks:        156.233.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122281 (0x1dda9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 15 09:04:52 2026 GMT
            Not After : Nov 22 09:04:52 2026 GMT
        Subject: CN=6ad0973a-86c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:87:cf:dd:4a:db:90:2d:dc:c6:51:94:08:
                    9d:33:d1:23:c4:24:c0:6f:5e:98:aa:64:6d:4f:d0:
                    8a:54:f2:2f:38:84:8c:36:ba:75:81:5d:f1:07:c9:
                    8b:88:b7:b9:9f:17:0a:c4:d3:fc:1e:b3:57:26:5b:
                    cd:a0:61:41:40:1a:a6:00:b3:49:fe:c8:d0:eb:a8:
                    66:45:d8:64:d9:46:6c:43:95:dc:26:6e:6e:ed:65:
                    a4:41:e7:e1:36:af:b7:33:ef:44:aa:e0:d1:aa:e4:
                    a7:a4:ed:15:fc:05:fa:10:11:fc:c5:aa:c2:87:c8:
                    c0:f3:06:ae:5c:57:9a:2c:62:c0:a1:5b:2f:69:c8:
                    c3:1d:ad:98:37:5e:75:b8:68:7f:19:24:78:22:66:
                    e9:dc:ef:c4:4c:8c:01:cc:cd:55:8b:a9:b1:98:3b:
                    58:60:06:8f:e9:15:68:87:d0:90:7f:a8:fd:ee:e5:
                    14:98:42:47:13:9e:e4:d6:1a:79:cc:6c:5c:c7:d2:
                    fc:99:bc:f4:49:8a:44:91:89:42:00:e0:cd:74:bb:
                    8a:02:ac:e7:13:aa:4c:10:a5:3d:f0:1c:50:dd:d7:
                    86:99:c6:58:22:15:96:72:f0:02:dd:94:ab:3b:92:
                    5b:42:3f:a5:36:1c:b6:a7:8f:08:54:c3:81:e5:fd:
                    26:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:40:54:76:0A:95:A1:33:CD:3B:19:12:04:F5:6C:81:A2:D6:E3:75
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E85F6B8C87711F1814204F9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:a7:7e:64:85:69:5c:17:67:de:f2:c5:a4:11:43:aa:0f:ec:
         8a:bb:26:12:2d:a2:d2:4a:d8:b0:84:ca:54:16:95:9e:6c:56:
         0e:05:a1:26:4d:6e:3e:8e:31:1b:64:e5:d2:01:55:33:92:70:
         54:ac:a1:67:63:42:5e:07:ac:fb:ea:8d:cf:df:ae:a5:93:ad:
         2f:12:0a:ab:4d:e1:60:62:d6:57:25:39:ec:dc:50:9b:01:9a:
         91:ae:cf:9e:3c:de:02:45:6e:be:2f:2d:db:ee:44:d1:48:7b:
         3e:e8:03:dc:d0:17:17:23:59:5c:7a:aa:93:7f:26:7b:f7:c1:
         37:1c:ff:c4:e0:12:58:99:a0:70:a8:09:33:0f:2d:58:97:2f:
         fd:f4:ab:1d:69:15:fb:e5:ee:23:46:7a:02:b9:c6:ff:24:63:
         95:b3:70:c5:b7:23:41:16:cc:b6:b2:5d:5f:0f:3e:08:9e:92:
         2d:52:22:80:52:eb:81:2d:ea:e1:44:8e:5c:e4:86:1f:c5:86:
         cd:7a:0b:05:25:68:f8:a4:dd:e9:34:9e:d3:ff:f3:f0:53:4c:
         6b:2b:9d:77:32:a7:b4:cf:c7:ab:df:dc:f4:e2:78:b7:b2:57:
         8b:e5:ff:de:09:eb:2f:b3:55:1d:6c:e6:bc:ac:bb:55:af:7b:
         85:79:7a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----