Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7C99E2E8C6A11F1BD0F6BAFCE1D38B0.roa
File:                     F7C99E2E8C6A11F1BD0F6BAFCE1D38B0.roa (raw, json)
Hash identifier:          w6pBjMk4IQ3JpYtxw2E6G34rbwL1LlTILh1VnmkuQxw=
Subject key identifier:   A2:A0:7A:30:4D:8C:17:A0:56:3A:E5:2C:EC:74:1C:28:3F:04:8D:1C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C8D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7C99E2E8C6A11F1BD0F6BAFCE1D38B0.roa
Signing time:             Thu 30 Jul 2026 23:04:08 +0000
ROA not before:           Thu 30 Jul 2026 23:04:04 +0000
ROA not after:            Tue 08 Sep 2026 23:04:04 +0000
asID:                     44477
IP address blocks:        156.253.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 26 Aug 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116944 (0x1c8d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 30 23:04:04 2026 GMT
            Not After : Sep  8 23:04:04 2026 GMT
        Subject: CN=6a6bd868-1520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:54:9c:88:f3:6b:a7:58:12:07:c6:cd:cb:f1:
                    c1:01:5c:2c:dc:42:da:15:f5:d6:2a:55:b8:2f:63:
                    58:67:12:f4:ed:4e:40:62:65:93:ce:13:d4:69:12:
                    91:f8:43:61:68:05:d5:70:71:45:c6:71:d1:e7:7d:
                    88:8f:7c:6d:99:6e:c6:8a:71:66:fe:17:4b:66:a1:
                    8f:e0:4f:13:1f:bc:ba:3b:25:21:1b:e1:81:9b:33:
                    14:5d:ee:cd:54:77:4b:27:89:6d:eb:c5:4f:27:6f:
                    d8:eb:8f:f3:03:bc:84:26:68:54:0f:1f:41:fd:c4:
                    b5:6d:78:d7:de:dd:89:f2:26:69:38:98:c8:16:8b:
                    90:2b:7d:54:f5:a8:7b:24:9d:a5:71:75:dd:23:a5:
                    94:77:da:7e:66:1f:31:82:08:1c:89:de:41:a5:85:
                    d4:95:8a:f8:8d:b4:da:ce:ad:9e:c3:55:d4:a9:e4:
                    a3:a0:45:95:33:b0:61:0a:09:41:18:6b:26:32:68:
                    e1:52:b0:5a:aa:9d:6d:85:30:9f:d7:b9:77:e8:83:
                    2d:68:a5:25:7e:09:32:48:1c:b2:94:b5:7d:41:0c:
                    32:5f:8b:4a:a7:64:5e:24:c0:ac:f4:9d:16:70:a8:
                    0d:35:bf:16:67:70:00:50:f8:fd:f2:74:92:bd:ef:
                    cb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A0:7A:30:4D:8C:17:A0:56:3A:E5:2C:EC:74:1C:28:3F:04:8D:1C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F7C99E2E8C6A11F1BD0F6BAFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.253.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:8b:cd:be:e1:64:ad:2d:86:29:f9:db:75:01:0d:12:c6:e0:
         bc:ac:5c:ed:77:3c:f6:2f:10:42:7e:1a:6a:27:66:0d:a8:11:
         06:98:a2:31:50:25:1a:4e:52:86:a2:e4:fa:27:2f:74:45:af:
         b0:24:00:ec:dc:21:2f:36:1d:03:81:6d:06:93:d7:7f:8d:35:
         68:c2:ed:48:6d:87:99:25:fa:05:d4:2e:e8:49:7b:a5:89:d0:
         08:61:2c:f2:66:9e:bc:f9:86:02:6b:1f:83:2c:56:5d:00:8d:
         ec:dc:36:53:c7:1c:0d:70:99:6d:e1:f7:9f:02:43:ee:14:6c:
         ee:91:6b:3e:e9:41:a8:bd:28:99:30:3b:2a:af:25:dd:e8:ca:
         dd:d5:b4:ec:a3:56:28:10:35:b9:86:cd:88:1e:9a:a5:75:0f:
         36:a3:3e:0d:f4:5d:57:f6:0a:83:cd:30:9f:c0:27:d8:15:d5:
         12:db:0a:e3:ea:03:64:e8:bf:4b:54:85:d7:74:16:ea:70:0b:
         68:ee:20:21:1c:a8:94:bf:83:77:ac:30:cc:2a:cc:14:f7:c2:
         9d:72:1f:f8:59:ad:78:ad:ca:55:36:2c:28:76:90:09:b3:49:
         f6:c3:ee:d1:1a:b3:db:81:39:32:28:a3:cc:ee:fe:47:0c:21:
         56:8e:f8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----