Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A557849CB4C111F1848288C8CE1D38B0.roa
File:                     A557849CB4C111F1848288C8CE1D38B0.roa (raw, json)
Hash identifier:          VIE164WjqXKco9lt27nsNAcmmladScR+95NLRR5feME=
Subject key identifier:   4E:F4:EC:E5:AC:1D:59:9E:B2:1C:F1:91:37:C6:AE:17:B4:F9:AF:7B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D70A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A557849CB4C111F1848288C8CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 07:05:22 +0000
ROA not before:           Sun 20 Sep 2026 07:05:18 +0000
ROA not after:            Tue 20 Oct 2026 07:05:18 +0000
asID:                     214432
IP address blocks:        156.254.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120586 (0x1d70a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 20 07:05:18 2026 GMT
            Not After : Oct 20 07:05:18 2026 GMT
        Subject: CN=6aaf85b2-8183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ed:fe:51:2c:eb:c2:ec:a0:38:a7:7d:dc:86:
                    a4:c2:3d:d5:2a:50:0f:e4:5f:0c:0f:92:d4:0c:23:
                    d9:54:14:0a:f1:60:6f:a6:3c:98:1d:87:27:66:ce:
                    43:67:a9:ee:d2:6b:eb:de:7b:5f:46:37:46:40:aa:
                    65:5c:24:f8:de:8d:b7:24:a9:48:da:78:77:27:2f:
                    fe:5b:fe:8a:91:fc:56:d2:fc:fc:e1:e0:41:3b:8f:
                    31:c7:c0:2d:cf:2e:79:9a:be:15:c7:95:b8:89:2c:
                    79:5d:8e:be:35:67:78:52:30:af:dd:47:ed:a1:cb:
                    db:c0:a6:cb:c7:9a:f2:1f:14:6c:b7:c4:ef:17:d4:
                    07:19:4a:5a:84:bd:ec:6d:1a:15:29:40:48:cd:f9:
                    7f:4f:1c:ea:c7:47:76:84:e3:5d:7a:11:8d:29:3f:
                    06:f3:30:1b:97:74:11:8d:d1:67:fd:35:00:a4:a2:
                    d7:1a:f0:69:42:40:f3:b0:30:74:b8:41:cf:c3:fb:
                    cf:81:58:78:14:19:08:fc:2c:13:9a:25:f6:a1:84:
                    a2:38:d8:e9:58:7d:83:8b:32:58:42:ed:8d:bd:ed:
                    08:d8:88:bb:82:72:51:71:25:3d:cf:dc:01:5f:dc:
                    f3:fc:35:19:12:ee:33:98:f9:a9:17:6b:e7:a0:84:
                    12:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F4:EC:E5:AC:1D:59:9E:B2:1C:F1:91:37:C6:AE:17:B4:F9:AF:7B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A557849CB4C111F1848288C8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:84:6c:a3:78:62:c3:3b:f1:b1:b7:fb:64:1c:6d:ce:7c:43:
         54:69:e7:68:6d:ef:20:db:87:c1:43:48:15:89:b8:6d:a0:b3:
         6a:c5:ef:43:2a:e0:bd:d8:8e:68:74:c0:b8:e7:bf:5e:41:3e:
         cf:20:62:f1:41:74:f6:c1:ac:0b:d9:27:1a:90:cb:59:ba:40:
         19:9c:80:d9:72:bc:6c:ff:7a:1a:13:09:86:4f:fa:46:a5:55:
         01:50:67:21:6e:c2:73:27:d8:b7:d6:85:9c:c9:9d:f6:df:67:
         36:b9:79:e9:d6:ed:a6:ea:b9:0f:87:aa:d8:d7:ab:27:aa:08:
         b0:67:e8:0b:4c:63:e3:9b:f9:f6:40:ff:c8:4a:e9:e3:30:8d:
         c5:f6:f5:bd:34:1c:eb:3f:17:e0:50:25:29:eb:e5:05:2b:22:
         fc:d9:8b:dc:7f:30:8a:fd:3f:22:d3:ed:0c:8c:b8:94:0e:58:
         08:77:d2:15:99:1d:cf:c3:67:df:cf:70:2a:99:8b:c7:b5:82:
         f9:c1:14:b4:33:f5:e7:f6:78:60:38:1f:46:37:d9:81:00:3f:
         dc:55:39:17:17:90:ba:c3:ee:bc:45:39:ed:51:46:cb:36:35:
         65:73:45:e8:dc:95:f0:90:a0:84:0d:bb:d5:e4:9d:d6:d7:33:
         69:77:e7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----