Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC795902A78311F1812184C4CE1D38B0.roa
File:                     BC795902A78311F1812184C4CE1D38B0.roa (raw, json)
Hash identifier:          EdGErbBBs9TQFdsIcoFfh4OyTbnrY/XVyp39r+knpPU=
Subject key identifier:   92:59:F2:C7:E7:FC:C6:DB:7E:0D:CF:B5:0E:E8:97:20:F1:50:A6:65
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D308
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC795902A78311F1812184C4CE1D38B0.roa
Signing time:             Thu 03 Sep 2026 10:39:27 +0000
ROA not before:           Thu 03 Sep 2026 10:39:23 +0000
ROA not after:            Thu 22 Oct 2026 10:39:23 +0000
asID:                     142032
IP address blocks:        156.225.16.0/20 maxlen: 24
                          156.225.16.0/21 maxlen: 24
                          156.225.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119560 (0x1d308)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  3 10:39:23 2026 GMT
            Not After : Oct 22 10:39:23 2026 GMT
        Subject: CN=6a994e5f-155f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cb:12:c5:cb:68:45:b8:73:f9:be:dc:ed:6b:
                    b9:a3:12:28:52:93:b1:bc:b6:8f:e6:44:67:dd:0d:
                    54:bd:84:47:78:c1:57:bf:65:5c:31:51:c2:ae:74:
                    ac:30:d0:95:c1:59:18:89:62:ab:35:53:3f:37:69:
                    86:fd:f4:4a:6c:30:2c:ab:37:ca:3e:37:7a:9a:3c:
                    f8:16:22:4e:eb:14:e1:8f:af:0e:98:05:c9:e0:eb:
                    64:b6:1d:31:c4:14:79:52:b4:d8:3c:8f:fb:f9:69:
                    6b:6e:7e:d2:3e:5b:a9:74:fc:e9:ee:9e:77:d3:cd:
                    c7:f4:e5:37:65:d4:5d:c2:3b:e4:4c:b9:c0:d5:b8:
                    42:2d:24:c0:fa:ad:a9:09:24:fb:45:f3:a8:04:37:
                    b1:8f:f3:11:7b:79:1f:73:7a:dc:74:8a:45:03:db:
                    96:b4:5c:92:3e:c8:11:99:cc:c3:db:55:23:64:1c:
                    dc:07:bf:1c:8a:00:92:14:55:7d:b6:ca:79:eb:64:
                    95:8f:83:87:8e:93:30:71:0f:f3:aa:35:03:23:34:
                    46:0d:85:df:92:37:33:c1:7f:ac:9f:1b:5e:dc:dd:
                    d1:4c:b1:df:b3:5f:80:9b:30:bd:8b:a3:6f:d3:bd:
                    9e:e4:2e:f8:1c:3f:a6:33:33:29:1b:9e:3e:26:56:
                    74:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:59:F2:C7:E7:FC:C6:DB:7E:0D:CF:B5:0E:E8:97:20:F1:50:A6:65
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC795902A78311F1812184C4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b5:b3:75:d4:cf:06:bb:ee:1e:69:7f:5f:98:13:6e:c5:4c:dd:
         0a:f9:00:09:e4:b3:1d:61:fe:59:73:bb:c1:7a:c5:d5:83:11:
         4c:5d:ba:1f:8d:0b:e9:89:90:73:3f:d4:b2:6c:ec:7b:54:70:
         dd:ad:8c:10:86:d8:ef:bf:f8:6f:6e:5c:e4:7c:23:b1:08:86:
         53:61:74:c5:f2:c5:61:8e:37:33:42:d5:49:dc:9e:69:83:37:
         b6:ab:de:cf:11:61:5a:50:ff:93:25:53:af:73:56:e9:cc:6c:
         60:57:f1:87:63:5e:1e:0a:89:4a:c1:71:b3:97:5f:f3:13:11:
         ed:25:58:1c:d7:29:6e:b9:50:14:97:62:88:af:7d:22:a2:a7:
         0a:fc:1e:69:1d:e0:b9:e5:5e:49:b2:3c:1e:8c:df:79:46:99:
         89:1f:3f:c8:6f:0a:89:1e:2d:b4:b8:79:23:ea:f7:1b:88:c6:
         25:4d:55:d8:97:c8:8d:69:f0:90:82:c1:f3:05:8c:8c:a4:58:
         c3:3c:02:c1:65:2c:b0:d3:70:33:db:6d:ce:c6:39:ae:e3:4a:
         72:6a:64:1c:a9:64:b0:cc:c5:01:7e:0c:b9:5c:11:6d:ad:f3:
         a3:57:f1:4c:20:af:9c:52:f0:71:cf:3a:8f:bc:46:c3:52:97:
         a8:a2:4b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----