Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7B35A50C3DF11F195F5D1FCCE1D38B0.roa
File:                     E7B35A50C3DF11F195F5D1FCCE1D38B0.roa (raw, json)
Hash identifier:          +Z2qqd8LJwF4nj0z3kuUqdsdLglGRnco++4+MX1DYVc=
Subject key identifier:   F6:B5:60:73:BE:43:95:48:DD:88:D9:C3:85:81:57:41:A7:37:9C:5A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC3B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7B35A50C3DF11F195F5D1FCCE1D38B0.roa
Signing time:             Fri 09 Oct 2026 12:49:46 +0000
ROA not before:           Fri 09 Oct 2026 12:49:40 +0000
ROA not after:            Tue 27 Oct 2026 12:49:40 +0000
asID:                     218919
IP address blocks:        156.252.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121915 (0x1dc3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  9 12:49:40 2026 GMT
            Not After : Oct 27 12:49:40 2026 GMT
        Subject: CN=6ac8e2ea-4a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:75:cc:ae:13:47:25:3d:23:d3:7e:d5:f1:c0:
                    e0:58:0d:63:b8:fc:ab:0b:ea:65:c2:5c:b2:aa:01:
                    1f:4c:03:9e:37:ec:6a:84:65:e2:59:5f:96:c2:85:
                    d4:04:b0:77:34:93:5c:c6:40:6f:ec:16:7a:b3:a8:
                    21:37:9f:f2:63:7a:03:b9:47:c0:96:c2:d5:ea:61:
                    1c:45:59:5a:01:38:94:f7:28:7a:00:da:e9:1e:96:
                    e4:58:a8:c6:9f:93:9f:61:ba:16:62:e0:a9:0a:ea:
                    31:6e:4c:a4:12:ae:97:e8:e2:bb:6b:52:68:e8:65:
                    8b:fd:74:5d:89:62:e8:36:11:3a:f5:cc:13:0d:a2:
                    7a:3d:1e:b0:58:92:c5:25:61:2b:dd:19:3f:ba:fb:
                    d0:34:56:aa:fd:f4:13:97:74:06:38:a3:2f:49:89:
                    92:d7:b6:41:69:82:41:40:fc:e5:90:11:bd:03:60:
                    63:07:7b:d6:ec:65:ba:98:65:a9:ad:e2:af:08:9d:
                    9a:e6:12:32:8b:1f:17:06:70:4e:17:be:df:c9:6d:
                    ec:60:9b:c1:46:92:df:3f:39:a1:fc:19:6c:59:9a:
                    dd:26:d8:aa:3d:b6:36:57:d0:56:dd:67:e1:41:ca:
                    8e:bf:ae:14:9f:56:98:8d:a0:db:3d:0e:2f:4e:e9:
                    28:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B5:60:73:BE:43:95:48:DD:88:D9:C3:85:81:57:41:A7:37:9C:5A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7B35A50C3DF11F195F5D1FCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.252.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:b8:88:64:2e:1c:35:66:61:99:9c:c9:e7:36:a6:18:59:52:
         70:69:1d:5b:89:53:b8:69:c2:f7:32:84:3f:11:50:bd:22:c9:
         6b:d6:eb:55:04:b5:84:29:7d:6a:a3:c1:30:14:7b:46:6d:4b:
         cb:35:3a:bf:67:81:62:a8:df:70:ca:8e:33:d5:9f:88:1c:a2:
         27:97:74:96:9e:cf:43:26:78:fa:7f:f5:c9:71:7a:e6:70:8e:
         75:62:1b:8b:1f:ed:58:ac:2c:56:5a:6f:b3:cb:7b:2e:2a:92:
         8d:c5:58:80:2c:20:f5:74:ad:63:28:64:e0:eb:03:70:1e:68:
         e8:8a:8b:ac:d9:d9:8e:50:9f:50:b7:96:97:0d:6d:21:a5:b1:
         4e:41:8b:65:9c:54:95:ef:3f:6c:c4:37:09:d6:1f:c8:40:d1:
         c7:e1:74:69:65:e7:56:fa:0b:4b:b9:06:32:47:79:1f:0c:60:
         ca:cd:66:3b:7b:21:6c:e8:74:26:3d:fc:5b:c0:7a:c7:21:67:
         89:4e:f2:0b:82:19:db:58:19:c1:a6:73:41:ad:fd:4d:38:fc:
         f1:b7:57:3e:0a:4e:11:43:57:69:a1:0a:66:6e:d4:4e:9e:7e:
         53:d1:80:ae:11:7a:c4:ce:29:8e:6c:23:e9:3f:66:44:67:e6:
         94:82:b7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----