Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED994222B66F11F1B5452BBECE1D38B0.roa
File:                     ED994222B66F11F1B5452BBECE1D38B0.roa (raw, json)
Hash identifier:          4vHXktm/P0w44DzOPaB0WmqkGVXxHf1+6FaMQIMPIPY=
Subject key identifier:   B8:91:C9:2D:AC:47:57:AF:DC:EF:B8:B2:93:9F:46:5D:52:2B:72:76
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D80E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED994222B66F11F1B5452BBECE1D38B0.roa
Signing time:             Tue 22 Sep 2026 10:25:27 +0000
ROA not before:           Tue 22 Sep 2026 10:25:23 +0000
ROA not after:            Sun 08 Nov 2026 10:25:23 +0000
asID:                     3257
IP address blocks:        156.228.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120846 (0x1d80e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 10:25:23 2026 GMT
            Not After : Nov  8 10:25:23 2026 GMT
        Subject: CN=6ab25797-27df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:63:b6:bd:87:e7:3e:53:4f:ee:eb:60:16:5f:
                    b6:69:ad:a9:e1:36:a1:08:31:c0:62:1b:57:bf:49:
                    d5:9b:63:53:46:68:d7:31:52:9c:df:d4:ce:6d:46:
                    bb:46:aa:72:d4:be:40:cd:6c:f0:e6:a6:26:71:46:
                    0d:f9:ed:de:03:04:c0:d8:32:86:2d:c6:97:f7:f8:
                    5d:aa:8c:2b:2c:a8:58:04:0c:1b:ec:91:ed:ec:92:
                    3d:ce:71:a1:17:d1:88:f0:8a:d4:33:4b:72:96:1b:
                    3d:80:03:0a:1c:41:9b:f9:da:34:52:03:d0:9a:11:
                    a1:a4:0a:4e:09:68:66:90:e3:92:48:90:e3:88:0c:
                    45:18:64:66:3c:b6:74:ab:f1:bf:f8:a4:c7:bf:0d:
                    2a:67:eb:74:e7:fd:53:64:11:b3:45:87:a7:21:e2:
                    e0:86:7f:e1:69:eb:df:68:91:fe:71:24:46:ef:01:
                    31:fc:6b:6b:dc:0d:a3:89:a7:2d:7c:e8:59:b2:ed:
                    61:00:13:61:04:bc:38:3e:16:cf:34:58:0c:e2:3a:
                    92:8b:e1:15:41:0a:44:53:93:1a:9a:6f:d4:0e:b2:
                    6f:a4:f4:40:c3:f3:81:45:3c:10:2a:5d:d3:4a:32:
                    af:c9:c8:ea:b1:0a:8e:4d:ca:b4:f8:83:52:38:c3:
                    eb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:91:C9:2D:AC:47:57:AF:DC:EF:B8:B2:93:9F:46:5D:52:2B:72:76
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED994222B66F11F1B5452BBECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.228.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:b9:f0:9a:2c:62:02:73:f9:2d:88:21:62:c3:07:07:9f:63:
         8a:8f:3d:b6:ca:dc:c1:b8:4f:58:ce:34:e8:59:f3:9f:7a:ca:
         43:bb:01:5b:79:0c:e2:3c:37:23:02:ab:71:27:e9:72:b5:c2:
         94:6d:b1:e1:b1:51:19:75:54:55:73:4d:83:67:54:ef:a5:5a:
         5f:8e:d3:23:39:07:07:a5:08:a2:b6:22:cd:76:e0:ad:28:40:
         98:ea:28:93:fa:7d:a5:ea:0f:79:ad:27:a0:d1:d3:b5:c6:a6:
         68:fb:04:92:84:6e:e4:d9:f5:ad:4a:71:05:3e:ad:7a:b1:84:
         de:ca:de:92:30:1b:80:37:4c:25:b0:32:73:a6:cb:b8:8a:3f:
         32:e1:1d:6d:a4:fb:3f:4c:17:c0:d0:cb:f8:a8:9b:5c:bf:1c:
         1b:c2:6d:4a:c7:cf:8d:b1:fb:d5:58:0c:b5:75:77:0f:0e:74:
         eb:05:25:c3:78:59:29:af:c0:be:15:ab:cb:b9:24:7a:65:bc:
         56:7d:06:df:21:6b:89:94:5f:ac:f4:17:ee:b9:85:fd:13:02:
         8f:4f:3e:7e:17:be:33:54:ba:88:1e:53:32:74:1e:a6:c1:d8:
         4e:c5:eb:d5:72:6c:20:9c:47:1f:c0:57:d9:12:3e:41:74:5b:
         37:66:83:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----