Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BED35F24B3FC11F1986A5FB5CE1D38B0.roa
File:                     BED35F24B3FC11F1986A5FB5CE1D38B0.roa (raw, json)
Hash identifier:          ciDbNKVSSUjj16k3o+eSOFSLWGkmRAc+pTk1V18Pyfk=
Subject key identifier:   AF:AD:C8:25:CB:BC:42:7B:26:AE:8A:B1:B5:78:F7:77:D0:B5:39:67
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D6F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BED35F24B3FC11F1986A5FB5CE1D38B0.roa
Signing time:             Sat 19 Sep 2026 07:35:54 +0000
ROA not before:           Sat 19 Sep 2026 07:35:50 +0000
ROA not after:            Mon 02 Nov 2026 07:35:50 +0000
asID:                     62563
IP address blocks:        156.233.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120563 (0x1d6f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 19 07:35:50 2026 GMT
            Not After : Nov  2 07:35:50 2026 GMT
        Subject: CN=6aae3b5a-af88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9c:ac:25:e7:bc:8d:92:06:0b:15:30:72:24:
                    67:f4:f6:ec:4a:f0:20:cc:45:fa:d0:5b:ad:32:d2:
                    c7:73:93:d3:91:7f:ea:78:cd:9b:91:1e:31:11:51:
                    5f:2c:a3:6c:34:e0:b4:9c:56:70:14:ec:b4:ed:fb:
                    1f:15:43:59:d6:df:be:5e:71:e8:f3:97:89:68:23:
                    b6:e5:08:ef:59:35:8c:b0:de:d4:de:4c:f3:2d:61:
                    c9:32:29:96:4c:ac:cc:4f:5a:60:a3:a3:a4:2d:30:
                    a6:c9:d0:05:59:1c:1b:77:7a:05:9c:53:8d:19:fd:
                    bf:d9:21:bc:16:6e:4f:a1:05:41:c1:bd:94:bc:b2:
                    89:9a:e4:e0:40:57:82:ba:1a:6b:1e:a3:80:80:86:
                    86:4a:01:d6:b5:a3:fa:5e:8b:a7:66:d1:a1:ec:86:
                    ca:de:35:95:7c:78:77:96:e5:0a:54:74:d1:7d:e0:
                    95:0a:55:23:a6:67:4d:59:dc:aa:9a:7b:75:42:0a:
                    83:3a:31:a9:eb:d7:20:85:6f:31:e1:f0:27:4f:89:
                    6d:99:4f:89:75:4d:27:9e:8d:ad:bf:79:38:9a:fe:
                    cf:9f:ef:d2:3f:f2:45:a8:8c:b0:8d:fb:a8:e0:bc:
                    f0:13:b9:34:29:2b:c9:3b:05:d1:57:9e:7a:0c:d2:
                    67:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AD:C8:25:CB:BC:42:7B:26:AE:8A:B1:B5:78:F7:77:D0:B5:39:67
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BED35F24B3FC11F1986A5FB5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:c5:90:e0:f7:cf:ff:0d:a0:12:8e:50:e5:4b:fb:a2:07:d3:
         48:36:6a:a3:b2:73:46:11:a3:26:a6:b2:16:a2:f8:e6:0a:0b:
         4b:7a:61:29:76:d1:16:d8:9a:8e:0b:ef:fd:a3:ed:6b:d4:74:
         c2:68:71:65:cb:04:24:3e:80:77:d0:18:c2:1a:03:db:fa:f9:
         74:29:36:0c:ed:84:37:0d:97:87:87:97:52:21:82:ed:12:47:
         7f:e9:7c:9f:96:e2:60:7a:fb:50:b7:40:56:04:28:88:e6:65:
         dc:72:02:9a:9d:ae:01:11:65:92:ef:f6:8e:c2:4a:a3:02:77:
         6e:a3:4e:1b:1a:57:46:cb:da:8b:ce:51:df:49:74:d0:91:c8:
         7d:47:a2:c3:a9:29:04:b1:8e:12:cf:2c:3c:e2:9f:69:f7:76:
         38:c3:60:56:88:9b:74:6b:ed:58:45:be:37:d2:bd:41:1c:90:
         95:74:03:be:01:a1:18:66:67:14:8e:e2:3d:fd:ba:8f:91:85:
         45:10:d6:ce:71:51:b3:9b:6a:79:93:2e:b3:15:ad:4d:ae:7a:
         99:cf:3d:99:c1:f8:82:d7:2d:a4:22:06:07:36:c8:cf:fa:f4:
         27:24:ec:01:df:47:51:52:41:43:3f:e4:c4:0b:e3:dc:8b:a5:
         22:a9:df:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----