Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/201A98F8C86411F1B960D7FDCE1D38B0.roa
File:                     201A98F8C86411F1B960D7FDCE1D38B0.roa (raw, json)
Hash identifier:          DT4C/OexFOiY+zXeEyLIbA5tpaT7DlZQyXVkxwDnkGc=
Subject key identifier:   8D:51:BC:D0:C3:EB:47:3F:88:58:AD:0D:05:38:DB:DB:4D:3F:ED:E6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DD70
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/201A98F8C86411F1B960D7FDCE1D38B0.roa
Signing time:             Thu 15 Oct 2026 06:46:19 +0000
ROA not before:           Thu 15 Oct 2026 06:46:14 +0000
ROA not after:            Tue 24 Nov 2026 06:46:14 +0000
asID:                     2914
IP address blocks:        45.195.244.0/23 maxlen: 24
                          45.202.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122224 (0x1dd70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 15 06:46:14 2026 GMT
            Not After : Nov 24 06:46:14 2026 GMT
        Subject: CN=6ad076bb-b5ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3f:27:9c:46:75:18:91:42:2c:c9:3c:67:61:
                    c3:d5:ff:9e:da:23:52:87:b8:06:65:17:8b:eb:bd:
                    44:e8:10:df:3b:e6:4e:ee:c5:42:40:b8:8a:fa:96:
                    e2:d2:8e:94:a1:14:8b:3b:57:19:f0:df:4f:bf:c7:
                    c0:cb:1c:55:e7:cd:f4:eb:3c:77:2a:e2:26:a4:3f:
                    ad:a8:a6:c9:12:05:bf:a8:9a:b9:e4:41:24:8a:d5:
                    ec:ca:88:ed:b1:ca:06:8a:a6:6e:c1:2c:06:5d:9a:
                    14:11:3f:55:00:27:86:64:1b:f6:ba:f3:e9:89:5f:
                    74:03:56:ee:80:ab:fa:13:55:d2:0e:79:8b:5f:b1:
                    d5:d2:38:21:9f:70:39:a2:dc:7a:6a:88:5c:96:51:
                    76:84:da:1d:9d:bd:27:3f:dd:7b:4a:9e:a8:e2:a5:
                    71:a4:6b:07:75:b8:38:60:b7:bd:59:ef:5b:96:23:
                    eb:e2:b9:9c:0b:90:25:cc:fd:41:cc:66:40:a3:a6:
                    d1:3c:eb:ce:9c:57:f1:66:9b:58:af:22:c0:5a:8a:
                    8a:cf:55:5e:a8:f7:07:b7:0e:4e:b0:33:1b:70:3d:
                    75:aa:64:f9:81:fe:7f:e2:8d:70:cb:13:ec:68:06:
                    8f:4f:0b:b1:5c:a2:8f:fe:4f:a8:06:88:d4:41:51:
                    10:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:51:BC:D0:C3:EB:47:3F:88:58:AD:0D:05:38:DB:DB:4D:3F:ED:E6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/201A98F8C86411F1B960D7FDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.244.0/23
                  45.202.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:a4:ee:93:56:78:df:aa:1f:e1:cb:e1:7a:5c:f7:ce:0b:85:
         66:47:a2:a7:24:0e:44:5b:cd:ab:7a:3a:2d:ad:3b:b8:e9:53:
         05:b7:77:5b:70:13:7f:78:8d:73:1b:6d:15:da:45:59:32:3a:
         f1:d0:4e:7b:28:8e:fd:bc:af:41:0e:2c:e2:b6:cd:1a:86:58:
         dd:f2:0c:d9:ca:55:a6:8f:25:8d:3f:c1:0f:a4:c8:a3:bb:ae:
         7a:b4:83:e4:c1:9d:38:7c:1e:c9:e1:99:fb:7c:7a:15:ef:f4:
         2b:54:91:fa:ed:d3:32:7c:25:f6:73:49:e9:21:40:ff:09:ae:
         cb:d7:08:3c:37:ce:d9:f9:dc:5d:43:da:80:6d:34:81:76:cb:
         6b:c5:a4:9d:5e:70:05:42:6f:2a:4a:57:36:7f:69:2d:a1:24:
         55:51:f2:77:d5:0d:b0:9d:c4:0e:7c:68:a3:f1:5c:bf:bd:9a:
         fd:e3:67:98:a3:9a:bd:6b:1f:6c:6d:01:c2:98:e6:9d:fa:4e:
         05:80:6b:06:31:b7:44:f8:09:b6:24:cb:2c:0d:17:9f:56:03:
         6a:70:a7:33:69:b2:ba:d0:c9:81:cc:e8:e5:bb:39:d4:ec:a0:
         aa:3a:17:8c:81:a4:6c:b9:ae:ff:76:3a:df:b3:5b:05:c3:00:
         68:67:4b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----