Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C80F226C93A11F195AD88F3CE1D38B0.roa
File:                     9C80F226C93A11F195AD88F3CE1D38B0.roa (raw, json)
Hash identifier:          jlLqsZScZ6aQ9By5UaC83mIVlOUooENQP0cksP3ijRM=
Subject key identifier:   9A:12:4C:61:FB:30:F6:97:9F:65:10:E6:5C:E0:D9:1B:F1:EB:07:DE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DDE4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C80F226C93A11F195AD88F3CE1D38B0.roa
Signing time:             Fri 16 Oct 2026 08:21:40 +0000
ROA not before:           Fri 16 Oct 2026 08:21:35 +0000
ROA not after:            Fri 20 Nov 2026 08:21:35 +0000
asID:                     154376
IP address blocks:        156.254.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122340 (0x1dde4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 16 08:21:35 2026 GMT
            Not After : Nov 20 08:21:35 2026 GMT
        Subject: CN=6ad1de94-a850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:85:19:7d:98:62:c5:88:ab:ec:97:c4:20:db:
                    3e:0c:e3:0c:a3:82:cd:35:e3:0d:8b:7e:9f:0f:82:
                    fa:84:fd:85:52:cf:65:e9:0c:5a:f4:af:ec:86:9e:
                    99:73:3e:cc:85:b0:48:5a:a6:7d:0a:f7:21:e0:95:
                    99:75:37:b4:05:a4:1e:e2:7c:6c:98:41:e7:47:f4:
                    18:3a:1a:1a:61:b6:ff:1b:77:19:13:6e:13:90:1e:
                    60:09:85:d7:a5:1c:a4:ba:6a:ef:ff:aa:98:78:ab:
                    96:f8:f5:46:2f:94:6f:b3:23:0c:78:ac:92:24:aa:
                    99:de:2f:86:ab:27:b7:be:9d:8d:30:73:87:c0:2e:
                    5f:9d:ce:c5:88:64:04:58:9b:bb:ca:fa:4a:84:5c:
                    8d:2a:07:46:27:37:db:d5:c2:b4:23:84:71:50:a4:
                    a2:b9:e1:50:85:87:f9:b3:9c:eb:1d:ac:b8:59:31:
                    98:59:c7:4d:a8:13:f5:ea:2e:14:94:ae:b5:17:ca:
                    c1:e7:5d:a7:fe:2f:50:36:03:2f:78:f2:b0:57:97:
                    90:4c:08:1c:63:1d:aa:5f:94:24:d7:08:7e:3f:62:
                    02:a4:fd:ef:70:b2:d3:58:66:a5:8e:29:33:8f:3d:
                    e6:c3:0a:f3:5e:8c:fe:43:37:ca:00:c9:54:1c:5e:
                    41:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:12:4C:61:FB:30:F6:97:9F:65:10:E6:5C:E0:D9:1B:F1:EB:07:DE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C80F226C93A11F195AD88F3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:6a:6f:5e:38:97:1f:e2:9b:5d:b2:da:2c:2e:88:4d:91:94:
         ba:fc:d4:ae:73:32:00:70:52:73:88:97:85:8a:b0:be:8a:ec:
         a4:df:ae:ad:2d:e6:4c:5a:88:fc:87:82:e8:6e:ef:00:b7:25:
         76:21:05:4a:8e:c5:06:52:da:ca:55:a2:81:85:62:be:1e:2b:
         4b:89:c5:77:56:76:c2:fb:e4:58:e7:c9:04:50:37:20:fe:94:
         dd:48:f6:bd:1a:8d:39:d9:1c:ba:91:3b:35:b1:40:1e:df:7e:
         ce:ed:6f:f2:a2:24:62:e9:38:66:a2:98:2c:34:2f:0d:22:1d:
         a4:31:6a:7f:c7:1e:52:fa:97:23:2a:14:d0:fd:01:fe:6d:06:
         b0:f7:43:9e:b9:d7:0f:c2:ec:3b:ce:26:70:43:03:e0:1e:04:
         48:ed:85:6d:64:40:18:9f:8e:5e:cf:99:99:fd:a8:b2:91:af:
         bf:6d:76:c0:fb:29:97:fc:d4:2d:c4:da:88:89:6a:35:a3:ed:
         b4:d7:2a:28:79:84:6d:42:b7:55:dc:5f:31:b1:b7:ec:75:45:
         54:06:af:20:23:d1:81:6e:83:6c:2f:2d:13:53:8c:7c:96:8b:
         25:71:14:30:9a:80:4c:8c:4b:e9:fd:cd:fe:7a:f5:c9:7e:45:
         5d:78:ef:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----