Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80E8733C96E411F194FC58D2CE1D38B0.roa
File:                     80E8733C96E411F194FC58D2CE1D38B0.roa (raw, json)
Hash identifier:          B0WLsf+5Ty0nyXulIr+6c9jyUBFPtlnHTuoRhobqWI8=
Subject key identifier:   3B:DA:9D:46:F1:21:F1:DC:B3:6D:C9:76:BA:0A:DF:1C:27:B2:F2:EB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80E8733C96E411F194FC58D2CE1D38B0.roa
Signing time:             Thu 13 Aug 2026 06:59:19 +0000
ROA not before:           Thu 13 Aug 2026 06:59:13 +0000
ROA not after:            Thu 03 Sep 2026 06:59:13 +0000
asID:                     17497
IP address blocks:        156.245.176.0/21 maxlen: 24
                          156.245.176.0/24 maxlen: 24
                          156.245.177.0/24 maxlen: 24
                          156.245.178.0/24 maxlen: 24
                          156.245.179.0/24 maxlen: 24
                          156.245.180.0/24 maxlen: 24
                          156.245.181.0/24 maxlen: 24
                          156.245.182.0/24 maxlen: 24
                          156.245.183.0/24 maxlen: 24
                          156.255.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117845 (0x1cc55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 13 06:59:13 2026 GMT
            Not After : Sep  3 06:59:13 2026 GMT
        Subject: CN=6a7d6b47-126f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d7:59:97:2c:d5:10:81:b9:5a:95:5e:dc:1d:
                    6f:5e:25:81:12:e4:c0:27:8b:ba:c2:4c:db:de:31:
                    b3:91:4b:fc:ef:09:17:7a:07:c9:46:dc:e1:9a:1e:
                    85:5e:94:c5:f3:c1:65:ec:88:76:08:77:00:42:74:
                    58:8a:94:6c:e3:13:5e:38:af:b4:b7:c9:4f:01:a6:
                    5c:60:5a:ea:e7:f9:18:e4:ba:14:8b:15:a3:48:3d:
                    64:58:06:85:1c:03:d6:c0:9f:9e:e8:9f:57:d7:7a:
                    a2:a9:72:93:55:78:e5:5c:61:51:c2:06:80:51:0c:
                    a3:1a:92:b9:c2:1a:4d:b7:67:18:90:db:24:6f:bb:
                    d2:05:cb:dd:4d:f0:01:59:83:e9:af:47:cb:fa:e9:
                    27:2a:ed:b0:57:ad:6d:c1:c9:ea:6d:b2:04:f0:fd:
                    5b:18:58:09:88:b3:97:01:eb:50:05:f0:04:0d:f0:
                    68:58:ec:82:b9:f3:b7:ef:44:7d:f4:2c:02:22:93:
                    d1:9d:20:36:65:1e:97:de:b7:45:b2:05:28:b5:44:
                    3f:5b:91:d5:fd:9c:fe:9f:f2:05:15:82:b6:a5:a0:
                    51:51:67:2f:a0:b8:92:a6:ac:4d:aa:df:b5:4a:12:
                    d9:14:27:41:c7:5b:ac:74:30:e9:29:13:50:02:00:
                    d6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DA:9D:46:F1:21:F1:DC:B3:6D:C9:76:BA:0A:DF:1C:27:B2:F2:EB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80E8733C96E411F194FC58D2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.176.0/21
                  156.255.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b0:71:63:07:e0:78:9e:f1:6b:09:d4:14:2d:97:95:a5:24:c1:
         ed:15:26:cd:9a:ef:73:90:f5:78:f4:40:09:44:16:a1:05:43:
         1e:97:ad:71:61:9f:1a:67:69:dd:e2:e7:b3:44:2b:d2:41:c8:
         62:49:c9:f0:85:98:0e:ad:45:3c:bc:58:72:c6:31:5d:7c:dc:
         11:aa:fd:30:69:e8:73:8a:4d:60:14:db:88:95:d2:16:f2:2c:
         64:44:69:66:a4:ea:14:1e:25:3f:e2:0e:b2:c9:53:8a:7d:7c:
         99:4a:07:ff:f4:95:51:c8:80:6b:97:b3:65:a4:4f:03:3f:39:
         0d:16:7d:99:a5:c4:14:d4:39:26:61:85:f0:c0:96:0c:56:f3:
         5a:88:ce:37:a4:db:91:7d:ee:90:6c:2f:d8:b4:68:56:0a:5c:
         77:f5:58:a4:8e:75:ef:e6:dd:88:1f:04:76:2d:d9:a7:b9:91:
         cb:37:d4:e2:a4:4d:00:fd:39:cf:00:56:0a:8f:56:4a:0b:d7:
         b4:03:4e:b7:d6:b1:32:58:62:43:86:43:06:03:06:78:15:7e:
         0d:22:68:f4:64:4a:28:88:a0:de:7e:33:c5:9b:36:9b:6c:9f:
         31:12:d3:c0:14:a4:b1:fd:21:17:31:23:67:2c:be:19:60:07:
         ab:31:2c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----