Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A372020ACFC11F184F2C7E5CE1D38B0.roa
File:                     5A372020ACFC11F184F2C7E5CE1D38B0.roa (raw, json)
Hash identifier:          AUIsuiK2/rj2fK6k9wa9mZPrh8GzwddAdPG1t0pSEZI=
Subject key identifier:   14:84:D0:A4:54:13:79:F7:4A:CE:F5:5C:70:65:DB:27:D2:C3:F3:A2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D4B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A372020ACFC11F184F2C7E5CE1D38B0.roa
Signing time:             Thu 10 Sep 2026 09:45:27 +0000
ROA not before:           Thu 10 Sep 2026 09:45:22 +0000
ROA not after:            Sat 10 Oct 2026 09:45:22 +0000
asID:                     137983
IP address blocks:        156.225.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119991 (0x1d4b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 10 09:45:22 2026 GMT
            Not After : Oct 10 09:45:22 2026 GMT
        Subject: CN=6aa27c37-290a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:be:55:9c:b5:3d:b5:41:3d:15:7f:40:18:e6:
                    30:30:19:43:d0:da:11:ed:7c:a9:7b:90:af:29:cd:
                    86:31:ce:dd:77:4e:bf:b2:a7:2b:99:42:b5:92:f8:
                    3f:07:86:e0:6c:41:dd:6a:ca:59:61:ed:25:4b:ff:
                    de:3a:40:5e:56:a7:9b:c7:a3:9e:26:7e:fe:3f:67:
                    d0:b3:36:52:b7:c5:af:fb:4e:04:38:71:d8:e3:0f:
                    2c:9b:98:5d:11:e3:ae:af:26:ac:e5:9f:43:27:30:
                    b0:c3:05:09:35:c9:25:c1:5a:9e:dd:7c:fa:87:72:
                    e2:35:50:1d:0c:99:a1:c6:ca:9e:56:26:17:19:58:
                    48:d4:55:82:0f:d4:62:51:e2:ae:37:fa:39:04:f5:
                    65:b5:59:a4:73:b2:98:2c:ac:09:ac:f7:c6:19:f5:
                    d4:2e:eb:e9:b6:3f:6a:fe:b3:52:f1:e2:85:62:90:
                    1c:02:f9:17:af:ec:5c:a7:c8:fd:0f:67:89:a5:c0:
                    8c:ff:fc:4a:3b:1d:d4:03:09:12:2d:ba:09:4e:26:
                    68:1d:9e:ab:a5:0a:09:ca:5d:94:6d:11:0e:a0:b2:
                    70:7e:44:b2:da:06:a7:3b:a8:1f:f3:f4:a8:38:33:
                    13:ff:da:94:ad:b9:aa:63:af:9a:5b:d8:18:55:5b:
                    3f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:84:D0:A4:54:13:79:F7:4A:CE:F5:5C:70:65:DB:27:D2:C3:F3:A2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A372020ACFC11F184F2C7E5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:94:84:b1:17:2a:29:5b:79:5f:b4:63:1d:68:f0:b9:24:f4:
         2e:a8:46:f4:95:37:c0:2a:77:08:c2:49:33:f7:e3:97:6c:08:
         cd:86:ae:e4:ff:0b:f6:aa:d0:25:5c:49:db:ae:a8:92:44:2f:
         4c:44:e5:d6:77:d4:0a:ec:2b:4f:f7:2d:05:4b:80:36:df:e1:
         4a:82:25:dd:24:01:86:67:47:6f:05:0a:b0:dc:fc:4b:7a:a3:
         f7:e8:c0:25:dd:71:38:c9:f6:cc:22:8b:a0:97:b5:f5:a0:2d:
         57:08:c5:c9:f7:0f:c1:58:06:7b:9c:0b:19:22:f3:a0:bf:59:
         96:af:ca:99:41:5d:46:74:eb:e8:42:3f:e4:bf:b0:06:83:7a:
         90:67:64:65:2e:8c:f3:fa:19:a1:2e:b8:f9:8d:dd:e2:ec:5c:
         88:80:d5:fb:81:92:71:56:59:c7:2b:0e:06:27:02:27:3c:36:
         5b:ce:69:53:7e:f9:bb:7c:77:c6:36:83:e4:45:c5:36:de:e1:
         62:c6:f8:af:f0:cd:9d:47:69:8c:01:46:f9:97:fb:bd:e1:85:
         97:d4:b0:49:1a:70:29:40:1c:fe:5a:6b:47:f0:15:60:e1:93:
         74:25:07:b2:ae:36:ca:04:68:cf:0e:e9:6a:c9:03:a1:5f:e2:
         ef:4a:20:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----