Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90DD93629CCF11F1A2D7E7A4CE1D38B0.roa
File:                     90DD93629CCF11F1A2D7E7A4CE1D38B0.roa (raw, json)
Hash identifier:          JRhOeyWDCGg6AfX6HU6j08Wrdgb5pkSMxn7d2uMvkM8=
Subject key identifier:   07:A2:5D:AE:21:A9:C9:99:45:44:39:C3:A6:6D:CB:01:41:56:25:2D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CEF2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90DD93629CCF11F1A2D7E7A4CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 19:44:33 +0000
ROA not before:           Thu 20 Aug 2026 19:44:29 +0000
ROA not after:            Sun 19 Aug 2029 19:44:29 +0000
asID:                     17561
IP address blocks:        156.226.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118514 (0x1cef2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 19:44:29 2026 GMT
            Not After : Aug 19 19:44:29 2029 GMT
        Subject: CN=6a875921-59c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:22:ea:d9:ae:1e:f2:76:77:bd:60:c8:49:02:
                    12:0b:81:e1:3b:74:37:c5:86:59:a2:82:bc:af:4d:
                    26:7c:bd:83:9a:79:5b:76:13:4c:e5:3c:ce:27:4e:
                    62:91:90:7c:b0:ee:80:33:3d:94:d4:aa:94:10:5c:
                    a9:5e:1d:83:43:c2:0f:46:33:79:13:b5:75:cd:13:
                    58:88:0d:6e:dd:10:11:f8:a2:76:cc:16:a1:5a:ca:
                    03:7f:0a:d9:90:0c:8e:e9:83:d4:05:a0:3d:d0:36:
                    54:0a:1c:d8:8b:25:61:68:03:97:9e:2d:56:05:2f:
                    62:22:b3:fe:b8:95:5b:b0:43:87:1f:a1:a5:f4:d9:
                    9d:dd:d3:03:63:ec:bc:74:2e:15:e6:1b:20:a0:92:
                    a4:a9:25:39:0c:9f:85:cf:d0:33:a3:f1:75:22:22:
                    04:80:07:20:04:40:21:24:4e:fb:79:6e:51:38:30:
                    40:d7:17:7c:e1:70:56:b8:09:1d:50:73:f3:1e:ea:
                    30:78:27:df:e1:17:2b:32:06:26:d6:e2:4f:a7:8d:
                    d8:30:92:06:1f:6b:16:44:8e:46:1d:10:78:43:d3:
                    1d:d3:4f:59:b8:b8:57:89:19:24:5c:2e:aa:c2:79:
                    ab:3a:f0:3e:06:0b:bb:85:21:c9:a3:ca:5f:4b:f3:
                    de:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A2:5D:AE:21:A9:C9:99:45:44:39:C3:A6:6D:CB:01:41:56:25:2D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90DD93629CCF11F1A2D7E7A4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:c9:ea:f7:49:01:eb:ff:ef:e4:28:67:25:b7:89:9a:99:e6:
         12:b0:82:d6:ec:ba:93:4c:fd:0a:fa:16:87:04:8c:f4:ed:5b:
         91:30:4d:09:77:2a:13:59:fd:ff:53:65:d0:2a:5d:10:94:7e:
         b5:7c:a5:e6:12:62:92:13:b8:c2:ca:af:80:5c:4c:dd:2e:e0:
         fe:4f:30:77:69:03:1e:71:9c:ed:f6:83:ad:98:f6:db:52:3b:
         38:c9:b4:e1:ab:10:8e:09:e4:f8:50:0b:01:8e:1b:63:8b:d8:
         df:1b:62:81:51:8e:00:cd:cb:9e:08:a3:5d:6f:69:f4:c8:0a:
         8d:aa:0d:8d:88:06:14:db:7e:b3:07:b8:cb:6f:b5:fb:11:e7:
         d5:a9:7d:cb:1d:6a:2a:0d:e6:ed:d3:65:bd:9a:ec:25:82:fc:
         a6:7f:bd:da:c8:64:c3:64:13:a8:2f:69:0b:b5:e4:52:fc:02:
         1a:07:c3:38:d6:03:05:16:af:31:eb:ef:da:0e:ae:71:af:dd:
         ad:a6:63:c3:3d:08:31:2a:4d:0f:6c:eb:04:90:de:c3:b3:74:
         7b:85:51:8b:37:66:c0:36:d0:f5:9f:ca:46:5d:de:79:12:a7:
         d0:6d:d7:75:72:d2:55:1a:2a:fb:84:17:16:91:1a:21:e7:0c:
         56:e9:a9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----