Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/505DD410B0E211F18B27DF03CF1D38B0.roa
File:                     505DD410B0E211F18B27DF03CF1D38B0.roa (raw, json)
Hash identifier:          ED4OHIGp/phiMxm+Kfw1es+igLQbhYbYE5uno16HdCw=
Subject key identifier:   11:50:85:29:51:3C:54:B4:83:F8:C1:B9:B3:4E:40:2E:1A:EA:5A:A2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D63B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/505DD410B0E211F18B27DF03CF1D38B0.roa
Signing time:             Tue 15 Sep 2026 08:49:09 +0000
ROA not before:           Tue 15 Sep 2026 08:49:04 +0000
ROA not after:            Sat 24 Oct 2026 08:49:04 +0000
asID:                     32043
IP address blocks:        156.230.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120379 (0x1d63b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 08:49:04 2026 GMT
            Not After : Oct 24 08:49:04 2026 GMT
        Subject: CN=6aa90684-d5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1f:b3:e9:b6:4d:9b:3d:d7:3f:c9:53:8b:80:
                    db:dd:b2:89:14:7b:e4:72:b2:7e:d8:29:f4:62:66:
                    c7:76:68:60:d6:e8:dc:9e:6d:af:14:77:1a:82:b2:
                    f4:eb:0a:d9:2b:97:66:8a:80:8a:d7:a6:27:ce:62:
                    0b:1c:76:67:cd:52:b6:f1:2b:a9:55:3a:a6:f5:04:
                    f6:54:20:b2:8a:72:a7:b4:2f:66:25:e3:ab:19:c6:
                    ed:e0:84:29:3c:19:8e:06:f5:11:f0:39:0f:8a:90:
                    4a:24:18:fc:55:08:82:30:8a:74:f8:fa:40:bd:c7:
                    75:88:c0:da:e5:bd:01:f3:8c:07:f2:f7:72:ed:01:
                    93:4c:72:8b:f4:89:b5:df:05:66:fb:10:a6:17:3c:
                    89:eb:5f:79:52:a0:86:55:d2:05:bc:36:7f:cf:9c:
                    0a:10:f4:e4:0e:e5:1c:ff:c8:d9:8d:2c:ae:c8:ca:
                    5a:6c:cf:87:66:2c:18:e1:92:15:6c:2c:f8:db:d3:
                    99:5e:6d:92:53:78:6f:8e:dc:2a:23:4f:69:34:54:
                    54:48:3e:e2:a7:fc:c5:7c:9a:05:cd:31:52:0a:c6:
                    20:0f:5b:8f:bb:8c:eb:bb:ce:fe:c4:e5:22:a5:bc:
                    6f:0d:78:34:79:d9:40:61:f2:cb:47:50:6a:ab:4f:
                    04:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:50:85:29:51:3C:54:B4:83:F8:C1:B9:B3:4E:40:2E:1A:EA:5A:A2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/505DD410B0E211F18B27DF03CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.230.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:e1:67:48:91:b8:7d:93:b4:44:db:27:ed:6c:6f:5f:db:a6:
         98:26:5a:27:f8:69:9f:d3:45:01:1c:39:35:4e:44:71:e8:81:
         45:24:5b:1d:cb:42:fc:6f:2c:2b:b0:50:45:cf:35:52:a3:bc:
         25:a6:28:ca:f8:cf:10:90:b4:7b:2e:9f:8e:2b:fc:db:48:05:
         d4:c0:25:fc:de:e1:14:43:98:20:7d:b2:41:d7:a3:94:01:00:
         b4:a0:03:2e:e3:8b:c6:f8:b1:95:c8:a7:b0:35:20:cf:bf:c9:
         1e:26:18:9f:f4:1e:62:a2:65:54:b3:62:ba:ba:3a:f5:0a:c6:
         38:57:c3:cf:77:04:42:0a:77:53:fc:71:bd:da:37:49:d0:3d:
         be:ac:9d:8b:38:c8:9e:ea:07:91:e1:93:aa:98:1f:05:e8:b5:
         85:6b:e5:86:f5:75:68:bd:2b:6b:11:4c:d6:84:f4:a7:67:3e:
         7f:76:02:49:e5:ca:fe:3e:0f:22:7c:5c:b5:60:86:95:4b:f7:
         fb:e5:1c:1b:8f:96:f1:a9:19:bb:fd:73:7a:7d:9a:1d:1c:1d:
         21:6b:6a:85:54:1a:2a:56:a1:4e:ae:9b:1b:7b:bb:9c:12:a1:
         69:f5:cf:83:5c:c5:7e:2b:bc:b0:f8:26:03:ac:bb:aa:03:1d:
         17:de:f0:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----