Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E5F94349DE411F1AAD791C4CE1D38B0.roa
File:                     9E5F94349DE411F1AAD791C4CE1D38B0.roa (raw, json)
Hash identifier:          5HDyWJxxTKmK+gAS5VdjVxmhA3ERhJ5j2+8X+2gtp2k=
Subject key identifier:   77:58:B1:56:ED:D4:7A:18:5A:0E:50:FD:4A:5F:3A:3C:B4:10:47:74
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CFF5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E5F94349DE411F1AAD791C4CE1D38B0.roa
Signing time:             Sat 22 Aug 2026 04:47:46 +0000
ROA not before:           Sat 22 Aug 2026 04:47:42 +0000
ROA not after:            Tue 22 Sep 2026 04:47:42 +0000
asID:                     61461
IP address blocks:        156.247.128.0/17 maxlen: 24
                          156.255.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118773 (0x1cff5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 22 04:47:42 2026 GMT
            Not After : Sep 22 04:47:42 2026 GMT
        Subject: CN=6a8929f2-7037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c7:05:9d:d2:27:98:57:4a:9d:eb:fd:c0:e1:
                    0c:89:47:d3:83:ce:6f:fa:d6:e6:c7:bb:a3:8a:0a:
                    89:02:4c:1d:c2:5a:61:33:20:a9:a7:cb:a3:2a:4f:
                    38:97:4f:38:66:9d:f1:89:7b:de:96:ff:85:26:76:
                    20:90:55:f7:80:b5:38:48:6a:4e:27:bf:3b:5d:2b:
                    91:fb:16:e0:c6:9b:6d:ba:c6:8a:56:d6:68:84:16:
                    fb:0b:af:d0:71:4e:f4:af:95:91:12:54:8c:1a:42:
                    00:e9:eb:92:ec:c0:1e:a3:bb:e3:75:23:f1:54:86:
                    53:84:57:52:a9:75:8d:2f:8b:13:2a:e2:12:a6:bf:
                    a7:3b:cd:58:1d:69:d4:4b:93:c2:39:c5:f9:d9:08:
                    a8:d9:8e:f5:b6:63:74:c6:fb:d8:ac:92:6a:70:27:
                    02:f9:43:3a:7e:8c:af:12:d3:56:de:45:51:13:34:
                    d3:d1:e0:4f:e9:eb:58:36:bb:f5:b0:01:58:4d:b2:
                    76:e8:ac:90:bf:52:3a:66:f3:52:71:e7:18:31:8c:
                    4e:13:86:fc:6a:e6:19:4a:4d:d6:03:ef:4e:05:ce:
                    99:7b:c9:c8:a7:09:35:56:e6:f1:a8:12:00:41:7f:
                    e6:d1:69:67:5b:dd:dc:43:34:ba:65:72:2e:77:cc:
                    d7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:58:B1:56:ED:D4:7A:18:5A:0E:50:FD:4A:5F:3A:3C:B4:10:47:74
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E5F94349DE411F1AAD791C4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.128.0/17
                  156.255.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b9:ee:47:bb:e4:2d:e7:75:01:3e:1c:01:b7:b7:f5:9c:48:b3:
         f2:80:68:9b:6d:0e:6c:a4:6f:de:92:9c:60:8d:20:6f:5f:d8:
         18:8f:cd:ee:fb:44:13:d6:52:d7:10:c2:c1:97:a8:e2:e4:43:
         c7:28:81:80:26:fa:54:8f:9d:08:ae:4e:91:72:34:8c:8b:d7:
         43:8e:b6:1e:c1:51:92:78:2b:c2:e5:03:c0:7c:19:42:90:8b:
         ed:2d:db:ec:af:76:59:53:bf:02:41:c9:d5:47:6f:3a:95:db:
         63:ce:00:fd:45:15:07:fe:e8:a8:a9:7b:a6:89:bb:24:68:88:
         ff:83:67:34:e9:a9:3a:bf:39:42:18:01:70:25:74:97:2b:b6:
         8d:67:a7:55:cb:54:92:14:62:17:72:33:4b:0e:1d:28:f9:ab:
         d0:1a:f5:60:f9:36:fd:6d:7f:89:4a:bc:fb:44:55:e4:e8:ae:
         e6:df:e3:56:a2:03:a8:15:65:20:8d:87:a7:63:a2:ef:72:e8:
         b5:ae:c6:8f:d7:21:a1:3d:01:df:9c:5e:92:6d:e1:2a:33:1d:
         0e:0f:15:93:c2:45:7d:97:63:46:35:00:30:fe:62:80:8c:46:
         0e:6e:2b:32:47:27:85:11:3c:fd:36:58:11:5c:7f:0b:cc:0b:
         b1:8a:34:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----