Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3594A50C3B611F1A4400EF6CE1D38B0.roa
File:                     A3594A50C3B611F1A4400EF6CE1D38B0.roa (raw, json)
Hash identifier:          7dESnjBNJGv14h7DPai6q+9qafTc5I7ZpQIQgSfYE7M=
Subject key identifier:   BA:F7:59:C6:CB:C0:5B:14:CB:E4:5D:29:18:14:8F:F8:DF:72:6C:0C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC0D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3594A50C3B611F1A4400EF6CE1D38B0.roa
Signing time:             Fri 09 Oct 2026 07:54:22 +0000
ROA not before:           Fri 09 Oct 2026 07:54:18 +0000
ROA not after:            Thu 05 Nov 2026 07:54:18 +0000
asID:                     269816
IP address blocks:        156.248.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121869 (0x1dc0d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  9 07:54:18 2026 GMT
            Not After : Nov  5 07:54:18 2026 GMT
        Subject: CN=6ac89dae-4bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:46:ef:ce:9e:6c:7a:21:d3:e7:73:f5:ff:1a:
                    58:8f:30:f5:a3:7d:0f:60:66:d3:b8:34:7b:f1:0f:
                    5e:d1:ad:46:86:24:d5:84:d9:b2:e9:a2:41:43:18:
                    f3:31:22:1e:70:5b:41:49:b7:fc:2b:c1:99:62:cc:
                    8e:f5:ae:40:6a:67:ab:cc:fc:7c:5d:2c:79:f6:9e:
                    03:a5:8b:95:5b:09:70:3b:09:a1:26:46:bc:e0:cb:
                    69:93:ef:4a:a6:76:8f:a0:de:ec:df:fd:95:80:5c:
                    fb:a4:1e:a6:4c:c7:73:c5:e7:ab:7e:86:ef:9a:c5:
                    f9:56:4c:ce:51:c7:55:5f:c9:50:c4:eb:a3:dc:51:
                    4f:59:5f:1d:f0:7d:03:9f:e4:c9:3b:0d:66:f8:cb:
                    79:c7:98:50:34:18:9f:fc:f1:c1:f6:0f:97:6c:00:
                    99:28:7a:82:72:67:22:8d:b1:49:61:79:50:e3:c4:
                    78:07:33:7d:ed:0d:70:e4:a2:d9:35:30:50:e0:27:
                    7c:bc:1a:c7:a2:48:3c:fc:54:35:21:27:ee:50:a6:
                    e6:36:09:1a:0b:24:83:b3:66:48:c7:cc:06:eb:d6:
                    5f:81:09:9c:a9:3a:51:72:05:5b:cc:4e:95:15:61:
                    e0:92:b8:41:c3:40:bb:93:1a:06:aa:c8:36:ef:6c:
                    6c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F7:59:C6:CB:C0:5B:14:CB:E4:5D:29:18:14:8F:F8:DF:72:6C:0C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3594A50C3B611F1A4400EF6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.248.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2d:92:00:5f:32:43:27:19:70:2a:7b:4b:a9:fd:dd:59:e9:47:
         98:5b:5d:c8:02:77:67:b9:9a:13:40:c0:62:c7:3e:8f:b4:7d:
         c5:bf:cc:52:ca:5b:80:ed:8b:4f:b6:91:a9:da:42:46:7c:fe:
         0f:3e:b7:f4:a6:53:70:c5:b1:3e:4b:43:62:30:3b:04:56:2c:
         62:5b:37:2d:a6:e0:24:2a:6f:ca:49:1e:14:fc:56:03:7a:91:
         a4:af:57:9b:f4:6b:77:cb:57:1a:ec:fa:b6:af:02:e2:02:be:
         92:d8:83:15:99:03:fd:40:fa:0e:e4:be:39:c0:84:09:3b:d1:
         29:05:1f:51:db:07:a1:23:b6:6d:8b:40:59:94:76:74:e5:c1:
         30:79:f6:05:5b:2b:9e:7b:65:e5:4c:b0:7e:05:b2:d8:aa:0f:
         fd:47:f5:a0:54:4f:ed:b4:7b:14:c1:29:d9:28:58:49:ec:c8:
         54:65:b1:b1:e9:30:53:a1:62:85:06:10:ea:61:31:fa:ca:a7:
         35:d5:ae:6f:1f:3f:e5:8f:85:04:ac:24:e5:62:a1:08:4c:b6:
         d4:27:ec:c6:29:b9:6b:37:04:a6:c3:82:dc:e6:38:df:67:14:
         80:cf:29:b4:1c:24:3d:25:1c:8e:fa:f3:ce:bf:ed:5f:c9:38:
         e1:1e:7d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----