Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17D72296B27111F199666FF1CE1D38B0.roa
File:                     17D72296B27111F199666FF1CE1D38B0.roa (raw, json)
Hash identifier:          JIeSLkH/AemebS8XbcPVQGjRP/3twRIwPFJH0xwPLG4=
Subject key identifier:   70:3C:B0:A0:BC:1A:B1:43:C3:06:C7:ED:26:54:27:45:24:6F:67:0E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D6C0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17D72296B27111F199666FF1CE1D38B0.roa
Signing time:             Thu 17 Sep 2026 08:23:43 +0000
ROA not before:           Thu 17 Sep 2026 08:23:39 +0000
ROA not after:            Thu 22 Oct 2026 08:23:39 +0000
asID:                     17497
IP address blocks:        156.255.48.0/22 maxlen: 24
                          156.255.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120512 (0x1d6c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 17 08:23:39 2026 GMT
            Not After : Oct 22 08:23:39 2026 GMT
        Subject: CN=6aaba38f-1b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2c:ec:97:64:10:8b:8a:5f:25:da:f7:60:1c:
                    e9:02:a9:cd:88:00:72:a5:11:d0:3d:b7:46:8b:8a:
                    d2:25:b4:58:83:dc:77:ae:22:e8:69:c4:44:0f:64:
                    3b:f3:06:45:c6:10:ea:4a:14:e6:65:43:6c:92:97:
                    83:28:db:43:a7:2f:a5:e0:7c:ab:fb:f3:50:d1:3d:
                    12:f6:54:98:6c:7c:11:93:6b:e2:78:87:9d:d2:dd:
                    be:7b:0a:36:53:d6:50:c2:d9:c3:8c:c8:31:39:ca:
                    9d:20:b1:79:d9:98:57:3f:36:8c:3c:5f:65:cc:81:
                    77:fe:10:16:fe:26:a2:db:5a:29:d4:b2:e6:f9:1a:
                    8d:64:2b:d3:44:4f:08:05:fa:58:2c:4b:2c:81:02:
                    14:1f:3a:a3:15:08:aa:7b:bd:67:0c:50:a4:a1:60:
                    d8:82:fc:12:6a:ac:15:d2:9e:68:2b:44:c6:0d:ee:
                    66:fe:a2:94:5d:68:bb:80:70:52:61:14:7b:86:a2:
                    41:e9:99:73:dd:29:c3:37:69:10:58:16:18:d8:0b:
                    1f:1f:99:6e:21:88:8a:61:b4:fe:59:54:37:39:5b:
                    ef:35:e9:d7:20:21:aa:a1:97:d9:04:e8:45:6c:bf:
                    17:af:e7:d4:25:e8:d9:ce:74:36:6a:95:0c:f8:47:
                    f1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3C:B0:A0:BC:1A:B1:43:C3:06:C7:ED:26:54:27:45:24:6F:67:0E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17D72296B27111F199666FF1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.255.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         48:cd:97:1e:ff:c3:57:d5:0b:cc:91:50:84:58:1e:5d:68:fd:
         b0:d8:f6:63:ab:45:cb:da:f4:6f:b0:64:ad:b7:65:c6:f3:cc:
         45:08:e3:01:8c:c8:3e:84:f0:f2:02:76:7e:7a:05:b8:5b:c2:
         33:94:fd:25:ff:88:1e:26:5d:8b:08:08:d0:5b:73:92:90:f8:
         1e:f0:57:e5:54:5c:ce:4f:82:8c:eb:09:86:08:cc:8a:03:f4:
         57:75:67:3a:d3:96:a0:d9:78:48:13:2b:2e:4e:35:f2:c0:9c:
         21:d3:fa:f9:cf:5a:92:eb:75:f9:4d:59:82:ea:35:09:42:88:
         ae:24:8a:d3:dd:c6:c8:6e:f4:1c:67:c8:78:7f:d3:9c:f9:96:
         a7:f2:43:8b:06:bf:f1:c5:2d:3c:00:7e:c7:31:2a:86:4c:24:
         6c:83:e0:a3:35:2a:54:03:af:bd:8a:b9:bb:61:e9:a7:b4:61:
         45:b5:b8:df:82:a3:f7:c4:8c:e2:75:84:9a:3e:58:98:c0:68:
         dd:2a:e5:2b:bd:da:cd:ea:3e:cc:9d:d2:dd:ff:f6:11:93:c9:
         5d:db:12:ab:aa:0d:a4:0f:13:6c:91:82:de:14:d2:86:b3:64:
         ee:71:04:2a:c7:b0:70:18:8d:50:1d:3d:32:5e:68:c5:21:69:
         39:95:94:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----