Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FD82A8EC7A011F18F7E5501CF1D38B0.roa
File:                     9FD82A8EC7A011F18F7E5501CF1D38B0.roa (raw, json)
Hash identifier:          VpNT1rrLeAnBEhQMDY5dvb/f6eBvXomQI3ukay15nVU=
Subject key identifier:   17:40:21:14:36:EC:27:29:6F:FC:E1:4B:B6:96:E0:EC:17:CB:AC:CB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DD4A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FD82A8EC7A011F18F7E5501CF1D38B0.roa
Signing time:             Wed 14 Oct 2026 07:26:52 +0000
ROA not before:           Wed 14 Oct 2026 07:26:47 +0000
ROA not after:            Sat 21 Nov 2026 07:26:47 +0000
asID:                     63099
IP address blocks:        156.254.112.0/23 maxlen: 24
                          156.254.112.0/24 maxlen: 24
                          156.254.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122186 (0x1dd4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 14 07:26:47 2026 GMT
            Not After : Nov 21 07:26:47 2026 GMT
        Subject: CN=6acf2ebc-162d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:72:89:76:6e:21:4f:b9:65:fe:8d:5f:db:e7:
                    a0:5b:14:58:82:bc:ad:8e:03:b6:e9:13:2a:29:37:
                    0c:ea:9f:ca:67:b8:61:28:11:6c:39:6f:bb:ae:4f:
                    d3:e8:b8:ef:ab:80:ba:92:42:2c:b6:3f:36:bb:e6:
                    3e:58:89:8d:5d:42:61:1d:cb:1b:7c:ce:d1:ea:5d:
                    7c:ab:66:a9:c1:62:54:c2:6d:0f:a3:ac:21:3b:0c:
                    aa:a6:ea:36:e5:c8:53:3b:2a:13:44:47:51:b3:1a:
                    4f:b0:a9:b0:19:f8:80:0b:2f:3a:92:d7:42:31:f9:
                    3a:24:8c:0c:0b:4a:2c:b8:d8:01:48:ec:44:48:a2:
                    d3:bc:33:21:a5:61:ce:b0:47:72:27:cc:b1:f6:1d:
                    02:7f:84:01:8e:95:7c:d2:fa:ec:9c:0d:8e:e6:37:
                    60:c4:e2:42:45:b8:b0:6e:1d:ca:29:cb:77:97:44:
                    9e:26:2e:6c:56:2f:e3:ba:1a:df:75:f8:80:a8:90:
                    07:60:98:c5:e6:d7:a0:92:26:c9:fc:af:4e:26:ad:
                    46:7f:cc:f3:bf:bc:4b:4c:55:fe:d4:f0:f9:3f:5b:
                    be:23:84:ea:f0:92:e3:09:e2:cd:c7:08:1c:46:2e:
                    35:f6:07:1e:e3:85:ea:93:50:2b:c9:b7:26:bc:36:
                    d0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:40:21:14:36:EC:27:29:6F:FC:E1:4B:B6:96:E0:EC:17:CB:AC:CB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FD82A8EC7A011F18F7E5501CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:b0:40:c1:20:f6:6f:b3:3f:ea:a4:fc:f4:dc:9f:4f:bd:83:
         02:ab:a4:84:ef:ed:30:af:e2:17:74:d5:18:81:4b:0a:e1:d8:
         25:6c:79:94:c8:eb:4e:ef:66:30:e3:b5:5c:f6:f1:6e:13:64:
         10:45:5e:48:34:72:b3:bc:01:92:ab:55:13:54:98:84:dd:6e:
         1a:df:c8:2b:7e:b4:90:7b:92:a1:43:dc:71:32:28:4e:f4:c4:
         6c:4d:37:42:29:98:07:33:c8:ad:20:b3:ab:8f:67:53:2b:20:
         21:6e:a2:68:86:28:86:f3:b0:c5:7e:ad:e7:6f:4a:90:7e:56:
         f9:77:63:bb:39:54:04:a0:6d:ba:64:09:90:bf:8a:54:53:be:
         a7:e2:82:df:fe:a2:3f:0c:00:11:48:14:2d:b3:2d:59:b8:e8:
         80:6c:22:f4:71:9a:1e:6c:63:31:70:5d:41:5e:58:64:93:58:
         24:77:65:d4:de:48:90:83:ff:c6:7c:18:c9:85:5d:ed:e6:5d:
         ac:2e:da:66:28:7a:d7:b5:f2:f4:55:87:ee:91:05:f2:7c:43:
         cc:0f:c9:d2:fd:67:25:bc:09:2d:7d:45:3f:f4:10:d2:66:28:
         c0:8a:1d:11:75:db:31:e5:c5:01:4e:9b:2b:c9:4e:35:c9:d2:
         9c:ce:5c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----