Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19562F40AA8811F18085E40BCF1D38B0.roa
File:                     19562F40AA8811F18085E40BCF1D38B0.roa (raw, json)
Hash identifier:          huhxlGrvDrUtg50c/LIoKKJFgknunA9IuT0E+gG/634=
Subject key identifier:   98:8F:BC:2F:5B:A3:45:CC:A9:D0:9A:6A:64:93:27:2D:13:A8:0A:03
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D3AE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19562F40AA8811F18085E40BCF1D38B0.roa
Signing time:             Mon 07 Sep 2026 06:48:14 +0000
ROA not before:           Mon 07 Sep 2026 06:48:11 +0000
ROA not after:            Thu 17 Sep 2026 06:48:11 +0000
asID:                     147176
IP address blocks:        45.201.9.0/24 maxlen: 24
                          45.201.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 10 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119726 (0x1d3ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  7 06:48:11 2026 GMT
            Not After : Sep 17 06:48:11 2026 GMT
        Subject: CN=6a9e5e2e-2ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:85:a8:88:44:df:19:01:82:a4:2e:d4:c0:48:
                    19:2d:09:10:7d:b5:ea:1f:11:e1:61:63:1f:79:29:
                    07:17:3a:6f:a1:1b:d3:4e:a0:6b:c4:81:fc:dc:78:
                    bf:37:7e:69:16:17:30:bf:ad:8d:72:57:c4:62:d3:
                    f0:11:62:14:dd:ef:be:15:f0:98:42:e8:ee:54:a4:
                    3c:7e:1d:31:4b:39:6f:05:3c:8a:76:74:c4:20:ed:
                    5a:f0:0e:33:f2:4a:31:4c:1b:24:90:b7:6e:e8:8a:
                    35:89:e4:ad:4e:e2:0b:ac:2b:84:ca:ae:c0:f4:85:
                    94:9e:ec:a8:08:a8:b9:a7:a0:0f:e2:a1:c0:96:ff:
                    74:1e:68:fd:36:15:2c:ed:21:b7:1e:b3:22:d5:87:
                    e6:4f:f3:ba:5d:7d:56:b1:80:69:1d:0b:de:ef:e3:
                    0a:f6:5b:78:a0:d2:a9:df:bd:c2:4c:36:e6:4c:9d:
                    7c:6e:65:b4:35:76:43:3e:bd:47:96:5f:54:19:77:
                    5a:7e:6d:c7:0d:87:b9:cc:d3:6f:6a:cf:16:d6:3f:
                    67:f3:15:f7:89:ee:fa:1c:2a:b9:f5:b2:72:cc:a2:
                    a9:ef:d9:a0:5c:96:a3:2b:b1:8f:49:7a:19:fe:c4:
                    55:64:43:a7:c8:99:3b:bf:6d:ea:5a:f9:ee:cc:7b:
                    72:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8F:BC:2F:5B:A3:45:CC:A9:D0:9A:6A:64:93:27:2D:13:A8:0A:03
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19562F40AA8811F18085E40BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.9.0/24
                  45.201.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:ba:19:78:fe:85:6f:9d:f1:8d:2f:35:e4:c7:cc:bf:28:16:
         e9:e0:e7:53:ab:7d:85:09:94:28:e7:cc:f5:37:df:dc:0e:78:
         bc:43:4b:30:ee:e3:ea:2b:8b:7b:57:dc:1a:92:f4:3a:86:72:
         04:74:31:3d:b1:dc:7a:6e:ad:e6:89:c1:1c:26:be:e8:a0:84:
         cc:f1:44:b1:0c:a9:6c:d9:43:28:90:c8:48:00:bc:54:67:0a:
         f2:f1:96:58:6e:1c:87:bb:17:9c:9f:f4:ed:2d:21:19:4e:a6:
         58:e6:36:43:db:3b:82:38:2f:be:e1:f0:bc:30:57:aa:b5:97:
         20:6d:2b:bb:a8:38:34:42:36:fd:64:23:7b:24:cd:86:2e:8d:
         5b:54:39:34:b5:07:0e:50:8c:96:37:44:52:24:e7:8a:50:54:
         75:11:0a:0f:d5:9e:53:ee:c4:ad:de:e9:90:1a:23:fe:9a:23:
         3b:da:b4:fd:b8:0e:41:37:dd:92:0b:9a:f8:39:7d:10:c8:27:
         8d:82:cb:5b:77:77:c7:73:22:74:7b:bc:c1:6c:d5:84:0b:11:
         3a:10:79:5b:ad:3e:38:14:ea:49:a5:ab:09:8d:f2:0b:18:8a:
         ca:93:d4:4b:b8:58:03:9d:1a:18:7d:78:67:f2:fe:41:f5:2b:
         6c:a4:30:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----