Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63CA75E2B59911F191C8A3C6CE1D38B0.roa
File:                     63CA75E2B59911F191C8A3C6CE1D38B0.roa (raw, json)
Hash identifier:          0r1KtZVrZBh9gO0l0mP6xulMD4UK4p1E3cZlgEUyNfU=
Subject key identifier:   E3:3C:20:68:4C:2E:0F:5D:70:FB:4C:42:41:4D:97:D1:47:86:07:A5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D782
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63CA75E2B59911F191C8A3C6CE1D38B0.roa
Signing time:             Mon 21 Sep 2026 08:49:44 +0000
ROA not before:           Mon 21 Sep 2026 08:49:40 +0000
ROA not after:            Sun 08 Nov 2026 08:49:40 +0000
asID:                     21859
IP address blocks:        156.252.4.0/24 maxlen: 24
                          156.252.29.0/24 maxlen: 24
                          156.252.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 12:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120706 (0x1d782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 21 08:49:40 2026 GMT
            Not After : Nov  8 08:49:40 2026 GMT
        Subject: CN=6ab0efa8-c120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:09:df:49:93:2e:72:8a:d6:bf:fa:70:af:
                    0d:e5:25:70:4c:8f:39:7f:91:74:26:11:d6:bf:ae:
                    f9:8e:bb:d9:d6:fc:8f:43:a9:0b:07:71:ee:7b:89:
                    18:07:da:7f:da:2d:ac:c7:3c:f0:a5:7c:d9:1a:eb:
                    f9:dd:dc:69:df:09:1c:9f:24:86:3d:dc:2e:e1:7f:
                    0a:08:83:13:82:39:70:d0:d6:48:fd:91:ad:90:4a:
                    75:05:ce:f5:b5:6a:5c:fc:84:18:b5:30:45:01:a2:
                    eb:b9:08:f9:a7:08:65:06:37:b1:66:da:84:02:c0:
                    4d:7f:59:83:5d:61:52:15:44:d8:6b:1f:7f:8c:dc:
                    f5:bd:5a:77:09:13:f4:ab:3d:ed:33:e9:54:aa:c9:
                    d8:d3:a5:d0:da:fa:df:09:76:11:b1:c4:0b:8b:59:
                    9f:21:52:fb:51:ef:57:19:fb:d1:ef:d4:14:f8:ef:
                    67:e1:b1:fa:a1:37:9b:49:30:c0:15:06:c9:d8:2f:
                    65:62:88:92:52:39:1a:63:68:56:44:2d:d5:b6:81:
                    9d:e3:4b:ae:75:5f:68:c9:4a:d3:23:c9:66:eb:59:
                    67:10:59:64:b7:46:81:54:1b:6f:23:1a:dc:a9:98:
                    a8:68:01:a3:b6:ce:5c:f1:9a:25:d5:5b:95:98:94:
                    ca:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3C:20:68:4C:2E:0F:5D:70:FB:4C:42:41:4D:97:D1:47:86:07:A5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63CA75E2B59911F191C8A3C6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.252.4.0/24
                  156.252.29.0/24
                  156.252.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:b7:65:f0:14:a4:89:0b:44:f1:07:8b:d6:29:15:84:8c:42:
         9e:ef:14:f3:0a:72:34:0b:19:5c:6b:a6:d8:39:08:d7:c0:ee:
         cb:da:24:66:cc:22:28:0b:45:ef:6b:c8:28:b0:d3:6f:86:8a:
         01:40:aa:f2:e3:7b:6e:25:9d:44:c2:23:23:03:82:2b:57:df:
         9b:53:6f:8c:21:3f:a3:95:ab:62:7c:c6:13:19:c2:d2:d0:2b:
         9d:08:2e:05:e6:d9:c5:37:c9:94:6d:aa:fc:b8:5e:e4:a1:b4:
         05:9b:d4:c0:02:d9:fc:f6:fa:cb:99:f3:27:10:a9:a4:9a:1d:
         19:e4:30:12:dc:c0:41:74:22:c4:88:84:45:de:51:ed:ff:ec:
         af:57:fd:b7:0c:f5:58:3a:4b:7d:b6:58:7e:c4:65:3d:3c:a7:
         b3:a0:1f:0a:a2:03:1d:7b:07:f5:4b:ee:cc:f6:46:aa:d9:25:
         53:9a:14:a6:bc:8e:0b:06:b0:aa:54:14:de:eb:08:a9:04:23:
         e2:5b:30:53:df:b6:d0:00:cd:6f:d1:ed:3d:b3:59:38:98:bc:
         5a:49:b3:6a:ec:38:ea:e7:f3:b8:6c:35:b7:09:82:60:89:99:
         65:1e:18:98:9d:3a:f6:72:2c:83:db:ee:40:50:87:cd:57:69:
         ed:19:d0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----