Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82604AB0C9FB11F1855111DFCE1D38B0.roa
File:                     82604AB0C9FB11F1855111DFCE1D38B0.roa (raw, json)
Hash identifier:          o3pGh04ELhtKJ9PeD7T6si/5EebxGw/6uhump3SfogY=
Subject key identifier:   B2:BF:6D:54:00:81:1F:75:4C:5F:A1:83:CF:FA:ED:A2:3D:75:3D:72
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DE12
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82604AB0C9FB11F1855111DFCE1D38B0.roa
Signing time:             Sat 17 Oct 2026 07:22:29 +0000
ROA not before:           Sat 17 Oct 2026 07:22:24 +0000
ROA not after:            Tue 24 Nov 2026 07:22:24 +0000
asID:                     18013
IP address blocks:        156.239.24.0/21 maxlen: 24
                          156.239.32.0/20 maxlen: 24
                          156.239.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122386 (0x1de12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 17 07:22:24 2026 GMT
            Not After : Nov 24 07:22:24 2026 GMT
        Subject: CN=6ad32235-001e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f5:aa:80:ac:84:99:d1:da:05:b3:64:0d:8d:
                    4f:71:eb:f5:ed:48:23:34:90:0a:ec:9c:e4:37:ad:
                    34:4a:2f:80:67:c6:9c:d2:3b:a5:e0:d2:30:aa:e0:
                    6f:26:5b:ea:9f:9f:ae:0c:61:5b:69:2d:d9:eb:21:
                    16:3b:e0:4b:df:45:05:f1:43:af:10:7b:6d:0f:e9:
                    9e:c5:d6:d7:18:96:fd:03:38:13:72:21:56:10:e4:
                    9a:be:f2:68:66:a8:39:55:23:de:9d:42:8d:87:ea:
                    89:65:16:1f:4f:ec:97:38:f2:31:50:bf:84:df:64:
                    d0:ad:11:bd:1c:3f:e7:d9:7f:9e:03:a4:f8:33:93:
                    0c:44:f0:34:c5:f5:23:59:94:58:4b:da:6e:ac:e1:
                    9b:74:57:c4:32:b4:61:86:db:a6:69:bc:19:8b:df:
                    c6:e3:81:06:25:49:4d:7f:e7:d2:11:12:82:92:5c:
                    4b:d7:e9:c3:7f:a4:4d:dd:5c:0a:ff:88:69:0c:f3:
                    a0:ae:bc:09:87:6c:ee:a2:da:de:ce:08:f2:b5:94:
                    20:62:c3:8a:91:94:7c:a0:81:ae:bc:f3:ad:a5:07:
                    41:87:98:7a:b7:54:a8:14:15:3c:a3:7e:cd:94:d7:
                    85:d5:a4:f9:b0:51:ba:dd:07:c0:13:a1:4d:7d:e0:
                    4c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BF:6D:54:00:81:1F:75:4C:5F:A1:83:CF:FA:ED:A2:3D:75:3D:72
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82604AB0C9FB11F1855111DFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.24.0-156.239.51.255

    Signature Algorithm: sha256WithRSAEncryption
         02:b3:4f:09:07:1c:cb:d7:38:2f:ec:53:58:c3:79:32:c4:e5:
         b8:05:b8:32:d1:cb:af:e6:c2:88:ab:8c:fd:07:65:e7:4a:ce:
         c1:8a:86:e4:4d:c7:70:02:1f:00:70:41:75:bb:03:fc:72:34:
         f9:9a:4a:05:04:b0:53:7c:86:74:c0:5f:5e:22:61:97:77:19:
         a0:04:9c:13:02:42:f6:10:e5:c6:eb:61:53:0c:90:20:51:46:
         5e:27:32:09:93:29:37:92:21:b5:3c:98:32:1e:ba:be:c3:f7:
         ee:24:20:93:35:8f:8e:0b:a0:9f:ce:45:3b:b5:3e:11:03:66:
         55:18:bd:e3:df:3d:5c:8d:77:7e:51:bb:b9:a9:d0:95:38:11:
         c9:dd:53:6a:d1:44:bc:de:57:3e:8c:0a:25:0f:a6:1b:11:3d:
         4e:8e:1a:f0:5d:f7:90:8e:e8:d8:97:79:2c:6b:c8:86:d8:63:
         bf:eb:8d:f9:a5:ce:0a:1b:09:f3:db:a6:47:bc:74:b8:6d:83:
         0b:e9:59:d5:37:0c:b2:9d:19:14:25:7b:51:dc:9d:82:6b:84:
         e7:30:09:cf:75:dd:ec:62:f7:cf:bc:01:b7:0d:1b:09:3c:35:
         f4:c1:ce:88:d0:ed:97:e6:f9:58:46:23:ec:f2:3e:ee:fa:d1:
         48:2f:a3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----