Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BA4BED6B4C211F19292A5CECE1D38B0.roa
File:                     5BA4BED6B4C211F19292A5CECE1D38B0.roa (raw, json)
Hash identifier:          t+LPDvQ3DQSzCDuwjYyIRxHnvgiQ57OolpDeEbvHsew=
Subject key identifier:   5A:7F:83:77:CC:8B:77:16:0B:9D:75:36:48:E8:49:B6:DC:3D:5E:A4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D70C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BA4BED6B4C211F19292A5CECE1D38B0.roa
Signing time:             Sun 20 Sep 2026 07:10:28 +0000
ROA not before:           Sun 20 Sep 2026 07:10:24 +0000
ROA not after:            Tue 20 Oct 2026 07:10:24 +0000
asID:                     153706
IP address blocks:        156.254.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120588 (0x1d70c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 20 07:10:24 2026 GMT
            Not After : Oct 20 07:10:24 2026 GMT
        Subject: CN=6aaf86e4-5194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a8:8b:97:aa:30:be:37:a8:81:eb:05:08:a3:
                    a0:43:aa:fb:19:08:c6:6b:e0:0a:91:55:96:54:50:
                    f2:62:15:13:53:eb:1f:ff:54:d2:3f:69:c0:e3:a4:
                    63:82:22:fa:59:ba:61:ae:7e:be:f1:67:f0:92:4c:
                    6a:51:3c:1c:ac:a5:7f:72:bc:f3:6e:50:1d:c6:87:
                    9c:8b:36:7f:45:71:ae:e6:58:1d:4a:51:b4:87:dd:
                    cf:1f:ee:0f:f3:86:9c:43:53:15:94:32:09:5a:e7:
                    c5:46:75:7d:be:69:d4:07:06:6b:e8:b0:16:7a:1e:
                    a0:da:65:c9:2f:7e:a9:85:5f:ca:5d:db:6f:89:3e:
                    99:b4:82:04:5b:0b:cb:b8:a6:03:02:ef:2f:ce:0b:
                    da:9c:7f:99:c4:8d:05:67:73:eb:9b:b1:83:37:11:
                    e4:47:45:bb:6a:82:c4:5f:33:17:49:40:ae:fb:ed:
                    4b:c8:6c:4b:02:52:97:98:dc:fc:3c:50:80:f7:4e:
                    70:b5:0a:3a:a0:c5:1a:53:58:08:85:a2:ab:98:7c:
                    d7:92:1b:33:45:c9:0b:b5:92:e1:6d:f4:a6:77:d9:
                    3e:d3:96:e4:45:81:c6:1a:c6:bb:1b:38:45:aa:d8:
                    7a:12:fc:d3:04:ac:55:a7:c9:22:64:22:4f:3a:7d:
                    08:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7F:83:77:CC:8B:77:16:0B:9D:75:36:48:E8:49:B6:DC:3D:5E:A4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BA4BED6B4C211F19292A5CECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:b2:19:55:d2:5e:b8:bd:c1:d8:6e:40:a2:2b:cb:dd:ee:8c:
         dc:93:36:18:36:8a:40:38:08:d7:6e:76:c2:75:5f:97:9f:e9:
         dd:e1:04:34:b5:0f:28:6b:98:84:7f:46:11:93:5f:50:e3:0f:
         f1:27:7b:41:52:d5:41:b5:be:64:ff:bf:fe:21:6f:a8:8e:2d:
         d2:91:ea:11:99:71:5e:50:a3:d1:ec:9d:9f:33:82:1b:61:ec:
         e9:48:e5:ed:d2:b6:2d:93:f6:12:24:83:10:bb:3a:c6:42:5b:
         c0:33:bd:1b:dc:fe:be:77:96:be:f8:58:41:ba:e1:3f:5c:fa:
         ee:25:91:ef:f3:43:0d:83:3b:38:38:7e:21:51:ea:7e:83:62:
         17:0a:5d:cd:0e:7f:81:c6:28:65:95:95:76:3c:ab:ff:68:ec:
         68:e5:10:5f:e4:63:d6:88:3c:bc:43:4c:55:88:03:9c:a2:64:
         21:f0:29:18:91:dd:7b:b4:d7:d4:9e:f1:0c:8e:2a:08:83:96:
         f6:7c:81:ea:1d:ae:3f:23:36:47:40:75:9f:92:81:c9:f0:05:
         45:97:ba:b9:77:69:d0:01:e1:7d:6e:5d:f1:2b:17:0e:aa:38:
         37:a5:64:de:e2:9c:5a:00:23:13:d2:a0:0b:2d:c3:4f:55:f1:
         82:0e:92:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----