Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36C68F4ABD9611F1A284C1DFCE1D38B0.roa
File:                     36C68F4ABD9611F1A284C1DFCE1D38B0.roa (raw, json)
Hash identifier:          k8CNQNno8RHJkTy/75KUumVgFfaUCbFpVmGfm55cuO8=
Subject key identifier:   4D:78:C2:5C:08:CF:B6:AB:8F:C5:67:D3:3C:D6:68:40:C3:C4:76:09
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D9B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36C68F4ABD9611F1A284C1DFCE1D38B0.roa
Signing time:             Thu 01 Oct 2026 12:47:09 +0000
ROA not before:           Thu 01 Oct 2026 12:47:05 +0000
ROA not after:            Wed 04 Nov 2026 12:47:05 +0000
asID:                     211961
IP address blocks:        156.233.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 09:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121269 (0x1d9b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  1 12:47:05 2026 GMT
            Not After : Nov  4 12:47:05 2026 GMT
        Subject: CN=6abe564d-f044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:de:01:6a:c2:fa:05:ff:de:a5:22:53:3b:96:
                    8a:5d:38:57:de:d3:49:e8:a7:26:6c:12:b5:4b:0d:
                    d9:7d:2c:a0:d8:b5:95:72:47:5e:28:12:55:f4:0c:
                    62:86:7c:f4:9b:c3:5e:2d:6c:96:27:9e:d9:9a:4f:
                    de:38:d1:64:45:8b:20:6c:8c:80:a5:31:9d:30:0b:
                    31:21:8c:b0:3e:9a:fe:9b:7c:46:c7:45:95:84:8f:
                    d4:e2:d4:5c:7e:68:d8:85:44:2a:12:bb:09:a8:05:
                    6d:f8:02:1a:48:cf:da:6b:92:43:10:ce:b3:fa:de:
                    4d:e1:1e:24:7f:36:57:22:15:a4:2d:89:12:e4:79:
                    0e:2f:61:90:a9:e5:f6:77:98:58:36:b9:14:03:4d:
                    ff:33:1d:49:f1:07:23:9c:16:f6:ce:ce:c9:90:bc:
                    76:9c:71:b4:84:0b:ff:ef:21:1c:86:df:f5:e1:15:
                    db:37:10:5f:a6:e9:36:c1:ff:80:3b:df:83:ae:c8:
                    02:ce:27:5c:d8:72:78:45:07:27:b1:0c:09:ef:95:
                    a5:6e:9e:e5:88:1a:95:4f:9f:ff:2a:40:5c:1a:18:
                    a6:55:75:51:c0:41:37:3b:85:89:67:34:db:3b:14:
                    64:c9:96:09:e7:5a:c6:db:06:69:fd:bc:ab:98:4c:
                    6d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:78:C2:5C:08:CF:B6:AB:8F:C5:67:D3:3C:D6:68:40:C3:C4:76:09
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36C68F4ABD9611F1A284C1DFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:8a:d8:64:e5:a9:e0:22:b3:13:84:ae:b8:a8:2e:5b:a2:18:
         12:e8:7e:69:de:fa:57:01:f2:07:69:99:2b:b2:3c:9f:63:ac:
         14:73:87:5f:90:b3:45:67:c7:52:ed:dc:eb:c1:37:66:d8:2e:
         e5:9c:da:2b:46:7a:e7:d6:1a:58:02:59:cd:99:56:f7:32:2d:
         d9:f1:f5:8e:18:f7:27:bf:74:8c:1b:ab:81:05:8e:6f:71:36:
         ce:d5:8f:73:08:1a:a0:be:7e:34:88:ca:a4:93:5b:5f:7f:0f:
         82:71:c2:33:91:a2:2f:35:5e:53:94:9c:04:ce:18:39:86:b9:
         43:c9:df:c8:6a:27:2f:45:2e:eb:28:e3:27:9c:33:26:28:8b:
         d0:77:80:17:4f:16:ab:be:a4:48:af:ce:55:38:7f:0c:61:89:
         30:f8:e5:07:9b:41:85:7a:9b:f1:3d:a9:57:d2:41:3d:e2:ba:
         ab:60:c8:38:d6:0e:53:a9:3e:e5:f2:cf:10:2b:5d:02:18:47:
         8b:d0:a0:64:0d:3d:82:8f:0b:c2:8c:e4:65:28:8e:d0:df:e2:
         f8:31:16:ea:64:fb:25:e2:05:47:41:94:93:ce:98:04:e4:cd:
         5b:27:86:26:c6:d1:27:fc:99:4d:26:44:6f:b4:b7:ce:e7:07:
         b2:08:04:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----