Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBDB5D9EC85F11F1A4A6E1E1CE1D38B0.roa
File:                     CBDB5D9EC85F11F1A4A6E1E1CE1D38B0.roa (raw, json)
Hash identifier:          b5Ffz/zkrS2hP2wShCNnl4yFPti+ORoF7U+Ggpg6yW0=
Subject key identifier:   55:AF:13:37:1B:FE:B6:55:04:61:63:D4:F1:19:EF:EA:23:DA:2E:7B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DD60
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBDB5D9EC85F11F1A4A6E1E1CE1D38B0.roa
Signing time:             Thu 15 Oct 2026 06:15:20 +0000
ROA not before:           Thu 15 Oct 2026 06:15:16 +0000
ROA not after:            Sun 14 Oct 2029 06:15:16 +0000
asID:                     17561
IP address blocks:        156.236.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122208 (0x1dd60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 15 06:15:16 2026 GMT
            Not After : Oct 14 06:15:16 2029 GMT
        Subject: CN=6ad06f77-64db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:21:7f:b7:35:6f:4f:83:01:33:3e:ac:6b:e2:
                    cb:5b:02:9b:e6:a3:7b:28:0e:cc:cd:bf:24:13:07:
                    fd:2c:25:26:ba:21:0e:1c:f7:36:8f:66:4a:17:e5:
                    c2:9a:bd:03:34:02:39:22:6e:a8:f8:99:c8:4c:d0:
                    b9:37:36:38:f2:07:da:5b:fa:be:72:4c:33:93:5c:
                    22:eb:a3:5d:b6:c3:5a:f7:86:45:e2:a7:8d:c5:04:
                    b7:ec:d4:8c:36:c5:61:a8:6f:b3:1e:73:a1:8c:de:
                    9d:7f:a8:11:58:b4:83:2e:02:c9:d8:58:7f:8f:e8:
                    4b:86:8b:97:91:69:76:7e:17:ac:5d:19:9e:e5:21:
                    f2:ca:f3:5f:5d:ae:b0:07:28:1d:ee:aa:d6:e9:c1:
                    6e:a4:32:59:70:91:9f:27:f4:35:74:31:a1:18:10:
                    20:52:11:74:2b:64:7a:6f:40:69:d3:8c:ff:5f:17:
                    a8:43:d2:f6:d0:24:92:ef:2a:7a:5a:37:2d:73:16:
                    78:c8:c5:10:0a:69:4b:d2:42:a5:74:8e:15:7a:24:
                    a9:f5:16:2b:70:bc:f3:77:f0:8e:bf:76:f9:3f:89:
                    5a:7e:e2:18:a3:ad:06:5f:cc:2f:13:86:74:08:15:
                    55:00:3d:97:95:f2:81:ac:d9:8d:a0:7a:e0:a3:40:
                    f0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AF:13:37:1B:FE:B6:55:04:61:63:D4:F1:19:EF:EA:23:DA:2E:7B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBDB5D9EC85F11F1A4A6E1E1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:f7:10:0f:ea:6b:91:ef:38:e9:f8:e6:1f:87:e3:05:2e:7f:
         ae:0a:1c:f0:50:9e:69:bb:e2:dd:a4:aa:75:50:d7:2b:fc:be:
         22:a6:16:3e:ac:25:76:54:44:52:80:c6:11:25:c2:7f:c8:6a:
         00:95:65:7b:32:62:51:ae:43:38:97:8f:a7:89:32:ec:cd:55:
         d4:f3:1d:01:da:7e:aa:40:32:1a:1c:b3:02:3b:18:b0:2b:66:
         d0:d8:d6:d3:f8:3f:de:6d:d5:be:b3:dc:b4:de:ba:26:ba:5e:
         21:48:bc:8d:50:18:09:f2:d2:28:a3:67:7b:e6:ed:e6:5b:bc:
         fd:3f:fe:39:30:78:21:60:a4:4d:f6:eb:3b:9d:31:2c:55:83:
         ec:51:91:ef:aa:42:46:57:2d:cf:1d:77:63:31:2a:1e:ca:11:
         42:f5:63:3c:8f:28:c0:5d:f0:52:c9:93:16:2f:46:d9:29:1d:
         21:02:32:06:75:ac:10:19:53:5e:00:dd:69:4c:8c:80:64:8c:
         2a:d1:d8:47:36:22:af:1c:e6:59:f1:f1:94:10:55:02:bc:eb:
         1f:3d:06:d6:8a:34:77:33:cd:17:59:79:76:85:eb:f1:69:41:
         8e:f3:6b:45:f7:47:7b:74:39:13:4a:33:21:96:89:4a:00:51:
         0c:f3:e4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----