Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F91A0E0CBF3311F1AFED5EEACE1D38B0.roa
File:                     F91A0E0CBF3311F1AFED5EEACE1D38B0.roa (raw, json)
Hash identifier:          OUgewNrOhX1d+dTRXXpTvt/HBoknyVsawyy4DgbjWio=
Subject key identifier:   59:03:77:56:07:D3:79:18:98:42:54:B1:0C:98:3D:84:8B:A6:53:50
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA8B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F91A0E0CBF3311F1AFED5EEACE1D38B0.roa
Signing time:             Sat 03 Oct 2026 14:08:57 +0000
ROA not before:           Sat 03 Oct 2026 14:08:53 +0000
ROA not after:            Sun 22 Nov 2026 14:08:53 +0000
asID:                     401701
IP address blocks:        156.225.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121483 (0x1da8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  3 14:08:53 2026 GMT
            Not After : Nov 22 14:08:53 2026 GMT
        Subject: CN=6ac10c79-8293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2b:dd:2a:41:7e:a7:01:9d:db:1a:3d:5b:8b:
                    f0:7f:07:e0:5e:b6:a6:ca:d6:ce:88:03:08:82:71:
                    a3:5a:f7:40:d5:8f:17:ce:26:ac:f5:27:61:9b:6e:
                    47:d5:50:af:17:97:00:6b:26:28:c8:00:1b:32:87:
                    07:4d:c6:5a:c6:b1:71:e9:4c:54:de:10:2b:ac:0e:
                    7a:6c:fb:53:8f:6f:77:a4:82:32:65:dd:c9:1e:e9:
                    27:1f:4f:3d:1d:92:3b:9c:bf:b1:6c:a9:39:c5:0f:
                    b8:cc:30:85:40:17:31:1a:ed:a9:ab:b1:7d:a9:c6:
                    a5:45:56:6c:a2:99:cc:75:16:63:35:ef:4a:85:74:
                    c2:d5:e3:0e:4c:35:1d:54:aa:bb:8b:5d:1b:e8:3b:
                    11:c8:82:e5:76:e7:08:fa:43:e1:85:a6:ca:fe:90:
                    9c:ed:f1:35:00:10:a6:6e:ff:77:31:be:32:84:3a:
                    09:d7:6b:36:aa:d8:23:3c:5d:1b:16:b5:87:c5:00:
                    e8:6a:13:85:42:05:9d:bd:9f:d5:ce:0b:05:6f:36:
                    02:be:fb:c3:7c:9e:85:12:a4:2e:82:8a:c0:f6:4d:
                    de:2a:f0:2b:f4:19:24:65:8d:16:9e:3b:d7:0d:31:
                    44:03:4d:47:dc:ff:87:07:58:8e:78:ef:46:69:27:
                    71:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:03:77:56:07:D3:79:18:98:42:54:B1:0C:98:3D:84:8B:A6:53:50
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F91A0E0CBF3311F1AFED5EEACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:be:ac:52:68:5a:75:e1:9a:3d:4b:de:7f:70:c6:56:5c:30:
         02:12:4b:61:92:ee:4f:f5:11:42:e0:2b:83:4b:be:00:9a:90:
         10:33:cd:d8:4a:1d:0d:68:e8:90:87:1e:28:9c:8f:3c:15:a4:
         a0:fb:7e:7f:37:a4:ff:96:c1:b8:b0:fb:46:65:ba:8c:48:cb:
         5d:33:5d:e6:10:ac:0b:fd:28:9c:2f:e1:39:aa:a5:0d:26:ce:
         01:f8:05:42:e3:71:fc:79:db:56:a3:68:ec:03:7b:9e:88:89:
         61:54:82:8f:11:b0:7c:27:f4:02:15:27:99:db:3e:4b:78:42:
         99:c2:91:06:01:a3:78:fb:c9:77:0e:f4:d3:50:eb:42:fd:ba:
         c5:ac:da:a0:68:c5:4e:ce:e6:bb:92:a3:43:ce:19:07:f0:62:
         83:b9:e3:2c:55:ca:e0:b5:c9:55:95:74:bf:49:07:9c:fc:5b:
         3c:bd:0f:bb:b8:e2:e0:50:6b:dd:55:54:48:94:51:a9:bd:45:
         98:95:bc:74:ce:c8:b4:04:a9:b5:10:1e:cc:a6:3a:9e:37:51:
         c3:e3:f2:c9:59:46:04:5b:1a:f3:f9:9b:af:47:38:5b:88:b7:
         eb:77:f6:8d:f6:c4:12:f3:e6:f4:f3:70:fc:c9:7a:c1:aa:5a:
         f4:f2:a4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----