Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/037C2C24C95F11F1A0D659DBCE1D38B0.roa
File:                     037C2C24C95F11F1A0D659DBCE1D38B0.roa (raw, json)
Hash identifier:          GcDhYXQwQjrRg9cB6jYs20NIoZniMtBx8nWWl4c9lI4=
Subject key identifier:   21:2D:DA:97:A0:75:68:0F:F7:04:15:28:B5:04:F7:A5:BE:F4:C1:DF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DE00
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/037C2C24C95F11F1A0D659DBCE1D38B0.roa
Signing time:             Fri 16 Oct 2026 12:42:15 +0000
ROA not before:           Fri 16 Oct 2026 12:42:10 +0000
ROA not after:            Sun 15 Nov 2026 12:42:10 +0000
asID:                     218391
IP address blocks:        45.195.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122368 (0x1de00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 16 12:42:10 2026 GMT
            Not After : Nov 15 12:42:10 2026 GMT
        Subject: CN=6ad21ba6-2145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:0a:e9:7f:99:1f:b6:9c:7e:74:db:91:59:
                    25:a1:0f:bf:78:4e:f2:4f:62:c1:12:46:ad:a7:79:
                    2c:4f:0f:92:86:66:2a:5a:f0:b1:28:6d:b2:72:70:
                    40:30:7e:b4:d2:15:cc:93:34:0e:58:28:7d:37:46:
                    e1:3a:66:5d:f1:4d:03:01:70:3f:38:4e:6d:58:d2:
                    b5:e4:7c:0e:db:a0:9f:87:04:7c:33:70:ef:27:4d:
                    81:b5:f6:c7:ca:45:03:b5:ff:93:46:90:70:75:71:
                    ae:05:ab:52:fc:c6:f0:83:6b:b6:72:71:a4:e9:3b:
                    89:e5:7b:fc:1e:60:77:be:71:ac:03:a3:82:58:c1:
                    e0:e1:04:e4:99:f6:dc:0a:54:40:b8:ff:3c:d7:ea:
                    81:90:d3:f3:f0:05:25:e8:c4:5c:a8:0f:65:00:1f:
                    71:1f:64:ca:30:75:9b:ae:ad:74:c8:f5:e5:8b:8d:
                    fb:c4:f4:e0:cd:41:c9:5b:2f:15:ef:20:d3:73:c0:
                    d6:86:27:b3:d9:9f:55:94:cb:24:e4:76:05:2c:0d:
                    7d:0d:c5:6d:17:11:4e:f1:ad:99:34:31:ec:a7:da:
                    19:43:75:30:20:23:87:cd:e7:2b:db:8f:3a:c5:bc:
                    d8:de:cc:4f:3a:8d:46:a1:f4:8c:11:18:6f:98:8d:
                    70:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2D:DA:97:A0:75:68:0F:F7:04:15:28:B5:04:F7:A5:BE:F4:C1:DF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/037C2C24C95F11F1A0D659DBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:d8:11:10:9a:c3:b9:c8:08:7d:af:8e:14:13:4f:0e:38:aa:
         ad:01:e6:22:2e:59:4a:b1:17:09:34:6f:8a:4f:84:fe:28:61:
         6c:bb:3d:f2:71:b3:77:a2:34:2b:a5:b2:1f:d9:fc:c1:5c:29:
         fb:2a:72:ef:9b:42:f1:b0:46:86:47:4f:f0:19:4c:2b:9b:63:
         32:fa:8f:b9:c3:9e:cb:ec:a8:68:65:52:02:27:10:0b:94:09:
         32:2b:e7:26:84:af:a4:be:1a:3e:30:f3:82:5b:de:95:d6:3f:
         90:52:f7:92:dd:5b:64:bd:ac:90:5f:77:48:34:c2:5f:c6:70:
         6c:6a:1a:fe:ae:09:35:de:77:47:9a:bf:63:fd:62:44:c8:89:
         42:fd:88:4e:36:16:12:20:87:e5:4a:8c:e2:bb:27:fe:26:36:
         a6:bf:c5:cc:6f:29:d4:f7:48:ee:a1:99:d3:7e:bf:93:df:8c:
         92:e5:40:c6:26:43:2e:17:f6:15:66:18:49:66:1d:44:19:a4:
         c2:32:2f:9c:09:1f:33:53:c1:75:c0:1c:b5:f3:4d:e6:39:9d:
         f4:0e:10:d0:00:2e:2e:ea:fd:a4:41:54:5f:64:a6:77:73:58:
         e8:dc:ea:ed:95:6c:72:f5:72:23:df:c4:0e:3b:10:1c:89:03:
         7c:13:53:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----