Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A778748A964D11F1A36711B6CE1D38B0.roa
File:                     A778748A964D11F1A36711B6CE1D38B0.roa (raw, json)
Hash identifier:          vrd3tPWou5h3AE0PrlhLFF2pNp2ixZdlDOPF4ZbAidw=
Subject key identifier:   5E:9F:79:61:0E:A9:AD:DC:7E:86:D6:26:F6:F3:30:91:7E:60:CC:5E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC0E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A778748A964D11F1A36711B6CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 12:59:29 +0000
ROA not before:           Wed 12 Aug 2026 12:59:25 +0000
ROA not after:            Sun 12 Aug 2029 12:59:25 +0000
asID:                     17561
IP address blocks:        156.251.254.0/24 maxlen: 24
                          156.251.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117774 (0x1cc0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 12:59:25 2026 GMT
            Not After : Aug 12 12:59:25 2029 GMT
        Subject: CN=6a7c6e31-f12b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ed:d7:80:1b:15:81:dd:ca:b4:5d:3b:1d:39:
                    b3:84:cf:3d:2d:8a:73:88:79:d0:50:7b:9a:ea:9b:
                    e4:c5:bb:24:86:4a:be:5d:c0:c2:90:f4:0d:fa:20:
                    f0:48:3e:ab:59:46:02:82:09:7e:ae:f1:96:8c:97:
                    46:a5:3b:85:5c:2d:4a:53:dd:8c:80:3a:c9:95:40:
                    37:1c:6a:1a:28:dd:34:24:a4:6e:96:2d:e7:37:60:
                    33:be:b9:2e:18:7a:7a:f8:37:68:47:23:7b:cc:05:
                    50:eb:a6:db:c2:5b:e8:e2:6e:fc:fb:be:8d:9c:3c:
                    76:4f:90:d3:dc:33:54:ec:6f:74:58:7b:b1:e1:e9:
                    af:22:c9:b3:ed:b8:0f:63:e7:9d:7e:2e:62:88:6c:
                    f2:03:4f:54:cf:34:40:6c:7c:7e:f5:22:39:dd:0a:
                    e2:b4:65:ee:24:3a:7c:bb:35:f6:d8:7f:e0:a0:94:
                    02:e5:b0:26:51:98:7a:53:8c:06:cb:7b:db:c2:13:
                    7e:02:3f:be:2a:5b:6a:79:2b:e9:ec:d7:1b:ce:11:
                    59:f4:d3:54:9d:47:c5:2f:49:39:c0:df:b1:df:5f:
                    ec:87:c7:db:d7:f6:6f:3c:46:d7:80:b6:6d:da:85:
                    89:d0:a4:f2:2b:30:78:27:92:4f:05:54:9b:21:6c:
                    01:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9F:79:61:0E:A9:AD:DC:7E:86:D6:26:F6:F3:30:91:7E:60:CC:5E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A778748A964D11F1A36711B6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:f6:c6:a0:1d:0f:39:16:a9:08:72:59:b5:02:50:ec:5e:9a:
         c5:21:f1:ef:43:6d:eb:ab:78:20:92:b1:6b:26:53:ed:3b:25:
         2c:ff:05:bd:ce:19:ee:a2:95:e6:a4:b1:7d:d0:70:58:33:96:
         6a:b5:b8:45:28:aa:43:1d:33:94:e5:06:01:6d:ea:86:fa:d0:
         4a:5c:21:6e:f1:a2:39:97:d9:18:77:2a:6c:5c:80:06:0c:0f:
         13:3f:6f:19:60:bd:94:ce:ba:0d:86:cd:a7:21:40:ce:17:80:
         56:8e:9a:81:2d:15:5f:85:82:48:e5:21:5c:8b:9f:61:46:7f:
         46:a6:9b:bc:4c:78:8a:85:31:39:6c:29:da:f4:3f:4e:b1:4c:
         2b:c3:ef:04:df:12:b1:d6:92:2d:47:2f:d0:b0:51:e6:0b:25:
         92:b1:66:d6:f5:3e:ba:e3:c6:2d:35:6f:34:b4:62:8c:2c:0a:
         00:03:c4:c0:6a:d3:19:c1:40:a5:cc:35:48:7d:6d:aa:73:12:
         9b:f6:7e:39:e2:f1:d3:bd:3f:f9:75:0f:1a:7a:11:fc:a8:f4:
         67:b7:d9:ba:4c:e4:c5:db:fd:fd:ac:07:80:b3:06:27:ab:92:
         e7:79:45:03:15:5a:cf:ea:cc:e8:df:bd:d1:0f:40:b9:2e:8a:
         a1:10:37:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----