Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF925238C15911F1888795F6CE1D38B0.roa
File:                     CF925238C15911F1888795F6CE1D38B0.roa (raw, json)
Hash identifier:          6QrrbfncFR0XRMf/XuoIJiQGf1s3pXhKyVGcOAhXlmY=
Subject key identifier:   7C:02:F4:18:A4:32:E5:2A:BA:59:D4:E1:6A:48:DC:D5:01:20:C0:72
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DB5A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF925238C15911F1888795F6CE1D38B0.roa
Signing time:             Tue 06 Oct 2026 07:44:51 +0000
ROA not before:           Tue 06 Oct 2026 07:44:47 +0000
ROA not after:            Mon 09 Nov 2026 07:44:47 +0000
asID:                     206283
IP address blocks:        156.238.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121690 (0x1db5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  6 07:44:47 2026 GMT
            Not After : Nov  9 07:44:47 2026 GMT
        Subject: CN=6ac4a6f3-e173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:15:cb:95:14:29:04:7a:a8:fb:1b:8b:bc:62:
                    b8:9b:43:4a:a1:6e:6c:76:2c:82:fe:38:b7:d1:2e:
                    8a:97:e8:76:b0:c2:58:cf:4b:f6:f6:0b:74:33:c6:
                    93:0e:5d:3a:ae:46:23:0e:44:e6:73:7b:cb:b0:65:
                    98:4e:fa:46:a9:0e:83:90:a0:79:6d:4d:b6:e8:79:
                    6c:45:70:ef:f6:5f:13:ad:0c:f2:bd:97:b6:9a:0d:
                    70:c7:89:4a:15:b6:57:71:96:92:3f:c7:0b:c8:2c:
                    bd:40:6f:d8:a8:42:6b:41:24:31:2e:2c:d3:1c:ad:
                    e4:e7:30:f2:79:41:6c:49:a3:81:48:80:34:20:94:
                    5e:5f:e4:f8:48:0e:61:e3:89:a0:8d:f0:07:92:f4:
                    09:fd:4e:49:85:8a:14:0b:6e:51:44:c7:40:5a:d2:
                    b9:fa:b6:19:90:f7:11:59:71:07:81:c1:0e:63:c9:
                    b8:d7:12:1a:d9:75:a0:41:3d:18:1a:15:f3:d0:23:
                    93:e4:2a:24:d6:59:ce:e2:93:5e:b6:15:f9:a3:0a:
                    3b:3a:09:23:8b:0c:3c:e5:2e:48:39:37:39:9d:a5:
                    b0:a5:11:89:20:4a:b9:da:be:e0:4f:5e:0a:74:3a:
                    53:f6:02:f8:00:8b:3a:f2:c7:f7:61:e8:9b:05:0d:
                    6d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:02:F4:18:A4:32:E5:2A:BA:59:D4:E1:6A:48:DC:D5:01:20:C0:72
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF925238C15911F1888795F6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:69:be:8c:0d:7f:d1:dc:26:2b:e0:d2:a1:5a:d5:5d:f7:e2:
         46:15:87:44:0e:db:56:68:3f:8b:b6:3e:19:05:9f:bf:d0:3e:
         80:84:14:82:4d:57:49:b5:b5:02:9c:6e:34:f4:ab:d1:0e:04:
         68:db:7b:44:a4:ce:bd:0c:bd:94:f4:64:27:fa:11:26:49:a6:
         dc:ef:17:be:78:97:29:87:34:06:b1:f1:6e:5e:e5:3b:af:3d:
         8e:99:a6:77:3d:a7:84:90:e3:a6:cf:8e:fd:14:20:ef:2d:80:
         2a:f9:82:1d:d7:17:1c:a5:db:08:cb:fc:79:3e:4e:14:cb:fb:
         7d:31:df:a7:d3:64:67:5a:cb:5d:1b:ab:60:4f:45:fb:30:61:
         ea:54:61:4b:5c:c3:74:20:05:bc:0f:81:5a:bc:97:86:e9:75:
         98:8a:c9:a2:a1:7a:b7:66:58:04:ff:93:63:5a:2d:67:50:a4:
         ad:39:25:97:64:78:ec:0d:73:7c:99:08:d0:79:62:91:75:07:
         b4:3c:46:73:e6:6d:ed:71:58:96:e6:8d:36:58:53:64:97:dd:
         10:01:f3:cd:c3:79:8a:31:0b:c3:32:53:03:00:8f:3b:2d:f9:
         ab:63:18:6a:5f:fc:80:37:42:d2:5d:d9:4e:f3:63:54:5c:eb:
         7e:e5:47:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----