Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE6518C4A30811F19B6DE6A0CE1D38B0.roa
File:                     CE6518C4A30811F19B6DE6A0CE1D38B0.roa (raw, json)
Hash identifier:          fAJopA0G96i/DdIcI+IglLH8Lqpa+6xz5frldsz0gR0=
Subject key identifier:   20:63:72:46:88:46:01:3C:40:D5:B2:BE:25:CA:F3:F8:96:86:78:73
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D1C1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE6518C4A30811F19B6DE6A0CE1D38B0.roa
Signing time:             Fri 28 Aug 2026 17:49:25 +0000
ROA not before:           Fri 28 Aug 2026 17:49:20 +0000
ROA not after:            Tue 06 Oct 2026 17:49:20 +0000
asID:                     401696
IP address blocks:        156.238.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119233 (0x1d1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 28 17:49:20 2026 GMT
            Not After : Oct  6 17:49:20 2026 GMT
        Subject: CN=6a91ca24-d274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:98:90:91:9e:1b:4c:b2:16:c3:44:7c:c0:1e:
                    60:f5:90:29:a7:65:39:77:7d:9c:15:e5:89:8d:2f:
                    07:e5:6d:b8:b8:11:fd:d3:dd:f2:4d:95:1e:54:ea:
                    b3:42:d8:eb:86:3e:2b:fd:ba:87:54:94:bf:9a:1e:
                    7f:fb:9e:e4:eb:82:ca:89:c2:4f:b7:a0:e8:44:17:
                    3c:43:2a:bd:35:5d:f8:e1:b7:00:a5:09:bc:85:ad:
                    a1:7a:8b:43:7f:38:76:f1:89:51:d4:18:0f:b6:82:
                    3e:3b:57:3b:fe:78:59:8f:f5:c7:1f:17:56:85:39:
                    d8:97:73:48:b9:ac:05:74:1e:4a:3a:47:3a:bd:92:
                    fb:ad:04:d2:3f:4d:a4:15:7d:21:f0:a5:56:cb:c1:
                    7c:33:9a:7f:38:dc:5e:7f:58:5e:bf:47:02:f9:25:
                    71:38:a8:32:b6:dc:b4:b0:29:05:90:88:7c:7a:b4:
                    e9:f1:ba:fe:e7:cf:d4:95:da:f0:03:fb:34:d7:38:
                    64:6c:b5:c6:b1:3d:63:3f:cc:23:17:96:d3:77:61:
                    a3:ae:67:14:e1:1b:e1:1a:98:3b:e0:97:45:95:6c:
                    ac:b0:e4:13:73:ed:04:f7:b6:bc:81:c4:01:d8:8a:
                    92:15:e4:0f:fe:75:59:72:5a:92:e4:e8:41:50:27:
                    fa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:63:72:46:88:46:01:3C:40:D5:B2:BE:25:CA:F3:F8:96:86:78:73
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE6518C4A30811F19B6DE6A0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         14:b5:e8:8e:cc:93:f7:06:7f:23:16:ee:97:b4:5a:25:4f:5b:
         8d:33:0c:96:90:02:24:84:82:f3:e1:16:84:0b:ff:52:c3:2e:
         34:bd:62:41:4e:d8:90:1b:f7:a2:54:58:22:7a:de:0a:80:92:
         d0:d7:99:ee:91:83:36:e0:3d:98:62:3a:ba:00:52:fe:8a:6f:
         18:f6:a3:59:a1:bd:4e:c9:7c:dd:0e:41:8e:6f:85:8a:9c:0e:
         f2:9d:3b:ef:e5:9e:f7:bb:65:fb:23:bd:25:1f:b6:04:ef:92:
         62:a2:cd:0e:63:60:42:84:e5:c0:89:b0:24:8e:8c:71:e5:99:
         85:fc:58:af:87:65:85:98:9d:f1:57:a5:91:59:dd:a8:e3:d1:
         8c:5d:57:8e:f7:60:a8:76:49:c1:3c:26:88:e7:84:69:72:db:
         00:32:4b:c6:26:57:d4:2c:86:55:16:01:0d:64:90:98:c6:6a:
         ea:54:b3:0e:b2:a2:cb:cd:f6:31:27:c6:5c:68:ba:58:f0:f9:
         97:08:52:fa:a7:6c:f3:fe:23:7f:4e:94:d9:70:f4:0b:14:35:
         a2:8b:39:9b:75:29:df:5c:d7:ca:31:33:65:9c:76:1e:25:ca:
         19:b2:fb:c2:05:a1:c1:98:f9:da:9c:35:6f:8d:ad:51:43:74:
         77:65:c8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----