Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE3FE80EADB111F182D602B7CE1D38B0.roa
File:                     AE3FE80EADB111F182D602B7CE1D38B0.roa (raw, json)
Hash identifier:          ywDj1h7L1wRaHxkjcE52SGkrUry7vLeJ5pbEIju6xxs=
Subject key identifier:   99:62:53:48:B8:3D:86:16:26:43:E4:F2:6A:2F:D5:A4:B1:F0:8D:46
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D521
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE3FE80EADB111F182D602B7CE1D38B0.roa
Signing time:             Fri 11 Sep 2026 07:23:27 +0000
ROA not before:           Fri 11 Sep 2026 07:23:23 +0000
ROA not after:            Sat 10 Oct 2026 07:23:23 +0000
asID:                     61112
IP address blocks:        156.224.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120097 (0x1d521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 11 07:23:23 2026 GMT
            Not After : Oct 10 07:23:23 2026 GMT
        Subject: CN=6aa3ac6f-4d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fd:72:8d:db:b2:c7:79:e5:3d:d9:cb:cf:39:
                    64:b8:95:c4:a6:d2:13:45:67:20:06:39:21:a3:b8:
                    dc:70:59:25:fa:6e:76:a4:60:aa:76:5a:a0:2f:56:
                    1d:38:37:29:00:a0:ef:b1:b5:2c:5b:da:3c:38:80:
                    b4:e5:13:9c:1f:f2:d3:31:86:aa:2a:7e:5f:b8:17:
                    94:05:c0:33:04:12:ca:04:f8:39:0b:93:57:71:9b:
                    8d:d3:50:3c:2c:77:19:09:46:1e:02:ab:34:b0:f2:
                    7b:79:26:c4:5d:e4:ca:ed:54:f1:df:f8:11:f5:9d:
                    8b:d7:a7:3f:3c:b5:a7:a5:b5:b5:fa:dc:5f:0e:d6:
                    aa:37:4b:9e:6b:a3:09:c9:14:3a:a1:b2:19:0d:65:
                    03:08:e3:28:05:1e:63:d4:f5:24:e2:2e:2a:3a:5b:
                    7b:fa:98:d4:ed:a6:0b:1f:3a:67:c2:e6:a0:cf:42:
                    55:1a:15:0c:0c:d7:fb:bc:b9:60:9d:a4:fb:4c:52:
                    e6:07:ff:91:67:8f:4b:52:46:38:b9:7c:fd:11:fb:
                    f5:d7:ea:24:11:70:83:a8:a3:ec:d9:4c:64:1a:dd:
                    8b:78:05:85:d6:59:b5:85:e6:72:69:96:e6:19:67:
                    63:c6:1b:2c:dc:12:7b:55:69:24:99:f5:90:77:6a:
                    03:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:62:53:48:B8:3D:86:16:26:43:E4:F2:6A:2F:D5:A4:B1:F0:8D:46
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE3FE80EADB111F182D602B7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.224.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:ce:f0:ae:c1:8c:91:a7:72:33:f8:36:f2:45:1a:c5:93:b8:
         00:b4:27:a1:c5:a3:e3:3b:7c:f2:4d:11:f4:3c:2f:b2:72:c1:
         a1:06:20:c6:78:f1:54:3f:76:84:b8:be:65:bc:1c:54:ef:1d:
         6e:eb:1d:e7:e7:48:4a:04:7b:c5:fd:5d:34:31:73:22:72:39:
         ce:d4:76:6f:24:eb:b8:9a:c3:83:5e:bb:fd:80:5a:fb:e8:3a:
         fb:6a:4f:da:aa:c3:fb:c7:65:15:fd:c3:c4:0e:9b:52:05:5c:
         2e:7c:9a:be:ee:f3:92:d2:fa:e8:3e:6f:3b:8e:f5:d7:13:34:
         78:64:45:7b:ab:83:5e:cc:6c:d9:56:e0:ac:4e:7a:9d:9b:d3:
         13:93:20:9c:5d:b3:5d:02:96:8f:98:79:0a:b7:1d:b5:8b:7e:
         70:a2:6d:80:ac:32:93:13:db:01:7f:5b:c4:bd:a6:72:7c:04:
         90:a6:6d:23:7b:07:29:22:6a:77:46:48:85:fa:79:4d:59:98:
         4f:fd:03:25:fd:45:c2:dc:03:9e:8c:87:22:22:33:f2:6e:3a:
         d5:48:ef:53:62:51:63:35:7a:9f:b4:03:d0:a2:a3:20:38:24:
         a1:29:ec:29:02:9a:dc:98:6f:ba:4f:25:3e:7b:49:52:1c:8c:
         a0:04:ff:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----