Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8048508E9D2711F19F3EBECCCE1D38B0.roa
File:                     8048508E9D2711F19F3EBECCCE1D38B0.roa (raw, json)
Hash identifier:          FDy6zV4ZizkbdozeAw5fRHubkT02u6rX5bUcPp5IGbI=
Subject key identifier:   60:BB:3C:CD:DF:4D:D5:69:12:F3:EE:7F:1B:0A:FF:96:D9:E9:5E:05
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CF42
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8048508E9D2711F19F3EBECCCE1D38B0.roa
Signing time:             Fri 21 Aug 2026 06:14:01 +0000
ROA not before:           Fri 21 Aug 2026 06:13:57 +0000
ROA not after:            Mon 28 Sep 2026 06:13:57 +0000
asID:                     152179
IP address blocks:        156.253.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118594 (0x1cf42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 06:13:57 2026 GMT
            Not After : Sep 28 06:13:57 2026 GMT
        Subject: CN=6a87eca9-b918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7b:fd:93:0f:53:32:58:89:5d:5d:32:48:8a:
                    c1:a8:48:67:43:e1:c1:a4:6c:ce:10:38:cb:30:e0:
                    1d:8c:4f:2e:c9:f1:56:f0:61:a5:50:70:cf:58:d5:
                    25:55:5a:43:08:39:1f:e4:34:be:15:ae:b9:52:72:
                    67:07:c8:d6:d0:51:69:55:68:4c:89:76:23:21:4c:
                    4f:c8:85:ac:0e:06:42:a1:35:30:4f:20:3c:ef:9e:
                    1e:17:e2:81:f5:59:fd:11:ad:4d:02:1e:5a:ec:ea:
                    8b:97:77:9b:40:d0:c1:bf:ba:8a:07:6f:00:26:fa:
                    64:5b:6c:a5:97:db:79:f6:4d:8f:68:c1:46:d6:5b:
                    4f:0c:37:45:67:c0:eb:18:f8:99:43:39:ab:e6:21:
                    50:2d:5c:0b:77:95:1b:9e:62:20:55:23:17:f5:98:
                    fe:97:49:fd:1d:e4:21:88:7c:2d:9b:bb:de:17:62:
                    f5:58:02:4b:f9:33:bf:a4:1e:66:ef:1b:df:7e:7f:
                    7a:7d:45:08:ea:33:e9:6d:67:6e:14:88:43:d9:32:
                    92:6c:35:2f:de:73:85:ec:31:6a:f9:dc:45:55:8e:
                    2b:76:c0:a6:8a:4b:b6:dd:d5:c0:d4:88:6d:ef:61:
                    28:50:a7:fb:86:3c:72:68:72:06:73:cc:41:ce:0b:
                    b2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BB:3C:CD:DF:4D:D5:69:12:F3:EE:7F:1B:0A:FF:96:D9:E9:5E:05
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8048508E9D2711F19F3EBECCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.253.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:d5:f3:89:2b:55:e4:39:2f:c2:c9:54:ef:d5:df:73:6d:f8:
         bd:11:8a:af:b2:0c:f3:94:f0:6b:31:fd:33:25:b5:22:8b:e9:
         37:dc:78:44:b1:03:bc:17:66:e1:60:6e:93:d1:8e:68:39:6e:
         8b:9d:5e:54:08:c2:1b:4d:d1:d6:6a:3b:71:b9:da:1c:3d:6b:
         8d:18:ba:8c:5a:71:29:9a:d8:3b:45:11:27:c5:aa:74:96:f2:
         34:c4:a7:5f:d2:12:6c:7d:93:55:7f:fa:1b:00:52:a5:39:0d:
         ba:27:a0:ff:12:79:97:88:d3:96:74:cd:60:16:be:2d:8b:8a:
         c5:5e:67:41:2c:93:22:bd:6a:34:aa:ab:c3:bb:64:f7:61:86:
         06:1e:c5:88:56:4e:43:a9:3c:9e:09:e6:c8:33:d3:71:f5:8d:
         e7:cc:de:e9:e5:b0:97:e2:15:47:5f:32:8c:ca:e9:33:54:bd:
         4a:7a:e5:4b:44:41:ce:59:82:88:79:7a:a9:71:b0:06:5c:05:
         fe:38:71:ab:44:ed:f6:01:c6:65:9e:ef:0b:62:e8:10:c2:bb:
         db:76:fb:b1:2f:0d:27:d8:83:f3:65:7e:74:73:ae:64:b0:4a:
         89:26:a1:c1:79:c4:1d:32:72:af:20:bf:9a:33:a1:3d:f3:70:
         94:a0:52:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----