Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14D0B8949BA811F18E0FE5B3CE1D38B0.roa
File:                     14D0B8949BA811F18E0FE5B3CE1D38B0.roa (raw, json)
Hash identifier:          a0LGFnFchDRJmJCa9s4KTtBBib27eOKxYBro5HLArnA=
Subject key identifier:   20:C8:E3:09:A1:4C:3C:F3:91:AB:13:10:64:47:CB:F1:FC:5F:1F:42
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE45
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14D0B8949BA811F18E0FE5B3CE1D38B0.roa
Signing time:             Wed 19 Aug 2026 08:29:23 +0000
ROA not before:           Wed 19 Aug 2026 08:29:19 +0000
ROA not after:            Mon 28 Sep 2026 08:29:19 +0000
asID:                     154267
IP address blocks:        45.195.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118341 (0x1ce45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 19 08:29:19 2026 GMT
            Not After : Sep 28 08:29:19 2026 GMT
        Subject: CN=6a856963-5a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7d:81:c2:89:f3:ef:57:0c:ea:db:63:75:83:
                    60:a9:59:be:7b:a7:74:49:d8:7d:20:33:9b:a2:c7:
                    11:61:6b:ef:cc:9a:ce:83:ac:8e:28:c6:e1:d8:dc:
                    c8:8c:92:43:1b:36:db:74:37:b6:92:35:66:a7:cc:
                    b8:8a:d4:0e:47:1f:aa:d7:ee:21:b7:05:2a:f2:fb:
                    50:59:81:16:c5:24:f3:97:12:cb:5c:12:d0:96:dd:
                    ee:24:73:88:8f:08:2b:16:21:94:b7:ff:15:5c:7c:
                    4c:2e:ff:ce:ed:73:a4:98:ae:e8:fa:01:bf:9c:bc:
                    29:5d:72:56:a1:4a:f2:59:40:63:ee:e2:1b:7d:27:
                    20:68:39:df:b8:82:8c:bc:5e:98:e5:f7:1b:2b:d9:
                    30:0b:d3:3a:0c:8b:ea:fb:52:a8:8a:83:fe:f5:ae:
                    a7:68:a4:22:de:9c:30:d3:d4:a4:fa:a6:2f:b5:f5:
                    2e:c7:79:20:b4:07:76:a5:d8:e1:2c:c0:53:c7:4d:
                    08:0d:6f:21:f4:37:a2:81:27:db:f6:0f:b9:9d:80:
                    21:e7:8b:21:3c:18:e2:6c:de:35:01:dd:2d:83:7b:
                    02:f6:5e:b7:49:8b:4e:29:48:32:e3:9c:ce:3c:bf:
                    3c:5e:d2:96:3a:20:39:26:ae:c2:15:04:8c:fb:df:
                    80:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C8:E3:09:A1:4C:3C:F3:91:AB:13:10:64:47:CB:F1:FC:5F:1F:42
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14D0B8949BA811F18E0FE5B3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:51:c3:68:a3:0d:42:d1:77:94:9c:4a:72:83:92:2b:05:63:
         08:86:86:b2:ff:45:3c:70:06:13:de:19:25:bb:76:b7:3b:20:
         26:8d:44:62:6f:6b:31:69:60:c6:98:c2:66:57:c5:51:ee:37:
         2c:3d:ec:e5:c8:4f:6c:9e:5e:96:b0:6b:de:b7:15:97:d4:c1:
         8c:98:c9:eb:b1:70:1a:3d:29:a2:0a:b2:e3:fd:5d:bd:51:72:
         d2:80:45:21:de:d2:ba:15:72:0f:81:23:4e:52:e1:1a:b2:e4:
         f1:eb:16:e5:51:3e:f8:f4:37:83:9f:c5:28:c3:33:30:fa:73:
         10:d1:c0:24:e2:dd:7a:d9:f9:e6:be:7e:ba:2b:42:bc:40:ba:
         d1:32:cb:4a:b4:d5:55:3a:cd:70:c4:7b:87:4b:1f:ef:33:2e:
         9a:87:ef:3b:a9:26:f0:d1:90:fc:09:f0:75:da:26:54:6f:d7:
         a2:3b:9d:44:6f:d8:d9:cd:1e:45:f9:ff:8e:82:a8:fc:50:00:
         f4:ed:da:75:c6:b3:7d:aa:5a:7f:09:46:51:2b:03:1c:1a:c5:
         48:f1:e0:df:02:b0:f4:3a:e5:05:9b:44:43:70:f7:6c:a3:f8:
         58:d4:77:a3:fb:fe:2d:cc:c8:cf:74:ca:4b:64:32:b7:1a:d7:
         1a:87:52:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----