Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59BBC914B32A11F18CBFDAD4CE1D38B0.roa
File:                     59BBC914B32A11F18CBFDAD4CE1D38B0.roa (raw, json)
Hash identifier:          db2BGm85J0lnoqsA0Kdws3MiQlMT7NFsMThiDkORGYI=
Subject key identifier:   92:5B:80:14:DB:43:B0:4E:E5:BB:32:87:D3:87:9F:65:CF:E6:BD:50
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D6D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59BBC914B32A11F18CBFDAD4CE1D38B0.roa
Signing time:             Fri 18 Sep 2026 06:29:50 +0000
ROA not before:           Fri 18 Sep 2026 06:29:46 +0000
ROA not after:            Thu 22 Oct 2026 06:29:46 +0000
asID:                     61461
IP address blocks:        156.247.128.0/17 maxlen: 24
                          156.255.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120529 (0x1d6d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 18 06:29:46 2026 GMT
            Not After : Oct 22 06:29:46 2026 GMT
        Subject: CN=6aacda5e-cf9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:16:6b:43:f9:14:9e:da:b3:5e:cf:40:b8:52:
                    55:90:b4:4f:39:3e:fa:03:01:b9:d5:c6:72:03:25:
                    a8:d3:73:72:b6:ca:4c:45:ca:d7:3f:4d:41:17:02:
                    5f:8e:9a:e4:47:9a:a2:f8:b6:f0:d1:36:66:fa:e2:
                    56:5f:71:b7:59:b8:21:b2:1a:0d:76:94:c1:ba:66:
                    84:aa:cf:7d:d4:e6:8e:89:9b:1a:15:87:af:39:c5:
                    f3:c7:10:50:26:84:fc:4b:20:12:5e:2d:d8:ab:9d:
                    2e:25:ae:81:3d:1f:d1:a4:eb:3c:89:ad:ca:9a:2e:
                    10:c2:2d:5d:3a:3f:49:14:1a:5f:9b:b7:62:1f:2f:
                    21:69:47:3d:18:49:10:24:39:58:a5:56:14:4e:b4:
                    e5:10:25:b3:e0:0b:d1:42:c8:a1:46:7a:f1:c4:60:
                    72:02:7a:2f:33:53:12:88:c2:90:d3:5e:2b:41:0e:
                    2b:8d:14:be:80:33:8d:67:85:50:18:e7:86:ff:27:
                    08:f4:0d:6c:f0:9c:da:5e:9f:1e:69:88:fc:ff:4a:
                    94:a4:64:83:ea:fe:c0:da:a3:bb:d3:ba:91:1d:ab:
                    58:f6:5f:7d:da:76:be:53:84:5c:11:51:60:75:d6:
                    80:8d:df:aa:a1:ae:6f:6c:6a:c5:67:68:f5:65:59:
                    62:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5B:80:14:DB:43:B0:4E:E5:BB:32:87:D3:87:9F:65:CF:E6:BD:50
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59BBC914B32A11F18CBFDAD4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.128.0/17
                  156.255.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9a:73:9d:a2:96:15:23:01:b7:f3:90:ae:c8:01:60:14:96:34:
         2b:39:a5:e6:87:18:50:2a:ab:47:7c:16:2b:a3:95:37:1c:9c:
         3a:08:e8:8c:74:02:9e:36:6e:9e:43:0d:fa:b3:7a:7a:0d:89:
         10:16:17:f7:d7:de:e9:62:37:30:89:9b:8a:65:9f:a2:0f:63:
         2b:ee:78:e7:a6:b8:96:88:47:79:58:76:30:0f:ee:5e:f9:74:
         5c:d8:b2:3f:66:2c:6d:11:1a:80:4b:b5:f8:4e:3d:61:e4:6b:
         e2:06:d3:ec:3e:6a:31:1d:82:e8:01:b0:c6:da:f7:5f:8b:99:
         df:17:49:e2:89:c9:9e:98:35:02:54:d0:30:0a:1b:52:f1:1d:
         e4:12:53:5b:34:d2:5b:80:8d:d3:60:2c:66:44:3e:68:b2:ab:
         70:be:9f:70:d3:86:7d:c3:ab:89:9a:77:c0:0f:47:10:f2:07:
         68:2c:f3:58:77:66:a6:3a:c4:b1:11:76:ea:c3:8e:4a:7c:28:
         3a:50:91:b3:b9:35:28:0a:65:a7:f9:ab:0b:2e:56:54:74:5d:
         6f:08:a8:27:6b:27:b8:a9:cc:de:b0:99:85:52:df:91:44:6e:
         ba:1b:28:7a:c9:d7:49:6f:63:b1:84:67:3c:76:ac:36:52:3b:
         21:dd:ad:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----