Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B541414CA78611F1889814D6CE1D38B0.roa
File:                     B541414CA78611F1889814D6CE1D38B0.roa (raw, json)
Hash identifier:          PjalXYgwIZTfUUgr6W6v5nR6aVMugaFvGLI6ehgiTvE=
Subject key identifier:   AC:91:40:9C:35:A6:29:61:BE:8E:45:04:24:AD:3E:33:97:AF:DF:04
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D310
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B541414CA78611F1889814D6CE1D38B0.roa
Signing time:             Thu 03 Sep 2026 11:00:44 +0000
ROA not before:           Thu 03 Sep 2026 11:00:39 +0000
ROA not after:            Thu 22 Oct 2026 11:00:39 +0000
asID:                     40779
IP address blocks:        156.225.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119568 (0x1d310)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  3 11:00:39 2026 GMT
            Not After : Oct 22 11:00:39 2026 GMT
        Subject: CN=6a99535c-6b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3c:6a:a5:8f:b2:56:99:13:8f:76:c8:ba:8c:
                    33:bb:04:6d:e2:52:4e:f9:a2:26:a7:f9:14:33:c1:
                    73:1c:fb:58:11:82:aa:64:e0:d0:65:84:b6:60:0d:
                    cc:ae:3a:25:28:6d:ce:c3:10:66:81:5e:ac:1e:79:
                    1f:e9:66:b0:8a:7f:42:ac:28:85:9c:7b:92:dc:db:
                    49:e5:f7:77:bd:14:9f:8e:0c:37:1c:05:a2:15:f0:
                    7a:d2:d5:78:60:6c:4e:b2:81:4a:6c:7e:04:53:56:
                    57:29:78:46:04:31:e4:1f:31:0f:b4:9b:40:ba:cc:
                    1a:67:f6:f8:bd:35:2e:53:42:b3:fa:e0:0d:1c:61:
                    76:c1:1d:f4:42:93:2a:b9:95:08:90:8f:c4:c1:49:
                    6d:ec:f8:e5:fe:50:5a:e2:dc:30:9d:16:c9:7a:ff:
                    80:ff:16:5e:0c:69:44:f1:a3:49:58:6a:90:7c:48:
                    81:86:5d:bb:64:2d:ec:2f:09:82:06:4e:7a:67:b3:
                    b5:55:de:40:89:a6:5b:09:d7:24:0d:30:93:47:38:
                    20:92:ba:ae:c9:8e:dd:c1:77:f3:e9:fc:6e:da:dc:
                    c7:cf:dd:f3:b0:0e:dc:5b:dc:88:c2:ba:1d:34:dd:
                    6c:4d:43:13:58:bd:1e:4d:ca:72:1e:6b:b2:65:79:
                    07:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:91:40:9C:35:A6:29:61:BE:8E:45:04:24:AD:3E:33:97:AF:DF:04
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B541414CA78611F1889814D6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         94:dd:55:5f:15:3c:7f:32:71:f2:f2:1a:6e:f3:fc:af:76:bd:
         cd:2b:8c:2d:b6:76:c5:a1:87:f6:19:88:c9:fd:13:3f:9b:65:
         88:db:d0:34:9d:ff:ff:ce:de:a2:f2:86:c0:88:33:38:0b:ff:
         ca:39:0b:92:45:53:af:09:66:7f:2e:6a:70:ac:aa:b4:c2:08:
         dd:2b:69:3b:bb:56:7b:90:51:7c:18:fa:fe:4c:ab:34:00:e0:
         8e:55:c8:3f:3f:e2:f5:9f:85:28:c0:76:18:07:f1:3c:b6:7f:
         a5:65:82:97:dc:de:23:d0:97:9e:54:49:3b:a1:32:d7:05:a6:
         57:21:b4:d9:9d:8b:3c:2c:04:ac:1e:12:f2:2f:e8:9b:b2:a3:
         2d:b4:a1:4e:59:9c:29:a7:74:3b:39:34:24:c6:41:9b:a8:77:
         1d:e2:20:b1:9f:69:61:f7:39:c0:17:4b:a2:59:88:1f:4f:e9:
         06:42:27:84:41:ff:3d:17:58:c0:bd:e4:5e:da:71:06:1a:15:
         6f:1d:6f:8c:60:67:02:0d:1d:f6:f4:c1:9b:d0:77:bc:c7:23:
         78:7f:c8:20:c0:c6:32:5b:88:41:1a:6c:a2:c4:f4:08:11:74:
         2c:17:a4:e1:d1:47:8c:62:56:3a:09:97:69:dd:6c:4b:c4:c3:
         e4:38:7e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----