Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87A7F9FA96F211F18933C3A7CE1D38B0.roa
File:                     87A7F9FA96F211F18933C3A7CE1D38B0.roa (raw, json)
Hash identifier:          0/5Rel9QvQOtxTjnrQHW9XuTe+aLdGakRUnTvKuKOB8=
Subject key identifier:   82:A5:53:5E:7B:65:BD:22:15:D2:F0:6F:21:A1:7C:87:6D:EE:FE:2C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC6C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87A7F9FA96F211F18933C3A7CE1D38B0.roa
Signing time:             Thu 13 Aug 2026 08:39:43 +0000
ROA not before:           Thu 13 Aug 2026 08:39:39 +0000
ROA not after:            Mon 21 Sep 2026 08:39:39 +0000
asID:                     63099
IP address blocks:        156.254.112.0/23 maxlen: 24
                          156.254.112.0/24 maxlen: 24
                          156.254.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117868 (0x1cc6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 13 08:39:39 2026 GMT
            Not After : Sep 21 08:39:39 2026 GMT
        Subject: CN=6a7d82cf-7d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:27:ce:59:b7:5f:a9:4f:e5:e4:49:f6:d9:58:
                    58:46:e7:dd:89:e4:fb:ec:1e:4c:a0:a2:cc:de:b8:
                    8e:53:2a:50:1e:e7:93:35:7c:a9:24:3d:ae:70:d0:
                    3f:8a:34:11:de:a4:ed:9c:31:00:5a:d1:29:4c:03:
                    74:25:d3:b7:57:3f:c1:a5:80:00:2d:51:78:4f:e4:
                    11:e0:e1:0a:df:44:e4:a9:49:27:ef:f1:00:51:a8:
                    89:5e:29:50:cb:ab:13:f7:f5:f7:d5:9d:6a:41:02:
                    59:85:ab:d0:f0:44:51:e1:6f:88:43:ee:ce:50:dd:
                    60:8d:bb:e7:40:85:fe:51:a9:8b:0b:07:31:e9:75:
                    c8:f4:c7:f5:dc:7d:ab:08:2e:7b:b6:d8:84:86:73:
                    78:e4:b9:86:a5:2e:f9:56:f1:c7:fb:52:54:ba:ba:
                    bf:1b:a9:80:72:87:27:e8:f0:9b:c8:9f:f2:f7:33:
                    d8:74:64:9b:6d:b5:9b:19:eb:cb:df:d8:d6:4a:c4:
                    d5:ab:f2:ff:69:ef:2b:b6:54:da:b2:f7:16:38:ba:
                    61:7e:9d:2e:a7:00:96:0a:42:79:71:12:30:1d:8a:
                    22:35:a1:51:c5:87:ea:e6:de:bc:2f:b1:b0:3c:37:
                    f2:7e:2c:8c:53:dc:6d:e9:de:d8:d4:b8:7f:a0:0b:
                    3d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A5:53:5E:7B:65:BD:22:15:D2:F0:6F:21:A1:7C:87:6D:EE:FE:2C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/87A7F9FA96F211F18933C3A7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:72:df:43:e5:32:d8:c1:01:be:09:f8:ae:81:6c:67:ee:86:
         ee:14:c0:fa:18:9c:f9:96:be:aa:89:76:99:35:78:5d:98:2c:
         1a:f0:7e:e7:e1:be:43:cf:44:8a:94:23:0a:5e:f3:3b:52:61:
         6b:48:52:4d:ed:a2:f4:b1:91:0f:d9:10:1d:e2:ba:e5:d5:a1:
         92:4a:a3:67:a4:1e:ac:69:d4:4f:2e:90:da:6a:55:11:a7:28:
         68:7b:c8:fb:e5:0d:8d:51:52:de:3d:fb:73:93:18:71:12:6f:
         c1:05:27:27:42:c5:91:b0:8e:5b:de:f7:54:04:f7:0b:25:cc:
         fb:bb:21:7f:d5:f9:f1:c2:d8:2d:a3:d7:74:79:28:35:f7:98:
         98:69:6a:8e:61:2d:c3:5a:90:06:70:31:30:f3:f5:b2:d0:51:
         cc:b6:c6:8a:2e:99:fc:b3:ae:56:10:63:50:2f:3b:4e:de:e7:
         c7:02:0e:01:35:67:3b:91:70:27:3d:d1:c7:fb:22:98:ef:e5:
         e6:45:f2:bb:de:04:f1:8b:31:b1:0a:e6:9b:9e:f3:f7:c7:7d:
         1d:4e:8c:a8:00:5a:eb:ca:f7:92:57:78:ed:8c:3a:d2:e7:ec:
         8f:58:c5:95:88:db:f0:7c:57:c8:7f:81:56:63:0f:be:88:85:
         8f:87:05:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----