Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1465BF6CCAC911F185A2C919CF1D38B0.roa
File:                     1465BF6CCAC911F185A2C919CF1D38B0.roa (raw, json)
Hash identifier:          15kjBdUVmqLMQnL4ZDQILTNbM8zsIr7txxUgbC5/IK8=
Subject key identifier:   AD:2C:F3:1D:19:21:E1:7D:E7:4D:20:83:4E:F9:9C:0D:2B:63:74:04
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DE81
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1465BF6CCAC911F185A2C919CF1D38B0.roa
Signing time:             Sun 18 Oct 2026 07:54:01 +0000
ROA not before:           Sun 18 Oct 2026 07:53:56 +0000
ROA not after:            Fri 04 Dec 2026 07:53:56 +0000
asID:                     8796
IP address blocks:        45.194.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122497 (0x1de81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 18 07:53:56 2026 GMT
            Not After : Dec  4 07:53:56 2026 GMT
        Subject: CN=6ad47b19-4a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f6:67:dc:89:56:69:30:86:83:78:52:72:37:
                    00:9e:94:64:6a:ee:36:23:31:f1:8c:2f:14:99:5e:
                    9d:71:ed:ba:8a:04:c2:36:1d:2d:26:31:3b:9d:c7:
                    85:1b:a1:94:2c:48:3b:74:9d:31:9d:aa:42:d7:18:
                    47:8e:a1:8a:c5:67:94:33:44:6b:96:ea:24:ac:e7:
                    3c:99:3c:d1:1f:4b:05:45:b1:9f:9c:da:16:bf:f9:
                    72:0d:fd:26:9e:60:cd:5f:0f:7e:23:ad:de:70:7d:
                    ee:fd:d7:3c:36:2d:b6:ed:3b:43:1f:9f:55:0e:ef:
                    64:90:0b:c7:a0:c1:6c:13:ac:ba:74:4e:7c:bd:a7:
                    9a:d2:6b:e1:a9:eb:49:f1:0c:ce:df:2e:9f:1d:9a:
                    c5:ce:2a:dd:55:ec:ae:11:9e:41:22:09:6a:68:6b:
                    f1:95:b2:56:20:f5:f8:fc:c0:83:f9:11:af:c5:5e:
                    c5:8e:a1:87:20:b8:9c:bb:7a:5f:fe:e2:25:53:c8:
                    95:2b:97:07:b9:0c:4b:0e:c4:e1:57:7a:e2:e1:43:
                    1b:3f:fd:c5:fb:79:e3:55:ec:a4:54:80:2a:3a:5b:
                    8d:12:7f:e5:63:de:33:0a:5a:88:97:ae:f6:e7:fb:
                    a4:dc:14:b9:65:79:c2:0f:f1:b6:27:f3:8c:61:8d:
                    7c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2C:F3:1D:19:21:E1:7D:E7:4D:20:83:4E:F9:9C:0D:2B:63:74:04
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1465BF6CCAC911F185A2C919CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:34:2b:93:43:c7:b3:d1:90:c5:2b:2e:53:9e:4e:0c:cb:c0:
         53:6c:4a:2c:81:cc:9d:9e:3d:e2:69:6d:2d:92:67:ab:ef:c9:
         b7:e9:fd:af:cc:43:84:b6:d1:5e:4c:44:85:ad:3b:3a:0b:c9:
         9f:12:0d:04:6f:93:e3:b6:82:3a:00:10:f9:82:19:37:ca:0c:
         93:d3:f1:7f:d6:c1:6c:da:00:7e:ef:de:38:14:e1:8e:82:5c:
         4f:0b:0f:52:3a:63:41:10:1d:0c:03:09:38:6a:a4:eb:61:c4:
         83:8e:c0:6a:76:3a:24:a8:c1:bb:68:b1:77:d6:4a:16:a1:03:
         f5:75:c7:d3:d5:8d:c7:30:93:f3:db:b9:e0:70:00:69:97:88:
         87:86:96:35:63:18:44:a2:a9:f4:d9:73:fc:37:11:fa:3a:08:
         46:25:12:6f:9e:36:3f:5a:6c:84:d1:8b:b5:b0:a8:8c:c0:24:
         3e:fe:d8:c3:b7:f4:c3:d7:15:2e:89:53:9d:53:0d:21:c6:9b:
         da:06:63:32:eb:a7:95:f6:96:82:b6:b0:90:ef:48:a4:7a:a6:
         4b:f7:26:f6:ad:2c:c9:17:bf:4b:73:14:ff:22:8a:6c:f5:54:
         59:3b:20:21:d1:03:f8:f2:a3:5f:2e:27:8b:29:9a:fa:63:7e:
         de:77:9c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----