Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9F382D0916711F1912E0A0CCF1D38B0.roa
File:                     A9F382D0916711F1912E0A0CCF1D38B0.roa (raw, json)
Hash identifier:          cGOvr4E5J6c+HS7CBZwvdc9OnfXJVsYu5g5gxrtwXgo=
Subject key identifier:   57:7C:2F:06:67:A8:ED:A3:2C:B7:6C:02:BB:BD:A2:A9:1B:71:B8:15
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C9CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9F382D0916711F1912E0A0CCF1D38B0.roa
Signing time:             Thu 06 Aug 2026 07:23:05 +0000
ROA not before:           Thu 06 Aug 2026 07:23:01 +0000
ROA not after:            Sun 13 Sep 2026 07:23:01 +0000
asID:                     152698
IP address blocks:        156.252.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 28 Aug 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117196 (0x1c9cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  6 07:23:01 2026 GMT
            Not After : Sep 13 07:23:01 2026 GMT
        Subject: CN=6a743659-7627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:17:cb:79:e8:d1:a8:7b:ce:b2:67:94:5c:45:
                    b3:8e:c9:27:03:28:1b:6c:0e:d7:92:58:b5:fe:e5:
                    a3:00:44:23:75:03:7d:39:b5:9b:64:c2:72:fe:17:
                    4b:bf:be:d1:fe:dc:2e:ca:24:31:47:52:78:1d:27:
                    59:3e:c3:a3:db:4d:22:0d:80:8e:8a:f3:58:4b:8c:
                    db:58:bd:a8:f1:9c:d7:bd:43:9f:6d:13:93:fb:ec:
                    6f:69:29:74:8d:a8:24:9d:07:1a:47:68:a7:47:3d:
                    c9:36:bf:6b:8b:e1:5a:7a:26:b3:36:1a:99:36:9d:
                    a0:a6:46:be:3f:03:87:97:e4:0f:ce:5e:11:16:08:
                    53:8a:66:52:93:b6:5a:b2:ec:46:f7:07:35:21:bf:
                    c6:89:4d:4f:c8:da:f2:c0:cf:9c:43:cc:cf:76:cd:
                    d1:e1:74:e7:3d:3e:33:78:2f:36:b8:3b:98:1b:70:
                    1b:3e:2e:28:a7:86:57:af:c0:4e:82:ff:63:11:70:
                    39:2d:26:d7:9d:ca:a3:58:c5:3e:84:e9:32:3a:2c:
                    50:c1:48:90:40:5b:76:7e:46:4b:e3:57:fd:54:bd:
                    bb:fd:e5:13:00:f0:97:be:be:52:46:a4:dc:a1:3d:
                    84:0f:a8:bb:d6:fb:61:ca:36:65:23:76:0d:52:61:
                    c3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7C:2F:06:67:A8:ED:A3:2C:B7:6C:02:BB:BD:A2:A9:1B:71:B8:15
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9F382D0916711F1912E0A0CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.252.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:9e:e2:04:2f:26:fa:fd:6c:ac:9a:62:06:7a:4d:29:aa:de:
         d0:12:3a:44:8f:e7:48:49:dd:35:fa:6c:bf:6e:4a:a1:ec:80:
         c1:8b:ad:c1:7b:df:c9:db:ac:56:a4:41:e4:7f:f9:56:f5:58:
         0b:d4:72:7a:f7:88:ab:a1:47:0e:41:d2:40:30:22:52:40:6d:
         87:2c:97:2d:78:80:29:67:8c:45:81:6a:db:db:d3:08:75:cc:
         cf:81:63:c1:a4:1d:51:cf:f7:fe:3c:d6:a6:e2:e6:9a:bb:25:
         c5:9c:50:1b:50:2f:d3:fd:81:2c:50:c8:03:78:9e:61:7e:f0:
         df:b1:13:5b:b9:b0:81:7d:f0:53:12:6d:be:9e:3f:86:32:60:
         71:18:b3:53:b4:27:63:1d:14:2b:a5:51:21:14:61:4e:a5:2e:
         66:86:fa:b9:a0:71:cb:79:6e:39:df:85:b6:f3:8e:72:ac:24:
         08:07:50:83:37:9b:bb:0c:75:7d:9b:a4:ff:3d:d1:4c:e4:f3:
         f4:ee:c0:43:e8:aa:47:a4:0f:00:df:f2:0e:a4:76:0e:60:c4:
         71:d7:90:9d:9c:e8:5e:c7:16:0d:10:bb:e9:97:c4:f4:4e:25:
         57:0c:c6:22:72:44:fa:4f:02:ca:29:4a:ca:aa:e9:3d:10:bc:
         fd:bd:35:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----