Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FFD4124C34D11F18996B4B6CE1D38B0.roa
File:                     2FFD4124C34D11F18996B4B6CE1D38B0.roa (raw, json)
Hash identifier:          NT6WVo8oeLc6SdN8m07ONRIIbWYEmw2bSMZrLHAuGhQ=
Subject key identifier:   15:9B:8A:AF:03:BB:4A:23:2B:89:5E:D1:DF:E8:E5:D0:9C:32:BA:B2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DBE4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FFD4124C34D11F18996B4B6CE1D38B0.roa
Signing time:             Thu 08 Oct 2026 19:19:31 +0000
ROA not before:           Thu 08 Oct 2026 19:19:26 +0000
ROA not after:            Sat 14 Nov 2026 19:19:26 +0000
asID:                     264844
IP address blocks:        156.232.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121828 (0x1dbe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  8 19:19:26 2026 GMT
            Not After : Nov 14 19:19:26 2026 GMT
        Subject: CN=6ac7ecc3-9f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e2:2e:4d:58:67:80:9d:fa:1c:95:b5:02:d1:
                    c9:ff:97:7e:09:34:ec:0a:51:1a:24:f1:98:83:5f:
                    39:51:0c:13:06:c3:e7:00:7e:e3:d6:fa:de:25:51:
                    ae:5f:1a:de:5f:30:37:2a:a5:74:f1:0e:9a:27:79:
                    78:cd:16:f9:b4:41:52:55:fe:54:4a:e4:83:b9:0f:
                    7a:1a:1d:ac:3f:4f:49:94:f2:44:91:39:ed:61:59:
                    4d:94:b1:68:34:41:c7:32:ab:12:36:cf:c4:e0:7b:
                    5c:57:ce:2a:24:cc:40:e4:e0:e2:0b:5b:18:d9:f4:
                    b9:38:7e:f2:d8:12:da:be:4d:a3:74:3b:d6:ff:5a:
                    aa:da:5c:02:90:13:b9:4a:41:5a:09:eb:e5:6d:31:
                    18:73:2c:9a:bb:42:c0:83:2d:c0:42:6c:31:d1:75:
                    5c:70:75:13:87:fc:7e:47:ca:2d:c1:fe:66:ec:f7:
                    e0:ea:77:96:28:54:7c:3b:14:84:46:37:b6:ee:15:
                    32:95:ed:30:7e:37:e8:4d:e3:21:d7:33:57:31:56:
                    de:5c:3b:eb:92:29:c0:a7:dd:b6:fb:82:19:66:91:
                    87:2d:6a:76:14:a7:3d:7e:94:b2:da:04:2e:54:56:
                    74:e0:8b:19:2f:8c:2b:89:e3:67:1f:79:50:0c:98:
                    52:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9B:8A:AF:03:BB:4A:23:2B:89:5E:D1:DF:E8:E5:D0:9C:32:BA:B2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2FFD4124C34D11F18996B4B6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.232.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:60:63:55:ec:99:71:f9:61:de:9c:a6:d1:4c:13:de:02:78:
         d9:d7:67:ec:5e:19:c4:26:07:d1:7e:b1:c6:be:13:c7:40:dc:
         0d:9a:d6:79:41:51:b5:ec:d8:00:23:60:0d:69:f4:af:99:f1:
         68:d3:08:04:0e:f6:b1:af:aa:67:a8:a8:9f:5f:a3:4a:c9:ff:
         93:4f:07:33:a6:07:df:84:4f:e1:cf:df:8f:1c:15:aa:dd:ca:
         ed:40:c3:74:62:18:2e:56:38:1c:68:79:cb:8b:08:52:45:e9:
         49:55:e8:bc:92:31:50:51:8f:2b:c8:04:b3:f5:59:b0:e5:3b:
         04:5e:60:ac:f0:94:0a:63:f4:cc:85:ea:f7:49:13:b5:67:54:
         c1:a2:b0:88:60:ae:1c:29:07:1a:98:60:12:bd:4d:11:e4:f9:
         d0:08:6b:08:dd:38:5a:47:46:c4:5d:23:ce:be:57:3a:66:21:
         ad:04:2e:70:fa:6f:94:cf:da:2c:a8:40:4b:d9:51:a5:05:61:
         7c:9d:30:d4:0d:02:91:58:3b:0d:60:ef:5a:f9:3f:68:28:94:
         be:42:3b:4b:de:a6:54:e3:bb:bb:39:28:ff:62:9a:dc:02:ed:
         a0:5f:e8:75:58:b4:0f:95:c7:f8:db:cc:bf:9f:89:da:3b:05:
         11:3f:1a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----