Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4C7AAF4B67711F1A9534DF0CE1D38B0.roa
File:                     F4C7AAF4B67711F1A9534DF0CE1D38B0.roa (raw, json)
Hash identifier:          uENXTKxzVUiUwDj+pjbjXRs3gSHQfd2OfbrSC8q12e0=
Subject key identifier:   0C:1E:28:46:AF:F2:5C:D3:42:90:9B:DC:BC:A0:74:63:D6:AA:11:84
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D824
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4C7AAF4B67711F1A9534DF0CE1D38B0.roa
Signing time:             Tue 22 Sep 2026 11:22:55 +0000
ROA not before:           Tue 22 Sep 2026 11:22:51 +0000
ROA not after:            Thu 29 Oct 2026 11:22:51 +0000
asID:                     9465
IP address blocks:        156.225.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120868 (0x1d824)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 11:22:51 2026 GMT
            Not After : Oct 29 11:22:51 2026 GMT
        Subject: CN=6ab2650f-88b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0e:3d:6a:8b:99:29:00:ca:44:fd:5d:c6:6d:
                    75:26:7c:fd:63:92:ec:ce:a0:33:46:5c:ca:44:27:
                    ae:e9:e4:97:ee:3f:8b:ef:49:ca:3f:b4:42:a6:23:
                    7a:a7:b8:b5:43:24:f7:b2:00:15:53:3d:6f:7b:12:
                    ce:bd:91:f4:be:94:89:d6:75:3f:4a:98:c4:ee:42:
                    8c:18:80:60:7c:54:cb:12:82:fc:16:b9:a7:ac:9e:
                    da:23:2f:f7:bd:02:92:53:26:e8:53:55:2b:2a:97:
                    30:21:15:f7:98:74:e2:4b:7f:d2:74:74:44:a2:3b:
                    21:b1:ac:50:8b:b9:bb:47:a5:f4:cd:83:0b:d6:58:
                    42:80:c5:5e:95:bd:89:2b:e2:4d:69:36:2d:88:c8:
                    70:94:1b:52:8b:ab:c8:29:27:2f:56:eb:83:34:5d:
                    42:4e:f0:6a:8e:61:68:fb:75:64:2d:94:15:6b:c6:
                    a3:d4:96:d2:50:38:00:48:79:02:ea:47:75:0a:86:
                    5f:f7:24:69:45:be:00:20:b6:83:f2:94:30:e5:47:
                    47:fd:c3:a9:a6:99:2e:f7:5e:8d:7b:c8:63:39:b4:
                    b3:f6:b6:64:13:bf:db:38:13:b5:60:d3:5b:d3:b4:
                    07:02:d6:dc:50:19:35:55:5d:01:82:75:72:6f:9b:
                    9e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1E:28:46:AF:F2:5C:D3:42:90:9B:DC:BC:A0:74:63:D6:AA:11:84
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4C7AAF4B67711F1A9534DF0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:6a:12:8b:97:3b:28:e6:e2:22:8e:5b:93:30:d0:81:9c:cb:
         2e:04:37:00:84:bc:8a:43:fa:64:e6:15:a3:56:8c:89:ed:01:
         78:d2:68:ea:da:cc:57:29:a9:74:87:ff:a2:70:37:9d:16:15:
         4b:76:39:9f:4d:7a:2f:3c:74:bd:4f:9b:6e:03:92:eb:0b:7c:
         73:01:fb:ef:db:72:0c:da:ed:81:91:0e:1b:bb:ce:c0:31:ea:
         86:68:48:73:19:e0:a8:91:24:0e:78:21:14:f8:ef:30:55:34:
         5a:2b:b5:1b:13:a2:aa:19:e5:f4:81:00:6b:fd:98:f8:9c:9d:
         0b:95:18:26:a0:0e:54:f0:18:0c:d5:60:63:5e:d5:7f:42:ee:
         d0:f5:12:5d:20:c8:45:34:f2:e2:b8:f5:a6:76:02:40:38:30:
         92:52:26:57:e8:12:fa:d1:fd:ea:03:7f:74:b8:81:0d:d7:a4:
         f2:f3:54:a4:46:0e:89:09:a8:79:0e:62:30:b9:55:83:10:06:
         f2:f3:ee:f3:a7:1d:bb:69:a0:a9:40:69:92:dc:fa:28:52:5f:
         6d:2e:2f:bb:66:a8:a8:17:98:e6:44:19:c2:af:b5:35:02:30:
         c9:7b:ad:05:e8:b9:e2:67:c9:2a:7e:2a:c8:de:2b:1a:bc:47:
         c6:cd:27:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----