Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE728FA4B72111F188F6ACCBCE1D38B0.roa
File:                     CE728FA4B72111F188F6ACCBCE1D38B0.roa (raw, json)
Hash identifier:          nOAUitChZ4NlgxvfZqLVzyg7yj+x+kgxN/+MPA31eKo=
Subject key identifier:   FA:33:EA:DB:E9:BC:04:E1:85:34:4C:57:72:40:2C:3A:98:9E:FA:28
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D868
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE728FA4B72111F188F6ACCBCE1D38B0.roa
Signing time:             Wed 23 Sep 2026 07:38:45 +0000
ROA not before:           Wed 23 Sep 2026 07:38:41 +0000
ROA not after:            Sun 25 Oct 2026 07:38:41 +0000
asID:                     141323
IP address blocks:        156.253.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120936 (0x1d868)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 23 07:38:41 2026 GMT
            Not After : Oct 25 07:38:41 2026 GMT
        Subject: CN=6ab38205-9eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:21:b2:5e:70:f7:4f:31:51:ec:5e:de:b4:d4:
                    5c:ab:66:dd:e6:99:39:f6:8e:eb:f0:f5:4e:9d:19:
                    c4:0f:87:1d:62:51:25:8c:f9:2f:8a:bf:fd:bd:28:
                    fa:87:1d:e8:67:41:70:0f:ce:e8:5c:a2:5b:d7:46:
                    b6:3b:51:83:27:40:88:00:4d:43:a2:83:16:64:98:
                    e3:52:36:d7:61:af:5d:37:7c:0e:23:eb:15:93:a2:
                    56:e2:8b:86:49:e0:66:68:25:2b:3e:54:c0:b8:0d:
                    09:08:a6:61:f1:43:4b:51:4e:f8:10:32:b9:e4:b0:
                    c8:c0:6c:3d:44:dd:03:10:35:44:bf:e2:4a:31:89:
                    1c:38:3b:c7:8b:32:40:d0:35:28:2d:ec:c5:24:1f:
                    b0:e8:26:a2:0a:7b:59:de:5c:3d:02:60:38:1c:c4:
                    66:a5:41:59:b7:a7:40:74:97:b7:b1:44:54:35:b7:
                    3d:3a:80:d7:07:8c:fb:66:a7:1c:4d:fc:24:fd:8d:
                    04:74:88:2f:d8:8b:f9:97:ad:ef:71:95:4e:cb:7a:
                    9d:7b:03:c7:7f:59:0d:78:ee:10:4c:fc:82:e2:c0:
                    98:02:eb:23:b9:37:03:aa:95:70:13:dc:96:d5:8e:
                    38:0a:32:f9:b6:2c:e5:97:60:00:2d:11:4d:5d:50:
                    ac:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:33:EA:DB:E9:BC:04:E1:85:34:4C:57:72:40:2C:3A:98:9E:FA:28
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE728FA4B72111F188F6ACCBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.253.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:a9:af:35:ae:cc:f0:e2:11:e9:db:13:a5:a5:76:e2:51:45:
         47:65:16:a4:67:ec:14:3c:1a:b6:da:bb:d8:ca:9c:ca:f3:f3:
         64:30:1f:f8:8f:a8:f5:d3:e2:d9:73:c5:1c:04:6d:72:c9:c2:
         f1:08:f2:c2:5d:ea:a2:da:f4:c7:2a:89:6d:c8:27:7d:c6:1e:
         ed:13:50:ad:62:fe:69:33:be:f9:a7:c9:28:b9:2f:ec:a9:22:
         04:83:cb:20:a8:dc:65:f8:3b:53:61:9f:f2:22:de:c6:4d:29:
         de:fe:05:1c:92:61:bf:ab:ad:f8:a3:49:a5:c5:d7:6a:29:ad:
         0c:d3:54:05:23:c8:cf:b1:8c:8c:ec:0a:5c:61:2c:c4:3e:77:
         42:9c:cf:17:59:63:c3:3d:01:80:5c:06:75:c1:92:53:31:93:
         62:8e:ba:fe:0b:66:4b:84:81:c0:8f:c8:f7:f0:e1:98:6d:d9:
         e6:a8:e5:7c:68:3e:fa:bc:b7:46:2f:7f:3e:6d:67:2a:e2:64:
         e8:12:fe:d1:24:9b:75:ee:7d:cc:d4:c4:5c:25:de:da:fe:79:
         0f:ea:34:7f:4b:96:00:68:f9:99:3e:bf:35:55:1e:81:0e:08:
         17:ce:d5:ff:f7:ce:7f:37:8b:67:35:52:ce:5d:75:37:de:24:
         8e:4b:ee:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----