Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/272FE92E9AD611F1ACA7AABACE1D38B0.roa
File:                     272FE92E9AD611F1ACA7AABACE1D38B0.roa (raw, json)
Hash identifier:          te4Fd4Yk8JF52Klnsr3/IdojmnS6pabkvVgn+b0iRt4=
Subject key identifier:   F6:E0:94:CD:EC:F1:F1:5D:8D:0A:10:EC:30:21:4E:89:A3:AB:AA:56
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CD6B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/272FE92E9AD611F1ACA7AABACE1D38B0.roa
Signing time:             Tue 18 Aug 2026 07:26:40 +0000
ROA not before:           Tue 18 Aug 2026 07:26:36 +0000
ROA not after:            Thu 24 Sep 2026 07:26:36 +0000
asID:                     197574
IP address blocks:        45.192.12.0/24 maxlen: 24
                          45.194.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118123 (0x1cd6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 18 07:26:36 2026 GMT
            Not After : Sep 24 07:26:36 2026 GMT
        Subject: CN=6a840930-8203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:30:90:36:c2:d9:5a:12:b0:d8:30:db:66:3f:
                    6f:a8:f0:ec:e8:ee:0b:83:21:72:45:63:ce:ac:33:
                    38:b9:23:25:29:1c:d5:cb:5d:47:27:01:c4:2c:30:
                    0a:83:21:16:9a:41:b4:d0:e1:a8:83:42:88:a1:4f:
                    ff:1d:f3:44:c6:b5:7d:0b:7a:db:b0:ed:df:c3:ef:
                    d3:ad:ec:ba:6e:bc:bf:6c:94:a1:ad:09:86:c0:3f:
                    5f:e7:92:28:e2:3a:79:ea:33:0c:72:2b:e0:eb:77:
                    11:f9:46:ac:5f:d9:01:62:f2:90:43:d0:d2:fb:f9:
                    14:fb:4d:8d:3d:a0:49:ea:68:14:43:09:4f:14:13:
                    3e:f4:d8:7d:22:58:ec:43:53:0f:e6:b1:0e:01:2f:
                    a5:09:ec:54:3b:e0:0a:93:69:da:c8:d7:89:25:62:
                    25:8d:63:2f:51:36:b5:f0:70:42:8a:7e:11:c2:d5:
                    26:4a:b6:96:b2:ad:6e:c4:2e:bb:9e:f9:42:7c:aa:
                    27:80:ae:bf:46:ec:e6:1a:18:8b:af:bf:f0:be:aa:
                    17:3f:7e:9e:2b:9d:bf:15:86:61:26:0c:1f:91:c8:
                    cd:a6:15:b9:cc:90:b5:5c:e5:64:75:34:94:f5:74:
                    27:81:00:44:9f:ff:05:a2:cb:b9:87:59:82:0b:96:
                    bd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E0:94:CD:EC:F1:F1:5D:8D:0A:10:EC:30:21:4E:89:A3:AB:AA:56
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/272FE92E9AD611F1ACA7AABACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.12.0/24
                  45.194.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:41:6b:29:77:e0:62:9c:99:21:e3:e8:7d:48:8d:4e:29:0c:
         94:0b:40:ff:e8:64:a7:9d:50:54:de:e3:99:8a:00:0b:72:16:
         99:bf:28:4e:c9:b8:b3:de:b6:45:dd:4f:18:a7:f3:ea:61:17:
         5c:b9:79:16:6e:98:eb:0c:b2:f9:1b:df:0d:40:af:7a:70:9d:
         17:8f:84:77:f9:1f:40:0b:fe:8a:2c:9b:ad:ad:57:60:fa:9b:
         ed:a8:15:a4:d8:b5:52:64:3f:78:89:ce:82:a6:d1:df:61:23:
         60:73:7c:c5:91:6f:6b:d1:9f:f3:6a:35:a0:f7:d0:f9:80:86:
         81:66:2b:9b:13:72:1b:86:8d:28:3a:30:26:5c:c4:2a:0d:eb:
         f2:b6:33:b1:ce:b0:c2:a5:f8:f4:9e:21:a7:6d:fd:e5:cb:7f:
         2c:03:0d:e3:4f:f9:59:c8:5d:68:f7:4e:9a:61:2c:33:49:a4:
         77:b0:28:4e:b6:14:71:c2:81:4a:4a:77:2b:ca:52:21:f1:c8:
         ca:f7:cc:19:26:87:47:41:18:46:04:85:cf:e0:6a:59:a7:92:
         68:67:eb:e8:7a:ee:a8:7b:42:75:85:f3:4b:0e:2f:39:93:80:
         15:77:9a:55:08:aa:cf:7c:88:b2:7e:dc:11:c3:b5:76:50:73:
         80:1b:70:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----