Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90A76014C6DF11F1B7A74E11CF1D38B0.roa
File:                     90A76014C6DF11F1B7A74E11CF1D38B0.roa (raw, json)
Hash identifier:          6SGyAG/vxg8uIGxh7dLPajip3pqvv5Xa0doVSdSLugw=
Subject key identifier:   E7:2D:DE:31:B5:4C:D7:61:68:A4:5B:7F:67:C3:A3:1F:E1:50:FE:D3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DD13
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90A76014C6DF11F1B7A74E11CF1D38B0.roa
Signing time:             Tue 13 Oct 2026 08:24:53 +0000
ROA not before:           Tue 13 Oct 2026 08:24:47 +0000
ROA not after:            Fri 23 Oct 2026 08:24:47 +0000
asID:                     214432
IP address blocks:        156.254.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122131 (0x1dd13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 13 08:24:47 2026 GMT
            Not After : Oct 23 08:24:47 2026 GMT
        Subject: CN=6acdead5-6d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3a:2b:ab:a2:c5:a0:f7:03:83:cf:fa:8f:a9:
                    97:17:5a:fa:5f:6d:d7:bc:a4:9f:95:c0:c0:1a:2b:
                    43:17:42:af:9a:95:c5:e3:e0:bb:56:ce:46:8f:e3:
                    cd:38:40:c7:0e:1e:aa:e4:56:7d:73:63:9d:92:c6:
                    95:34:28:d8:33:bf:74:f1:e5:ff:5a:8b:54:1a:e3:
                    58:c8:2d:63:49:14:ea:83:9d:0d:ee:ee:f1:11:87:
                    f6:d8:8b:4e:11:18:af:fd:91:52:0f:d7:af:fe:95:
                    b4:d7:bd:a1:22:8b:b1:77:64:75:17:8a:11:46:0b:
                    b4:26:74:d8:30:09:1a:55:45:b4:8d:32:b2:7b:69:
                    ae:92:13:fb:9e:fc:a5:29:93:3c:c7:65:f2:57:1e:
                    55:f2:2b:74:c3:b0:75:d1:75:26:1c:1e:bb:44:c7:
                    14:93:03:4f:9a:ec:94:2d:71:66:ed:95:1d:ed:de:
                    46:07:01:e8:0a:bd:d8:00:7a:05:20:45:96:b8:c6:
                    56:fd:23:f7:2d:e9:a0:0d:86:a5:d1:eb:b7:67:1c:
                    ff:2f:9d:8c:a6:69:f7:06:7f:72:20:3e:6b:df:2e:
                    aa:50:32:88:52:25:4b:24:9e:76:88:45:76:07:34:
                    bd:49:3f:6e:c7:82:06:b5:8f:be:bc:fe:50:f1:16:
                    91:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2D:DE:31:B5:4C:D7:61:68:A4:5B:7F:67:C3:A3:1F:E1:50:FE:D3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90A76014C6DF11F1B7A74E11CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:ab:b8:a1:5e:28:f8:9d:71:b3:75:c9:9d:29:fc:32:16:9c:
         b9:e1:fe:a2:ef:10:f4:9a:0d:76:94:df:d8:d5:60:4a:75:ee:
         e0:f3:a1:84:12:81:23:30:6e:7d:73:a9:79:ea:09:98:28:fd:
         f3:cb:33:80:8c:1d:c0:c3:d5:48:f2:4e:c4:2f:5c:72:1e:81:
         ca:ff:e7:62:16:82:3a:00:3a:1c:52:15:e3:1d:85:70:68:f8:
         fa:2b:37:b8:8f:62:76:bb:cc:07:a6:59:63:ae:12:be:75:80:
         e0:6f:4b:50:ba:e3:ca:59:c1:98:f7:7e:c1:b0:89:14:83:7c:
         46:8e:ab:54:e9:d3:d6:d5:fa:25:95:39:9a:56:2a:97:13:f2:
         c9:35:29:12:78:cb:34:76:43:ee:e5:93:36:a6:b9:c4:59:f6:
         b2:c3:fe:cf:ea:dc:45:aa:64:50:d5:73:86:36:15:76:fd:ae:
         59:bf:22:e7:7d:61:22:2e:a3:20:11:d3:75:4f:bf:10:dc:80:
         d5:50:9e:c0:a2:4e:1e:09:ca:21:52:74:30:dc:71:a0:11:94:
         0a:27:9f:3e:43:01:0a:0f:d4:f6:ad:d6:06:76:18:9b:7d:01:
         59:8d:1c:0a:b8:cb:81:9d:7e:03:88:c5:ad:7f:14:07:08:f8:
         a6:a4:e3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----