Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABA01978CCF811F1982CB3CCCE1D38B0.roa
File:                     ABA01978CCF811F1982CB3CCCE1D38B0.roa (raw, json)
Hash identifier:          ggHt55fDfial1PPVhlNa08NgVAk98UScmyHS3hVNVig=
Subject key identifier:   E5:B1:38:73:45:C9:79:8E:D2:07:77:30:44:18:66:B6:CA:21:C0:0E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DEFB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABA01978CCF811F1982CB3CCCE1D38B0.roa
Signing time:             Wed 21 Oct 2026 02:39:43 +0000
ROA not before:           Wed 21 Oct 2026 02:39:37 +0000
ROA not after:            Thu 29 Oct 2026 02:39:37 +0000
asID:                     17497
IP address blocks:        156.255.48.0/22 maxlen: 24
                          156.255.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122619 (0x1defb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 21 02:39:37 2026 GMT
            Not After : Oct 29 02:39:37 2026 GMT
        Subject: CN=6ad825ef-b125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bd:c7:48:9a:e7:c4:a8:39:6c:77:c7:7e:c8:
                    c1:fd:86:b0:77:ac:62:b8:96:ec:62:4a:d8:63:4f:
                    98:f4:f4:c9:f8:b9:08:d4:11:f8:53:80:85:ac:54:
                    87:ff:78:a1:2c:e9:74:d1:76:99:69:a9:53:88:18:
                    e4:e7:91:a4:74:39:55:7c:b4:cc:25:73:31:54:d1:
                    72:f9:cc:c8:f4:4c:e5:1f:28:7b:76:3a:d8:c3:d0:
                    88:24:30:e2:61:52:72:f7:32:6a:72:21:e4:16:24:
                    68:c9:7c:81:a8:2d:6c:e8:03:50:d7:27:67:c3:24:
                    fa:2c:5a:f7:eb:1c:77:ce:7a:28:e3:49:89:cc:44:
                    05:d6:79:54:07:52:dc:9c:1f:96:e2:4e:61:f0:21:
                    5c:5e:64:e7:03:05:12:d4:3b:8e:d1:67:18:b9:e8:
                    05:3d:5c:a0:99:d5:2d:45:93:f2:60:86:97:ae:f3:
                    c9:97:82:d0:be:8a:9f:79:2d:24:78:ba:c9:91:92:
                    5e:23:86:2e:cd:a2:2a:38:0e:11:9e:de:41:35:44:
                    8f:85:6a:2a:9b:9f:50:df:9d:cc:ec:4f:60:79:84:
                    39:47:1d:07:28:ea:da:f4:21:e4:96:53:1b:cc:f1:
                    ff:d6:9e:33:f5:d8:b1:e4:5e:f6:89:f9:cb:0d:07:
                    bd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B1:38:73:45:C9:79:8E:D2:07:77:30:44:18:66:B6:CA:21:C0:0E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABA01978CCF811F1982CB3CCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.255.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0a:50:1e:90:9b:0b:69:03:44:ef:b6:fa:56:bb:45:7a:68:e9:
         f1:26:04:45:9c:57:ac:2e:a9:3b:3c:0b:de:53:f6:d1:e1:39:
         67:92:ec:bb:62:f5:48:ea:04:f6:fc:4f:a2:5c:bb:0b:c3:06:
         22:cc:ac:2f:39:67:ad:ec:73:f1:f6:91:7e:2e:d6:35:49:8b:
         42:77:ce:c3:e1:ce:40:7e:6d:c5:44:19:fc:fd:6e:49:af:bd:
         67:23:9b:11:f9:d0:62:d3:84:ee:f5:96:2b:ae:39:74:97:84:
         25:c6:b8:0f:fe:68:91:63:92:da:68:14:78:c3:93:21:40:96:
         21:f3:6b:cf:3b:cc:0b:90:c0:ca:4b:fd:fd:b5:58:05:ab:c6:
         d6:cd:09:6d:25:d2:e1:0e:46:c2:78:bf:95:55:87:68:ea:9e:
         08:b4:01:6d:46:34:ca:81:75:a1:ca:ef:46:65:67:e0:37:c3:
         cd:de:d0:10:42:c8:96:e5:64:f0:d3:2f:2c:b7:84:4d:0c:94:
         e3:91:2d:3d:b9:b8:cb:6b:f7:42:c9:33:68:0a:55:10:65:ab:
         1f:ed:3a:50:7c:98:15:23:bf:d5:10:fe:07:3c:22:1b:38:d1:
         6c:e9:8e:68:e1:e1:b8:82:2f:9f:31:df:c5:2c:19:4c:df:41:
         01:2d:6f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----