Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/850DBC3EA30911F18E9A32A5CE1D38B0.roa
File:                     850DBC3EA30911F18E9A32A5CE1D38B0.roa (raw, json)
Hash identifier:          f1LZmXIc0z0E9jVnAsiGgjDJkGuE8I30pe06NV6Z4oM=
Subject key identifier:   27:D8:DC:13:ED:87:19:06:24:7F:04:4C:98:64:B2:E0:D0:0C:8D:DD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D1C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/850DBC3EA30911F18E9A32A5CE1D38B0.roa
Signing time:             Fri 28 Aug 2026 17:54:31 +0000
ROA not before:           Fri 28 Aug 2026 17:54:25 +0000
ROA not after:            Tue 06 Oct 2026 17:54:25 +0000
asID:                     401701
IP address blocks:        156.238.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119235 (0x1d1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 28 17:54:25 2026 GMT
            Not After : Oct  6 17:54:25 2026 GMT
        Subject: CN=6a91cb57-a4ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1f:6e:9e:99:fa:62:62:c1:cd:ac:18:07:20:
                    37:37:df:c9:52:aa:a9:89:41:e7:df:5a:bc:2c:b5:
                    04:42:e6:c4:81:69:6d:31:c4:f2:73:5d:91:bb:30:
                    70:4f:d0:ad:df:55:04:ad:44:83:51:cb:81:b4:23:
                    5d:0d:cb:52:39:ed:15:47:63:12:81:fc:4d:9c:d5:
                    39:54:84:7b:8d:75:15:95:00:53:21:29:91:95:a5:
                    f9:c8:6d:ba:15:68:d5:a8:65:50:2c:fb:7e:71:7c:
                    db:c5:1c:13:18:85:cd:d1:21:03:12:71:62:5b:67:
                    d5:ee:47:8f:77:ba:cb:a8:c1:60:96:69:25:dd:67:
                    cd:96:e8:9e:f8:f8:69:ef:41:8b:94:5c:69:7e:34:
                    96:b4:04:7b:03:cb:7c:27:48:bf:8b:15:79:88:dc:
                    fa:02:97:11:09:3c:c7:eb:b0:bb:2b:d3:a7:d7:b9:
                    68:3e:c1:77:42:d9:e0:62:06:c0:e1:63:8a:63:e5:
                    15:f0:39:c3:c3:c9:77:c4:0e:27:ba:4b:71:0b:51:
                    78:02:f1:63:74:53:80:c6:62:e9:2c:f9:76:4b:ef:
                    a0:53:1a:c0:81:73:f7:c4:e6:1e:23:f7:4d:fe:0a:
                    91:c8:a7:10:db:94:e9:b7:cc:e2:f5:8c:53:85:a6:
                    e1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D8:DC:13:ED:87:19:06:24:7F:04:4C:98:64:B2:E0:D0:0C:8D:DD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/850DBC3EA30911F18E9A32A5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         12:bb:10:ba:2f:33:85:27:2d:3e:c8:b9:fa:e8:5d:7b:20:96:
         b7:1a:be:de:de:44:74:87:dd:c9:4e:09:aa:ae:84:ea:8a:be:
         22:39:48:e0:32:97:11:99:df:f0:47:62:ea:42:1f:77:e8:44:
         11:3d:3f:98:f2:e7:3e:07:7b:69:a9:ce:9e:3a:51:26:65:e6:
         ff:77:40:73:25:2c:6b:44:08:72:57:2d:d4:d1:12:93:5f:4d:
         49:79:2e:5b:ac:20:94:d7:95:b4:d4:38:b9:a7:53:fd:7f:ac:
         13:4b:a8:e6:5f:57:d9:be:7c:82:df:0a:dc:86:4a:8c:9a:33:
         60:d7:54:45:d1:6c:89:08:91:e5:f4:1f:d4:83:f9:5d:04:03:
         5d:3f:db:c1:75:fc:87:dd:65:14:ce:d8:f2:31:2b:f9:bb:e8:
         61:b2:18:32:97:c2:ef:27:61:19:b9:de:d2:ae:33:af:bb:5d:
         1e:93:f2:7f:51:24:ae:f8:e8:3c:1d:d5:d2:5b:c6:15:88:7b:
         1f:95:b1:b7:60:c1:7b:bb:75:66:3b:22:29:a4:1e:10:1f:54:
         f6:58:62:2c:ba:57:94:ea:4f:b7:3a:15:32:d5:3a:de:4b:4e:
         f5:ad:86:8f:a2:0d:50:ec:b8:15:ca:c6:11:2f:4e:a7:52:c8:
         d4:53:6f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----