Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC059AD8CA0211F18A02F50ACF1D38B0.roa
File:                     CC059AD8CA0211F18A02F50ACF1D38B0.roa (raw, json)
Hash identifier:          2Z/uBO2D13CasmS07f4CS+Uz0WhdXZtRPLivJsnkdtY=
Subject key identifier:   D6:57:5E:4B:28:17:FA:B8:83:19:EF:62:C9:67:28:C8:9E:C7:5F:BF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DE16
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC059AD8CA0211F18A02F50ACF1D38B0.roa
Signing time:             Sat 17 Oct 2026 08:14:39 +0000
ROA not before:           Sat 17 Oct 2026 08:14:34 +0000
ROA not after:            Sun 24 Oct 2027 08:14:34 +0000
asID:                     135386
IP address blocks:        156.249.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122390 (0x1de16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 17 08:14:34 2026 GMT
            Not After : Oct 24 08:14:34 2027 GMT
        Subject: CN=6ad32e6f-0b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:f5:10:99:ba:08:63:e3:1d:7a:8e:3e:2d:
                    5c:a3:90:b4:dd:0d:90:3b:07:9c:15:f2:4a:0e:3b:
                    5e:81:c5:f5:03:7f:38:81:85:1f:60:a6:ee:7a:10:
                    b7:ee:c4:49:93:a3:38:b1:af:88:07:13:86:48:78:
                    4b:90:a3:70:38:aa:e9:72:f2:18:53:d9:e8:6d:3b:
                    26:06:eb:59:26:a7:bd:86:13:e5:e8:fa:1e:b1:d8:
                    7a:6a:c9:0e:a5:7e:5e:49:32:b1:1b:af:65:84:99:
                    28:c1:11:44:1d:12:60:73:c9:dd:a0:be:3d:9f:94:
                    84:ac:b9:27:0e:97:4a:34:4d:57:7c:5f:c9:2f:ae:
                    6e:a5:eb:c5:ef:3b:0f:e1:6d:4e:a2:2d:10:fa:db:
                    93:f0:73:8a:c5:38:4b:9a:64:d7:d4:34:f1:5b:7c:
                    bb:26:33:a0:7f:d4:47:b3:fc:b8:96:09:7e:73:4e:
                    e5:93:d5:ea:e5:bb:c8:da:47:36:2e:93:0b:06:85:
                    08:16:94:09:64:8c:5e:61:07:43:7c:fc:97:65:9a:
                    36:82:7b:13:f9:70:6b:bc:9a:53:04:ea:3c:b5:2d:
                    b9:6e:bc:84:a2:0a:16:1a:e9:99:7b:59:4e:2e:af:
                    9c:98:3d:67:64:4e:f5:fc:3b:ca:76:53:39:b8:87:
                    f4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:57:5E:4B:28:17:FA:B8:83:19:EF:62:C9:67:28:C8:9E:C7:5F:BF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC059AD8CA0211F18A02F50ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.249.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:14:71:ad:b6:01:90:df:49:45:7c:33:ff:d5:7f:84:e8:5c:
         20:b5:38:b0:c1:50:24:91:bf:39:bc:5f:fd:87:ee:8e:1a:e6:
         89:6c:17:94:8d:c0:fc:1a:01:df:42:a3:5c:c2:b3:dd:54:80:
         d1:12:e2:52:85:37:90:10:04:4b:d5:c7:37:18:bc:c0:19:e3:
         f0:fb:d0:c7:b1:49:59:e0:9b:64:91:c1:ac:81:60:7f:2f:eb:
         5b:74:1e:16:8e:37:f3:6c:8e:be:10:01:eb:21:61:79:97:de:
         de:b2:ab:a9:fc:51:c3:7d:75:33:5c:fd:cb:0f:b7:5e:37:40:
         1c:84:f8:27:6a:8b:27:9c:37:b4:95:98:f7:f6:20:36:b0:ad:
         9a:d2:b8:9c:60:91:f6:69:30:09:37:dc:08:e3:aa:cf:08:4b:
         40:92:f5:65:8e:9f:0f:67:a8:45:b5:69:b1:ec:e3:0b:27:ef:
         0a:0a:d6:51:de:56:d5:ea:a1:db:5f:8a:23:9e:9b:24:34:28:
         11:20:ae:ee:9b:51:53:44:5b:28:fa:e4:b8:2d:c3:ee:70:82:
         a1:40:31:54:c4:52:f4:cf:10:71:2a:5a:93:b9:a6:9d:02:53:
         14:72:82:59:99:94:4b:05:c6:51:1e:d2:a8:96:46:a4:e2:79:
         be:f6:a5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----