Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF09B59A923F11F18A3533A9CE1D38B0.roa
File:                     AF09B59A923F11F18A3533A9CE1D38B0.roa (raw, json)
Hash identifier:          9irShm3nroztWtj+mqhmmwn68QzGFt8ziH1J1AnBTUs=
Subject key identifier:   78:2D:6A:35:4D:D8:FB:80:C3:46:FD:95:E2:81:F2:F5:48:34:02:7B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CA43
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF09B59A923F11F18A3533A9CE1D38B0.roa
Signing time:             Fri 07 Aug 2026 09:09:24 +0000
ROA not before:           Fri 07 Aug 2026 09:09:21 +0000
ROA not after:            Thu 22 Apr 2027 09:09:21 +0000
asID:                     132813
IP address blocks:        156.226.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117315 (0x1ca43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  7 09:09:21 2026 GMT
            Not After : Apr 22 09:09:21 2027 GMT
        Subject: CN=6a75a0c4-267a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d0:34:ec:a6:04:83:31:d5:9b:9b:a7:25:3b:
                    71:87:41:4e:a1:6b:6b:8e:fb:61:a6:40:f2:16:21:
                    94:94:49:18:8d:ac:d6:67:fc:66:f2:d3:39:ea:57:
                    43:d9:3c:e7:5f:66:80:80:72:d4:cf:f4:2a:c2:45:
                    db:6b:48:91:64:54:72:a7:3b:88:c3:0d:13:8d:5a:
                    59:79:a4:ad:d0:03:62:68:a4:5e:2a:20:95:a4:c6:
                    d9:08:ed:ec:7f:ed:14:04:12:45:c5:f4:ca:e4:77:
                    66:42:8b:5a:c6:8d:bd:04:3e:2b:18:24:cb:40:80:
                    fb:9d:8d:1d:82:14:56:e9:91:c7:19:33:fc:bc:e7:
                    05:19:1a:84:fd:8b:ee:29:7e:28:80:b0:e3:bb:46:
                    6c:6d:ec:e8:8f:1b:0c:80:30:1c:ee:9e:d7:ae:e4:
                    9e:01:01:98:4c:26:40:36:fa:db:fc:9f:58:63:06:
                    c8:ea:80:0e:92:5d:cd:c9:86:d1:28:b3:b8:d1:f8:
                    65:79:ff:5c:3d:3f:16:d3:4b:0a:15:af:03:70:22:
                    53:95:b0:a9:ec:01:1b:dc:aa:00:73:26:30:d9:f4:
                    f5:f8:b4:7f:83:ab:28:71:7e:d4:ab:8c:d3:e4:7f:
                    02:69:bc:76:94:8d:53:6c:fe:ab:9c:7e:fd:f3:10:
                    19:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2D:6A:35:4D:D8:FB:80:C3:46:FD:95:E2:81:F2:F5:48:34:02:7B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF09B59A923F11F18A3533A9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6e:66:15:02:0d:4e:9d:f0:0f:4e:30:d5:97:85:98:39:72:16:
         a8:b8:29:16:b9:7d:5c:c1:84:71:da:f9:86:8b:9d:70:95:00:
         9f:2c:f6:59:27:fe:b0:2c:fb:49:e7:fa:1a:72:a1:90:6c:84:
         5c:4b:b3:93:0a:03:10:9e:c0:8f:36:8a:27:63:f0:13:37:9c:
         4a:92:46:81:28:5f:9b:d7:ce:91:ee:13:a1:25:5a:0b:dd:99:
         2c:0c:d1:77:76:2a:f1:67:fb:d7:e2:af:7c:08:99:ad:2d:35:
         4c:96:c8:cb:43:49:9c:bb:fe:26:e2:0b:44:b9:7b:a9:b7:42:
         4a:d0:71:6c:34:26:5c:ee:ca:cd:3e:6c:6c:75:3c:14:37:19:
         3a:fd:e4:d7:38:57:67:b6:21:b2:17:a0:93:67:44:6f:f1:e6:
         28:d1:37:6b:c5:f6:b4:cb:cd:59:d6:7b:3a:77:b7:fb:58:88:
         44:e1:93:0d:ca:19:e7:8e:c5:04:ca:26:a6:fb:f9:a2:7d:35:
         4e:71:91:39:08:71:13:62:90:8f:49:e4:24:52:b8:c6:38:0e:
         58:da:b1:fd:cb:a7:a0:18:b8:89:0e:64:70:85:4d:a0:9a:b0:
         cf:7b:5f:1f:18:09:d3:5b:72:68:08:47:61:6c:f4:67:42:2f:
         3a:0a:2b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----