Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADE7E382989611F1ADAABB18CF1D38B0.roa
File:                     ADE7E382989611F1ADAABB18CF1D38B0.roa (raw, json)
Hash identifier:          OzpX734ezMYERdR6qnAVecjUsjmtPXpzVCBCqJ8APOg=
Subject key identifier:   81:D3:E2:2D:86:40:51:23:EE:0A:1D:DF:7F:45:E7:98:66:D0:1A:28
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CCE8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADE7E382989611F1ADAABB18CF1D38B0.roa
Signing time:             Sat 15 Aug 2026 10:47:16 +0000
ROA not before:           Sat 15 Aug 2026 10:47:12 +0000
ROA not after:            Mon 21 Sep 2026 10:47:12 +0000
asID:                     202437
IP address blocks:        156.228.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117992 (0x1cce8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 15 10:47:12 2026 GMT
            Not After : Sep 21 10:47:12 2026 GMT
        Subject: CN=6a8043b4-c333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4f:71:e7:07:7e:e9:5f:49:1f:92:43:be:7d:
                    5e:e7:1c:4c:bf:7d:e2:ae:50:11:b4:42:bb:16:d1:
                    a3:c0:3f:b7:f8:db:f3:29:fa:0d:a6:9c:68:8a:ff:
                    e9:5d:ca:de:a6:5a:ac:72:d7:cd:b4:f6:73:73:87:
                    7f:55:96:b9:95:08:10:4f:17:2b:a6:ce:fe:b6:79:
                    da:e2:de:4e:aa:14:09:75:40:55:63:eb:0b:7d:ac:
                    e8:5d:38:6f:43:4d:ed:95:d9:db:4e:32:ba:83:3c:
                    f7:9c:dd:bf:30:a4:2b:5c:b6:4c:0c:d7:56:32:4c:
                    a5:25:f4:40:8b:f3:d3:df:92:4c:d0:d2:66:3f:ed:
                    c8:bb:b0:36:df:73:95:8f:80:59:2c:4d:ad:58:b5:
                    85:e0:43:d9:df:ac:15:a9:ad:ae:de:a4:98:2d:03:
                    32:33:18:0b:a9:a8:72:f3:fb:fb:e8:67:df:df:6d:
                    5f:79:0e:d8:d6:5e:e7:d0:82:74:28:72:b9:cb:d1:
                    2b:54:8d:8e:8d:3e:a8:0b:1f:6c:3b:53:dd:3d:11:
                    e2:f3:29:aa:1e:4b:a2:7b:0d:8b:17:c2:e7:b5:69:
                    34:b9:17:de:ce:e6:bd:78:17:50:85:78:a5:0a:56:
                    2b:20:0c:61:25:81:1b:6d:3f:48:93:86:a2:7d:e2:
                    28:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D3:E2:2D:86:40:51:23:EE:0A:1D:DF:7F:45:E7:98:66:D0:1A:28
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ADE7E382989611F1ADAABB18CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.228.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:91:79:f3:64:31:3d:35:de:e0:e3:02:c9:b8:b0:0a:6b:57:
         c3:33:e9:84:f1:3e:42:d4:29:76:5c:1e:24:2c:f6:f3:29:f9:
         cc:61:12:b8:f9:8c:2e:4c:a7:83:a0:81:e8:d5:25:87:01:13:
         fd:42:c8:00:80:bd:c1:03:04:44:0b:38:97:54:dd:97:c7:01:
         3e:6a:a4:2d:3a:b1:77:67:c2:d0:2e:09:48:1e:15:d9:f5:3b:
         8e:4f:b1:dd:a9:8b:6c:c3:74:be:82:61:a7:a6:af:17:e0:83:
         55:3a:a4:39:bf:21:0d:8b:f5:0e:b6:2d:d2:e1:de:16:6b:44:
         ac:a1:45:96:ec:d8:d7:57:d6:81:2b:8b:e7:b6:f5:43:19:f3:
         ca:10:4a:59:5f:77:74:c4:2e:01:5d:c8:13:84:62:b0:42:93:
         13:0c:a8:15:6e:f3:38:93:5c:f6:b2:66:61:3e:57:a5:9f:80:
         f4:38:4f:bf:36:87:42:1c:10:cc:3d:77:f2:0d:87:d2:c3:48:
         5f:ec:bf:86:9a:99:b2:57:93:ed:44:74:66:5a:3b:ea:96:11:
         c0:2c:8a:f0:3e:2d:56:fe:ca:d8:16:4a:77:cf:dc:cf:5c:5e:
         50:c0:60:b4:e4:11:53:ec:4a:5c:5a:73:30:fc:67:d8:fb:46:
         a7:70:31:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----