Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B86F5B269CE411F1961D72A1CE1D38B0.roa
File:                     B86F5B269CE411F1961D72A1CE1D38B0.roa (raw, json)
Hash identifier:          fD/QPsGyD9oerjMiZipT0V5AlHnU942U1BqTkuNOUL4=
Subject key identifier:   FE:A9:39:BF:C0:C3:DB:6D:BF:9C:65:E3:A4:5E:22:40:E4:52:B0:41
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CF14
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B86F5B269CE411F1961D72A1CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 22:15:59 +0000
ROA not before:           Thu 20 Aug 2026 22:15:54 +0000
ROA not after:            Sat 10 Oct 2026 22:15:54 +0000
asID:                     3257
IP address blocks:        156.225.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118548 (0x1cf14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 22:15:54 2026 GMT
            Not After : Oct 10 22:15:54 2026 GMT
        Subject: CN=6a877c9f-ff75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ad:6b:bb:49:df:d9:da:4f:f0:33:2d:93:08:
                    00:c3:a5:80:fd:77:02:e2:c0:be:25:19:06:02:30:
                    c4:c3:35:70:d5:03:09:65:01:1f:a6:93:c7:a7:64:
                    a4:08:67:76:8a:f7:08:b3:aa:ad:97:ce:91:66:db:
                    10:d4:f0:50:2a:47:23:8d:2c:f8:9a:6b:3c:5e:40:
                    b5:3c:86:b4:39:be:95:50:4e:a8:b0:bb:32:b0:8e:
                    ca:60:51:a7:b2:54:4a:86:dd:c0:f8:b2:5b:d0:45:
                    68:ff:5f:84:32:4b:9a:0b:91:ef:57:e8:0b:1b:be:
                    19:48:fe:9c:0d:c8:a5:db:f7:32:44:dd:98:cb:65:
                    56:ef:51:eb:47:b6:61:3c:fe:01:bb:50:3d:95:d5:
                    c0:54:54:13:14:b1:54:11:f7:3c:5c:ef:c0:b5:df:
                    86:8e:c2:fc:29:4c:09:15:61:e2:50:a6:85:c7:35:
                    18:96:79:b0:3f:ea:81:30:2c:e6:a4:ed:5d:52:4c:
                    a8:1e:80:f8:d1:66:73:1d:80:c1:00:2a:69:fb:18:
                    62:f1:5f:8a:42:34:13:80:3a:7f:1c:ac:e7:61:41:
                    de:69:e8:f7:0d:ca:b7:ef:24:57:d6:13:bf:80:16:
                    4a:37:9f:51:4a:a5:e4:ea:89:65:dd:84:2f:6e:cb:
                    86:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A9:39:BF:C0:C3:DB:6D:BF:9C:65:E3:A4:5E:22:40:E4:52:B0:41
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B86F5B269CE411F1961D72A1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:08:1c:1f:69:35:0a:3d:18:ee:08:99:81:07:ad:fd:d7:a8:
         d0:8c:c6:e3:7c:26:d6:eb:1a:0d:a0:47:6a:8b:c6:d0:f8:20:
         e8:23:80:7a:e9:6c:81:8c:e4:f8:bd:9f:2d:77:3f:d6:6d:c2:
         88:e7:86:48:1f:1a:43:d0:36:fb:f0:c5:3f:cf:7e:cc:fe:5c:
         3c:10:5b:a1:40:d0:a2:c7:39:d5:02:52:b4:2e:55:c1:b3:2e:
         a7:87:e6:c6:a2:85:17:90:bb:c6:3a:e7:f1:4e:14:27:e9:50:
         5a:61:53:05:96:e5:e3:0d:a9:ab:a5:80:5d:27:a8:03:2b:ca:
         91:a4:ca:1e:c0:56:95:c7:3e:6a:c1:b8:f5:e2:65:fb:89:3e:
         2c:fb:49:54:73:84:85:ee:0e:33:9e:db:ab:1a:2d:4a:33:a1:
         24:f7:cf:ff:f7:8a:41:3f:6b:cf:fc:4e:8f:c8:13:e8:68:9d:
         3c:26:60:97:2c:53:d4:ec:19:67:99:04:f5:82:7c:f0:b8:31:
         00:1f:f4:71:bc:1c:3f:ee:96:a4:f6:cd:53:db:ec:96:be:ed:
         62:3c:b5:c4:b2:9f:5f:72:cc:07:53:18:09:21:82:9b:31:08:
         98:d0:18:d5:87:06:68:37:e1:95:43:73:1b:21:2b:56:57:32:
         ab:d0:56:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----