Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/077541628FD511F188B60606CF1D38B0.roa
File:                     077541628FD511F188B60606CF1D38B0.roa (raw, json)
Hash identifier:          /gjQMKGCgR9HWdwwtFmYl+c0boAtxI4SuefZZbO5sEE=
Subject key identifier:   F9:47:D4:8D:06:29:67:92:C4:9F:96:0A:7C:43:79:7F:5D:A9:45:DD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C9A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/077541628FD511F188B60606CF1D38B0.roa
Signing time:             Tue 04 Aug 2026 07:20:54 +0000
ROA not before:           Tue 04 Aug 2026 07:20:50 +0000
ROA not after:            Wed 09 Sep 2026 07:20:50 +0000
asID:                     3257
IP address blocks:        45.199.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117160 (0x1c9a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  4 07:20:50 2026 GMT
            Not After : Sep  9 07:20:50 2026 GMT
        Subject: CN=6a7192d6-6cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:de:98:68:08:5d:cf:2a:2d:0c:86:65:46:b3:
                    d2:2b:d8:92:e1:07:62:16:89:d4:e6:b8:98:eb:87:
                    21:c1:b4:b2:3a:3d:fe:7f:1f:25:35:a6:19:88:05:
                    fe:5f:c4:c6:56:c1:ad:ff:b3:f6:63:61:fc:df:d5:
                    41:f4:b9:33:37:ca:82:38:00:b7:98:a0:80:91:b8:
                    79:ea:dc:43:c8:7e:81:a0:52:b8:5a:fd:df:15:51:
                    5e:2f:88:08:e2:96:ca:17:15:d5:75:99:19:8f:35:
                    f6:1d:68:6f:b8:6f:75:56:46:5b:cf:c1:cd:cf:cb:
                    8e:97:00:55:cc:51:d8:be:ae:b1:fe:95:cf:c7:a6:
                    44:2c:94:0f:a8:60:a1:85:76:3b:ef:af:9e:d1:69:
                    b3:1b:bc:3a:52:ca:24:5b:03:f0:9f:79:23:04:30:
                    8c:ea:63:61:d2:13:9e:56:82:ce:b9:f9:64:bf:83:
                    a1:58:24:c2:0c:49:b8:9a:16:f5:a8:4e:f4:6c:11:
                    91:5b:c6:88:00:41:cc:85:c2:ec:d2:cc:92:c4:6e:
                    66:d5:6d:3c:80:7a:1e:1e:3e:76:c9:80:86:73:d6:
                    3f:9a:c4:e4:2c:2e:18:1b:92:86:30:5a:c2:03:60:
                    22:e7:20:e8:cb:98:bc:84:f5:03:17:e4:de:c1:65:
                    1b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:47:D4:8D:06:29:67:92:C4:9F:96:0A:7C:43:79:7F:5D:A9:45:DD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/077541628FD511F188B60606CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:5e:98:7d:e3:91:84:fc:ec:02:e6:e5:3d:2b:a3:58:7e:63:
         36:74:d1:68:38:5e:ee:1c:ca:31:fb:43:4d:13:3d:7b:02:47:
         7c:82:08:38:f7:c1:cd:82:d3:f1:c1:c0:fe:54:72:1a:e0:73:
         8a:14:db:6f:08:de:57:76:83:cd:48:b6:b8:09:6a:f3:85:14:
         a8:b1:a5:69:b9:85:39:79:cb:1e:ee:42:29:73:53:26:81:47:
         2f:fb:06:19:42:ca:66:4f:36:5b:78:6d:5d:86:33:ab:42:22:
         ec:2a:82:0a:92:71:c8:cd:eb:b1:9c:63:cb:f5:18:d0:5e:3f:
         e7:8a:9c:79:78:29:f2:82:41:b9:06:0e:22:f4:e3:1e:c3:69:
         39:13:16:cc:b6:41:10:5f:fa:81:1c:57:07:57:5f:be:97:7f:
         d9:50:cf:8f:c6:3a:39:f5:97:aa:81:1a:cf:cb:a2:5f:dc:88:
         3b:3f:f1:14:76:12:fd:2b:66:93:9c:74:5c:b9:d1:c0:5c:31:
         03:a1:5c:bc:88:84:26:18:93:6f:f6:0e:cc:40:c4:3f:d4:c5:
         b8:0d:81:aa:27:14:7b:92:e0:b9:d8:97:3d:3b:d7:61:f5:f3:
         23:0d:52:a0:cd:3a:f9:50:e4:f8:aa:c8:b2:b0:14:96:87:f2:
         6a:b2:ec:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----