Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5544CECC95E11F1916B79D9CE1D38B0.roa
File:                     C5544CECC95E11F1916B79D9CE1D38B0.roa (raw, json)
Hash identifier:          FweHnDDzCVnvbA6zUxJxyy6YX3zU0Ol0EHT043FRKWM=
Subject key identifier:   46:09:B9:EA:84:DF:7F:BA:3A:74:C5:94:18:56:F3:FE:6F:24:58:E2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DDFE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5544CECC95E11F1916B79D9CE1D38B0.roa
Signing time:             Fri 16 Oct 2026 12:40:30 +0000
ROA not before:           Fri 16 Oct 2026 12:40:26 +0000
ROA not after:            Sun 29 Nov 2026 12:40:26 +0000
asID:                     218391
IP address blocks:        156.229.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122366 (0x1ddfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 16 12:40:26 2026 GMT
            Not After : Nov 29 12:40:26 2026 GMT
        Subject: CN=6ad21b3e-99d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3f:26:44:c5:37:19:10:cd:80:70:3a:57:4c:
                    cb:22:59:8e:d2:f9:9f:fa:d6:ac:af:94:a9:55:ee:
                    25:4e:73:54:aa:0f:1c:1e:fa:63:53:81:6b:15:47:
                    88:11:be:3a:3a:d6:8c:b1:8e:62:32:44:b0:36:15:
                    e5:ca:41:cc:b4:fd:0a:33:5e:df:e4:cd:fe:8f:f3:
                    a4:40:4d:23:73:c3:db:8e:a4:31:a7:c3:a0:63:b5:
                    da:b8:52:aa:d1:7b:d0:91:14:7f:5c:5f:74:35:8a:
                    7e:82:cf:c8:f4:66:60:df:8e:82:23:91:a6:d7:20:
                    ab:4e:1c:3d:04:a7:35:4e:6c:8b:46:f6:b3:c8:2c:
                    0b:c7:00:97:a3:68:0d:6b:4c:97:2b:0f:bd:0b:63:
                    0a:a6:14:0b:73:ed:b1:a2:e6:06:cd:0d:bb:af:9d:
                    e3:2d:9f:ba:57:b4:45:63:cd:00:45:a6:bf:3c:ac:
                    24:7a:c5:04:90:4f:6c:1d:4a:7c:b0:b3:1b:e7:60:
                    3a:77:be:93:29:e6:fc:7f:6b:83:62:8d:82:38:0e:
                    6d:0f:3c:b0:b5:e8:7f:23:ab:84:85:f5:ee:01:71:
                    02:35:1f:93:77:b8:a2:ff:5e:67:4d:48:a6:54:8b:
                    c7:c5:7b:f3:e6:16:10:33:46:f0:d2:b3:8a:75:4c:
                    8c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:09:B9:EA:84:DF:7F:BA:3A:74:C5:94:18:56:F3:FE:6F:24:58:E2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5544CECC95E11F1916B79D9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:f5:b9:f3:3a:bb:75:ec:eb:58:9b:4c:f3:32:c7:76:18:78:
         f7:8a:fc:ad:c5:c2:6d:07:a2:23:df:90:41:57:51:63:3e:d8:
         3d:c9:21:35:34:f0:5c:79:c3:41:54:2c:00:67:a4:1e:7a:b0:
         8c:48:5a:95:ae:b0:74:6f:85:64:87:da:d7:7d:c5:42:57:1a:
         d6:11:c9:0f:e3:9f:b5:09:45:fb:5d:a6:78:32:a7:06:b4:3b:
         8c:0a:50:f2:e1:97:5d:14:b0:f3:d1:d2:d0:e3:e3:28:cd:dd:
         f0:63:7a:4f:86:8b:b5:84:cc:0a:bd:45:fc:2d:ad:d8:e2:4c:
         d8:04:ab:48:b2:4e:bd:f8:d4:b8:49:9c:77:09:cd:59:36:3c:
         3a:85:65:46:69:bb:42:df:4c:e7:07:07:1f:6b:58:0a:7a:cf:
         5d:1d:6c:f5:71:d0:7a:d9:48:a4:c5:c1:a8:2e:2f:30:24:0c:
         0d:f7:aa:78:d7:9b:da:05:98:e5:4b:56:30:a5:90:21:8e:14:
         ce:5a:f1:76:87:1a:31:1a:1d:ea:bc:a6:36:a7:6c:df:1d:25:
         2c:74:4a:2e:31:48:54:f0:27:6f:a8:f8:3f:15:79:71:8a:7a:
         3b:94:4d:29:bc:16:39:3e:b3:b1:ba:11:48:36:0c:e3:80:42:
         6c:35:ee:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----