Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A43DF6E9CDA11F1B7AE1FE5CE1D38B0.roa
File:                     9A43DF6E9CDA11F1B7AE1FE5CE1D38B0.roa (raw, json)
Hash identifier:          dInc7O78coJ/38lDjjMe1OB0o912dPn4JVMfWlyNo0Y=
Subject key identifier:   7D:36:66:BF:7A:00:86:61:9F:C4:D5:38:9F:35:C2:D0:E6:43:CB:D2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CF02
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A43DF6E9CDA11F1B7AE1FE5CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 21:03:33 +0000
ROA not before:           Thu 20 Aug 2026 21:03:29 +0000
ROA not after:            Sat 10 Oct 2026 21:03:29 +0000
asID:                     401783
IP address blocks:        156.254.116.0/24 maxlen: 24
                          156.254.117.0/24 maxlen: 24
                          156.254.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118530 (0x1cf02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 21:03:29 2026 GMT
            Not After : Oct 10 21:03:29 2026 GMT
        Subject: CN=6a876ba5-3f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3e:8f:5e:e7:6e:73:ab:b8:27:28:ab:92:b4:
                    5a:68:c5:7f:31:01:3f:6b:31:f7:74:78:7a:6e:f4:
                    41:45:63:3f:f0:59:f2:78:38:31:e8:5d:d3:7c:44:
                    23:a3:c7:bc:b0:a8:4a:89:87:06:e4:11:a5:87:e1:
                    67:79:e3:c6:b5:e7:12:79:e4:72:a4:b3:57:be:ad:
                    d2:6a:4e:4e:93:69:01:8e:11:4c:b2:88:70:13:54:
                    ce:96:eb:1c:34:8e:3d:73:b3:fe:cf:ea:f8:46:0e:
                    56:8f:6a:10:f2:59:dc:18:ec:16:26:0a:ec:e3:4f:
                    35:29:2a:8f:b4:23:3a:0c:b3:f2:ee:de:2e:f5:fd:
                    13:f5:dd:9c:83:11:2a:49:c5:8f:8b:12:01:4b:fb:
                    f8:36:a8:39:1b:2b:24:db:05:86:34:47:a8:ea:9c:
                    2a:92:f8:24:c7:a9:05:f2:55:a8:1b:77:67:f4:78:
                    dc:f9:5e:06:b1:6c:bb:23:3e:16:24:d7:c3:32:4d:
                    76:f6:7b:4f:11:b6:92:af:81:c1:8c:16:9a:67:51:
                    11:7a:1e:3a:bf:17:b7:3b:df:18:49:db:09:e8:f7:
                    d5:62:51:c5:e8:90:bb:5a:7a:b0:43:37:2a:bd:cb:
                    83:76:d4:0e:9c:b9:da:1a:5d:dd:ce:ec:f2:d3:80:
                    e6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:36:66:BF:7A:00:86:61:9F:C4:D5:38:9F:35:C2:D0:E6:43:CB:D2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A43DF6E9CDA11F1B7AE1FE5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:32:c5:5a:aa:bb:bd:f2:25:7f:ec:70:8b:d4:0a:8f:b3:a5:
         c6:8c:fc:e6:a6:d7:fe:3f:cf:48:e7:1d:63:5d:a0:60:4b:93:
         ea:bd:e6:fb:bf:83:a2:16:32:48:58:e0:a6:2e:49:f9:c4:2a:
         ab:7f:0a:9c:10:1d:c0:3c:4c:66:3d:dd:5c:6d:5b:55:c5:f0:
         76:a9:de:e5:32:a9:03:5c:4b:ae:5a:ef:c7:73:a4:45:f3:c7:
         ce:be:62:4d:44:be:8d:c3:d2:62:a8:0c:26:66:ba:f8:7b:48:
         ca:73:ba:8d:bc:c1:07:08:db:32:5d:74:8c:1a:66:15:b3:95:
         80:7c:47:0e:44:58:9c:27:c7:c7:76:da:73:85:8f:74:ed:c8:
         0c:33:54:10:4a:91:a3:c5:08:a3:b4:1b:09:dd:9e:8e:dc:8d:
         17:3f:1d:28:cc:56:c9:9c:7c:a1:a2:76:7e:bc:3b:e5:32:d4:
         9a:19:75:ef:af:6f:39:d1:22:a4:a3:25:48:36:03:e2:8c:74:
         3d:5c:5f:e4:af:3e:7a:1f:b9:78:d5:11:73:ef:aa:e3:65:af:
         d8:e0:49:23:53:88:c9:6b:6d:3b:dc:72:36:87:94:0e:0f:54:
         bc:28:2b:93:c2:89:50:b7:79:c7:71:45:32:08:aa:1c:bd:f5:
         c2:5b:7d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----