Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24B73928922E11F1841B57C0CE1D38B0.roa
File:                     24B73928922E11F1841B57C0CE1D38B0.roa (raw, json)
Hash identifier:          O1uvmgK/DreK/ZRKo1eIPuurt4xor+clUmPEZ3C9Dfo=
Subject key identifier:   C7:F9:1D:7C:DC:67:54:64:BE:66:E7:17:36:53:35:1A:34:9C:3C:58
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CA12
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24B73928922E11F1841B57C0CE1D38B0.roa
Signing time:             Fri 07 Aug 2026 07:03:51 +0000
ROA not before:           Fri 07 Aug 2026 07:03:47 +0000
ROA not after:            Sun 06 Sep 2026 07:03:47 +0000
asID:                     147176
IP address blocks:        45.201.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117266 (0x1ca12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  7 07:03:47 2026 GMT
            Not After : Sep  6 07:03:47 2026 GMT
        Subject: CN=6a758357-952a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:2b:1c:d6:f7:7a:47:81:22:84:c1:1a:73:
                    5d:0b:0b:2d:1b:a7:27:7a:06:33:ca:50:e0:60:dd:
                    0f:7b:c6:16:72:b8:93:5f:51:35:b5:be:94:35:ec:
                    58:4d:23:42:ad:02:ff:a4:44:2d:45:08:d5:99:de:
                    d5:dd:7d:6b:0f:82:ae:15:79:9e:b9:f0:41:28:69:
                    14:ad:5c:2d:fd:17:e1:cd:f0:14:02:07:f1:62:cf:
                    29:b5:d8:95:20:bc:ce:93:54:c1:71:9b:3b:0d:c3:
                    8c:79:85:2e:40:75:48:ad:ec:e1:6c:c9:7f:e9:dc:
                    c4:a9:ba:c5:b3:05:20:0c:dd:da:6e:f2:a1:4e:f8:
                    34:6a:b9:90:5e:96:7e:6e:cd:cb:24:dd:71:e3:11:
                    86:c6:31:be:a2:ca:22:0e:d3:b6:cc:3a:fd:d3:4f:
                    05:9b:c1:f5:ae:b1:ad:cc:75:63:bd:89:92:85:4a:
                    80:2b:c4:ac:f2:0a:92:0a:37:90:75:d0:43:9e:6a:
                    9e:4e:b3:d1:c4:ab:ec:3f:df:d8:43:50:6c:1a:16:
                    24:d1:f9:63:11:43:a2:53:d5:2f:fd:b3:c0:a5:45:
                    88:7b:c4:79:49:2e:46:ed:e1:a9:2a:0e:d2:f4:7d:
                    39:1f:18:2f:0b:4f:53:47:de:5d:1f:63:a6:58:0b:
                    4c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F9:1D:7C:DC:67:54:64:BE:66:E7:17:36:53:35:1A:34:9C:3C:58
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24B73928922E11F1841B57C0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:4d:34:31:dc:f3:99:70:cc:ba:73:71:8d:12:f8:4c:83:7e:
         d5:78:2b:f3:2b:ce:4a:f7:21:4c:03:c9:01:63:d2:94:c6:b9:
         01:86:01:29:7e:d2:d8:60:19:28:f5:8b:26:54:46:c8:0a:2a:
         de:ce:68:61:24:c8:d2:8c:25:ab:76:45:7d:aa:ce:07:66:da:
         d6:76:a2:33:b5:58:81:24:36:39:53:e8:88:15:f6:fb:4a:fd:
         bb:eb:41:6e:60:1c:64:6e:39:d5:6e:b8:89:c3:9a:e8:67:1c:
         df:50:5a:71:15:04:9e:b0:01:be:5d:fc:86:2c:d0:55:d4:da:
         90:87:0e:cb:07:ab:c9:d1:da:be:5a:e2:0c:f2:cf:96:57:96:
         73:b6:c7:5f:87:b4:71:0e:90:e4:ce:33:db:b0:90:82:e4:41:
         2a:b1:25:73:e1:31:ca:3a:ff:ec:30:07:94:5b:23:8b:8f:4e:
         1f:91:8c:21:f5:d6:88:ff:48:c0:be:01:22:67:4a:77:ad:36:
         f7:a0:59:60:5e:c1:e4:2a:8d:39:02:98:be:f1:f2:93:ad:7c:
         7c:15:e3:bf:3c:c6:60:61:14:e4:52:0f:d1:4e:08:04:e3:74:
         61:b6:d2:d4:e0:96:4a:3a:c1:99:d4:0d:19:8d:7e:34:6e:e1:
         72:46:57:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----