Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7AECDC1EB59011F1B944410ECF1D38B0.roa
File:                     7AECDC1EB59011F1B944410ECF1D38B0.roa (raw, json)
Hash identifier:          5ipPLA6cb4sUD+OeAdy0sZCEtyeHrgaYQnmmuaagNeY=
Subject key identifier:   64:31:B4:28:04:BD:E8:34:03:93:2B:7E:EE:7B:D6:E0:9A:6F:92:43
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D773
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7AECDC1EB59011F1B944410ECF1D38B0.roa
Signing time:             Mon 21 Sep 2026 07:45:57 +0000
ROA not before:           Mon 21 Sep 2026 07:45:53 +0000
ROA not after:            Thu 01 Oct 2026 07:45:53 +0000
asID:                     9465
IP address blocks:        156.225.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120691 (0x1d773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 21 07:45:53 2026 GMT
            Not After : Oct  1 07:45:53 2026 GMT
        Subject: CN=6ab0e0b5-1872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:30:bc:40:a5:8b:5e:42:e8:7d:a4:f9:ad:13:
                    b5:9c:25:2d:50:05:15:8b:93:fc:8e:f4:e0:a9:47:
                    2a:c4:20:cd:f8:b4:4a:00:a0:f1:5c:43:37:e7:4e:
                    6a:ff:50:aa:6c:7b:76:13:ec:8c:ed:3b:f9:51:8a:
                    f8:07:74:fb:41:5d:fb:7d:2a:29:b9:fb:ba:23:e4:
                    ed:ef:b2:d1:1f:5d:37:a9:ba:37:2d:55:dd:3f:e5:
                    4f:26:ba:9d:f2:2c:d9:ec:3a:0e:cc:4d:15:f2:32:
                    19:eb:55:62:66:f7:c7:72:9f:c4:40:90:63:c2:7a:
                    48:86:c1:79:20:d6:68:7d:95:63:33:16:98:b9:1e:
                    e4:0f:8d:b0:5a:fa:76:f9:59:6f:72:6b:4f:17:66:
                    09:e7:1a:51:4d:3c:1a:b7:c7:1d:f7:51:12:10:58:
                    95:c0:58:c6:a5:0c:9b:0f:fb:1d:fd:4d:3b:80:fa:
                    43:6d:35:a0:1e:97:b1:6e:13:3b:ee:46:db:2f:9f:
                    3a:49:75:17:9e:fa:91:6d:aa:a5:3d:4e:7d:76:6c:
                    bd:84:d9:40:c0:bf:71:5d:37:54:47:c1:c3:29:63:
                    5e:8a:21:a1:3a:2c:63:2c:c8:d2:6d:f5:21:43:cf:
                    1f:7d:08:5e:ce:b9:3d:fa:ad:7d:22:62:38:3d:ce:
                    0e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:31:B4:28:04:BD:E8:34:03:93:2B:7E:EE:7B:D6:E0:9A:6F:92:43
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7AECDC1EB59011F1B944410ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:34:38:eb:10:79:ad:6d:e5:82:ca:cd:32:62:0e:6b:83:c7:
         2c:c6:71:8c:2d:b1:2e:a2:01:92:23:94:54:e3:63:b8:62:a0:
         83:58:a3:de:19:db:d4:48:d2:eb:b1:65:45:18:4e:f2:14:74:
         5a:09:68:0e:9c:0b:57:9f:6f:77:e3:dd:95:64:3c:7f:4e:45:
         c6:b5:db:4e:69:1e:42:09:70:4b:07:45:7d:0b:e1:eb:cb:30:
         ff:c9:59:c8:0c:72:df:5b:5b:1b:e3:6f:38:36:92:47:09:f5:
         e3:8b:4f:30:d0:e0:a8:0a:5c:67:4f:b5:c9:78:7d:62:22:a4:
         3e:0d:f3:b5:8e:b4:62:8f:2a:16:ad:6b:c8:aa:d8:06:67:6d:
         8a:76:3b:76:7c:f1:cc:bb:dd:14:c4:e3:16:3a:aa:a7:23:99:
         f7:b4:8c:a7:d8:99:af:8a:6f:11:b3:98:70:88:3a:1b:0b:7f:
         36:d8:62:13:9a:8e:6a:85:83:a2:06:c0:8b:72:99:e7:07:f3:
         f8:14:18:69:97:29:87:4f:c0:e7:26:1a:18:8b:55:67:ac:ad:
         22:31:93:dd:97:1a:06:84:d8:4a:bc:b2:2f:c4:3c:4c:83:5a:
         e8:b9:34:8a:42:24:9a:6d:66:ba:a4:94:80:ed:f3:4d:17:0a:
         f6:7a:f6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----