Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/844704F6B51311F1B5BA0CD3CE1D38B0.roa
File:                     844704F6B51311F1B5BA0CD3CE1D38B0.roa (raw, json)
Hash identifier:          pYD+ZLRun7i9AFfs2+27txHbvQUYsRHJkOZOyXgzrbA=
Subject key identifier:   17:A9:6D:80:19:43:13:A9:06:0E:12:4A:77:E5:1B:37:F2:94:C3:0C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D742
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/844704F6B51311F1B5BA0CD3CE1D38B0.roa
Signing time:             Sun 20 Sep 2026 16:51:26 +0000
ROA not before:           Sun 20 Sep 2026 16:51:22 +0000
ROA not after:            Wed 19 Sep 2029 16:51:22 +0000
asID:                     17561
IP address blocks:        156.254.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120642 (0x1d742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 20 16:51:22 2026 GMT
            Not After : Sep 19 16:51:22 2029 GMT
        Subject: CN=6ab00f0d-5f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ff:19:54:d6:3c:82:41:58:ce:c0:46:72:36:
                    b7:09:ce:44:1c:4d:9a:8c:35:72:57:e8:94:39:6a:
                    63:af:76:b1:e5:16:25:a9:a4:13:e8:0f:17:ec:f6:
                    47:f4:01:78:a1:84:18:ac:eb:f3:6f:e5:60:36:43:
                    cd:7f:38:7d:04:a1:71:bb:bb:5f:a7:b2:5a:3c:25:
                    b0:df:b1:e2:f8:82:89:44:ac:57:9a:7d:73:fb:a6:
                    f2:6e:9f:19:a8:41:36:db:fb:1d:06:93:4b:ec:77:
                    72:94:d0:af:b7:06:7a:ef:c4:25:75:01:6f:61:f1:
                    f9:0d:31:72:c7:8b:7b:48:7d:59:43:d6:ee:05:fe:
                    3c:47:28:0c:76:77:20:32:ae:fb:a8:e7:cc:e3:1b:
                    10:82:9c:42:d8:1a:25:d8:71:0e:5d:e1:c4:fc:8b:
                    6c:6f:a6:50:1d:aa:21:ed:08:ab:2d:ca:4f:08:a7:
                    a1:8d:08:09:c4:99:fb:a7:65:73:b9:6a:11:41:76:
                    47:be:24:22:fb:b8:4b:32:fa:90:c5:4e:b4:83:d6:
                    21:8d:6b:60:3d:bb:6d:2a:41:84:93:3b:55:8e:3c:
                    92:d1:7a:10:be:19:04:5a:c1:58:00:04:08:23:89:
                    5c:6f:b0:ee:0a:71:5f:e2:d3:d5:2d:ab:f8:69:07:
                    74:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A9:6D:80:19:43:13:A9:06:0E:12:4A:77:E5:1B:37:F2:94:C3:0C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/844704F6B51311F1B5BA0CD3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:2b:a2:ca:2b:2f:89:95:7f:a2:41:48:38:af:cd:1e:4a:3e:
         b4:9f:1e:2c:40:19:60:27:f1:29:8b:aa:d3:c5:73:b0:4a:c1:
         b4:7b:0d:30:96:1d:43:af:9d:c0:65:15:67:9c:20:05:b9:fd:
         33:b1:db:f5:dd:ca:25:34:1a:f7:e2:0e:b8:f4:0a:42:0a:0f:
         70:f9:d4:72:8a:74:ec:26:4c:69:7a:2b:49:db:53:49:89:7a:
         33:56:5b:9c:9e:9e:f3:d8:e0:b5:09:48:f7:df:db:20:8b:33:
         2e:c4:e5:5b:61:10:a4:4f:c3:ac:29:e9:a4:b3:d7:35:d3:bc:
         dc:62:79:e5:4b:51:84:bd:4b:31:80:aa:b8:1b:39:4d:57:19:
         1f:c9:d6:c0:63:9a:26:d9:d9:f0:24:4c:bd:8b:6e:40:74:16:
         a8:07:98:4f:54:18:8f:57:e3:c6:d1:ff:eb:dd:7b:d4:cb:cb:
         39:f4:0d:98:b8:26:11:64:d7:80:cd:4a:7a:38:71:9a:c8:84:
         ee:5b:e1:10:e1:85:8e:36:6e:c8:9d:bd:81:9c:51:8b:6d:fa:
         82:23:22:90:c5:c6:1f:a1:75:2f:b7:0c:c0:91:20:32:93:45:
         bc:fb:5d:b9:3c:d7:12:c1:45:95:18:42:8b:4b:42:9a:36:9c:
         c0:c7:7e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----