Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDE39514B19E11F189C68EFDCE1D38B0.roa
File:                     EDE39514B19E11F189C68EFDCE1D38B0.roa (raw, json)
Hash identifier:          eP4GYfc8dkz630uVzU1eQuxUJkqZ+yz9JWRC3ab6W1c=
Subject key identifier:   8C:44:AA:F9:09:48:B0:E7:23:75:1D:14:87:BB:94:C0:1F:74:BD:15
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D690
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDE39514B19E11F189C68EFDCE1D38B0.roa
Signing time:             Wed 16 Sep 2026 07:19:18 +0000
ROA not before:           Wed 16 Sep 2026 07:19:14 +0000
ROA not after:            Fri 25 Sep 2026 07:19:14 +0000
asID:                     17497
IP address blocks:        156.255.48.0/22 maxlen: 24
                          156.255.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120464 (0x1d690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 16 07:19:14 2026 GMT
            Not After : Sep 25 07:19:14 2026 GMT
        Subject: CN=6aaa42f6-4656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:a8:41:9f:de:d1:38:10:ac:b0:9f:48:4e:
                    41:2b:ac:27:1b:2f:5d:b9:c7:f2:f2:2e:10:08:0d:
                    ec:a5:a0:16:f6:c1:0c:11:fe:c3:1a:e4:8c:f7:cb:
                    3f:b4:2d:b8:74:70:d7:c6:27:1f:28:1e:a4:44:95:
                    4d:ff:03:b6:ea:d1:67:4b:cc:24:67:10:d5:ad:36:
                    de:a0:c8:fa:d3:8e:58:e6:fc:be:20:77:cf:86:58:
                    33:cd:5e:fc:17:bb:c4:51:ae:e6:a6:2f:ab:f4:e8:
                    79:d7:5a:36:61:31:c5:9c:9c:76:96:72:b8:34:9f:
                    18:df:1d:d8:b1:c3:95:56:51:7f:d5:a5:46:50:60:
                    ed:53:d5:95:99:a5:fb:6a:74:8f:79:9c:d4:b3:e1:
                    6b:3e:1e:98:41:d5:54:32:f9:12:7c:89:a7:96:8b:
                    86:08:4f:d9:64:8d:ec:b3:25:1e:9b:35:bc:4e:03:
                    7f:24:9a:e7:1a:1b:5b:1a:26:09:6e:b2:f3:70:54:
                    f2:67:72:6d:fb:12:e3:49:24:7e:8a:23:4c:dd:45:
                    2b:03:7c:ad:30:ac:e5:44:a2:9c:26:45:ad:f3:f6:
                    99:db:8c:08:33:c2:b3:78:c7:50:86:ab:7a:d2:4d:
                    e3:4b:ce:79:d8:34:44:7d:5f:f2:77:d4:76:4e:d6:
                    56:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:44:AA:F9:09:48:B0:E7:23:75:1D:14:87:BB:94:C0:1F:74:BD:15
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDE39514B19E11F189C68EFDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.255.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6d:4b:43:84:f9:af:a5:02:7f:9b:70:48:db:b6:e7:05:da:34:
         41:48:03:96:d0:d2:24:6a:d5:40:91:81:31:c3:a8:c8:6d:05:
         11:f5:87:cd:db:c8:51:90:f1:e7:58:33:18:57:39:a3:92:3a:
         e1:95:de:36:92:61:5d:b7:9f:fb:d4:a9:bf:b1:f7:5c:36:04:
         05:c8:73:82:4e:0d:5f:62:5a:ff:9b:55:cc:ed:10:5f:d3:68:
         86:71:7f:c8:71:6f:ce:93:37:36:fc:ee:c7:70:db:25:b6:e3:
         cb:1c:01:eb:6e:7f:5c:57:20:21:64:fd:22:85:97:da:c9:5d:
         46:a7:0d:55:48:ab:29:6b:6e:ed:de:70:12:60:3e:d1:be:e3:
         bf:a7:77:22:39:61:61:ff:d8:dd:55:00:15:bc:1f:92:16:65:
         a7:77:e4:11:20:b4:74:e9:42:8b:7c:8e:10:b7:9a:d9:eb:2c:
         d1:bb:c2:60:56:26:8e:e5:df:f3:b2:62:c0:41:df:17:4f:de:
         53:46:33:43:f8:59:e5:d2:c3:06:55:08:9d:dc:cf:e0:c3:97:
         71:b2:32:95:da:a3:8f:33:c0:ee:2b:f9:08:8b:ed:87:36:43:
         61:21:24:96:cf:8b:b3:7c:d7:1d:1d:6a:45:bb:89:84:c4:7e:
         bc:5b:30:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----