Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E56B99CC15B11F1B6CC86FFCE1D38B0.roa
File:                     3E56B99CC15B11F1B6CC86FFCE1D38B0.roa (raw, json)
Hash identifier:          puUD/tPrxIlRITriDW6ujAPM40BVRTra9Dd1gCmwSts=
Subject key identifier:   54:23:50:EA:AD:8F:7B:B8:C9:21:5A:A2:DE:BF:A7:6A:8E:46:84:E8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DB5E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E56B99CC15B11F1B6CC86FFCE1D38B0.roa
Signing time:             Tue 06 Oct 2026 07:55:06 +0000
ROA not before:           Tue 06 Oct 2026 07:55:02 +0000
ROA not after:            Mon 09 Nov 2026 07:55:02 +0000
asID:                     274065
IP address blocks:        156.238.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121694 (0x1db5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  6 07:55:02 2026 GMT
            Not After : Nov  9 07:55:02 2026 GMT
        Subject: CN=6ac4a95a-3dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d0:14:7a:5d:9f:49:ff:e7:84:76:c5:7d:9c:
                    40:56:ef:17:b4:d9:1a:42:17:c1:45:94:f5:f5:c2:
                    e9:d1:d4:ff:45:a6:c8:88:7a:6e:e5:9c:d1:43:82:
                    46:5b:1d:7a:1e:d3:19:f9:ee:14:71:95:31:7e:0c:
                    fe:0a:f5:ef:c7:ca:ca:2b:e0:9a:1e:ac:1f:30:88:
                    77:cd:1d:88:09:d2:09:55:eb:4f:85:e6:c4:67:ff:
                    7c:f2:95:0a:66:70:73:d0:4f:b6:4a:39:d4:ce:00:
                    5d:a3:37:c6:51:59:9d:6d:df:8a:53:ef:cc:e7:78:
                    bb:a3:26:b5:1f:13:f0:90:e1:ea:f8:33:14:29:f9:
                    7c:bc:c9:e3:b5:ad:30:2e:a8:fa:7b:00:73:21:19:
                    54:f5:b8:5b:9a:2e:16:26:a9:90:0a:ad:f7:62:71:
                    8c:ad:a0:2b:ef:e3:69:65:13:df:99:a3:38:4b:08:
                    4f:df:d1:af:43:8c:88:7c:1e:dc:f9:68:be:85:38:
                    e1:52:ba:68:5e:d0:d2:27:4d:8d:6c:b9:d9:5c:c4:
                    2e:9f:75:89:71:b4:f2:4e:48:bc:31:67:ef:bf:5a:
                    42:19:2b:d8:1a:56:28:4d:b9:6e:ff:59:2d:34:c8:
                    83:e5:bb:11:81:6c:42:25:7c:47:23:bb:cf:8e:ec:
                    96:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:23:50:EA:AD:8F:7B:B8:C9:21:5A:A2:DE:BF:A7:6A:8E:46:84:E8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E56B99CC15B11F1B6CC86FFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:49:2d:c7:43:5f:56:f1:78:d5:22:6b:9e:fc:dd:2c:7c:1b:
         40:9f:e7:24:5b:44:bd:7b:9d:eb:4e:7b:4e:5b:f5:57:6f:58:
         28:2d:45:7f:89:01:b7:c5:90:d1:57:d8:0e:be:aa:be:ee:36:
         ea:44:87:a0:ed:77:de:09:b0:06:3c:5d:ca:b4:62:3f:6d:dd:
         b3:51:3d:f1:eb:19:37:2d:28:7f:c6:45:ec:58:26:bd:56:c0:
         3b:ed:d3:80:91:c0:0f:00:bb:61:4d:90:9e:a8:cb:7d:a3:df:
         5e:cb:c3:9e:ae:c2:88:13:09:a3:ee:55:78:06:52:24:28:3a:
         26:22:77:4f:bc:81:24:2c:fc:51:c7:31:fd:c3:a1:06:8a:cc:
         d6:71:b8:11:0b:2c:e2:1a:d9:f0:34:a8:ea:c1:83:07:40:f2:
         eb:d5:76:a9:65:9c:cf:c8:12:77:1e:04:e5:db:a2:fd:ae:5d:
         2c:05:ee:fd:16:d3:28:0c:02:e6:e3:f5:a8:0d:2d:a4:e7:ca:
         fd:38:1d:3d:d2:35:41:3f:b1:fd:59:e2:a8:17:b9:d5:a1:4c:
         93:93:66:66:86:6e:ee:73:24:99:74:df:98:35:33:58:ba:5c:
         28:eb:6c:b7:22:17:1e:25:9b:79:75:0e:96:1d:f9:48:c2:ee:
         d2:25:01:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----