Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/286CE06E949911F18BD14CE4CE1D38B0.roa
File:                     286CE06E949911F18BD14CE4CE1D38B0.roa (raw, json)
Hash identifier:          HolbHOFKpnI6POcarG03tTIJJfprZkZp+11BrBKeYuI=
Subject key identifier:   04:54:E7:CA:82:48:E4:36:00:D7:03:82:13:13:48:F1:15:DB:76:A0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CAEB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/286CE06E949911F18BD14CE4CE1D38B0.roa
Signing time:             Mon 10 Aug 2026 08:54:56 +0000
ROA not before:           Mon 10 Aug 2026 08:54:52 +0000
ROA not after:            Thu 10 Sep 2026 08:54:52 +0000
asID:                     38136
IP address blocks:        45.196.98.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117483 (0x1caeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 10 08:54:52 2026 GMT
            Not After : Sep 10 08:54:52 2026 GMT
        Subject: CN=6a7991e0-7aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:13:48:1d:75:3e:bc:4b:2d:01:1e:2e:d7:de:
                    e8:b4:3c:29:4d:35:c1:29:4e:84:28:ac:95:19:da:
                    06:04:b3:27:0b:ff:cf:46:ca:9e:fd:34:65:16:79:
                    fd:78:49:90:8a:63:72:b9:28:3e:a4:7a:86:00:1a:
                    12:5d:24:99:b5:a6:65:e2:fd:c6:37:1f:20:ad:fd:
                    7d:4a:3e:15:80:74:86:98:db:5f:a8:66:a5:9f:62:
                    6d:b3:6c:a4:0a:25:46:f2:8b:9f:55:1a:9d:d0:f8:
                    54:91:14:c1:fa:e9:40:36:6e:48:b5:38:d3:65:46:
                    d4:6e:ce:b8:16:d1:57:75:65:a4:e0:c4:d1:52:a0:
                    8c:bb:6d:c6:36:d5:6a:7e:b8:c0:b6:4f:93:c9:ad:
                    34:86:31:56:2c:8e:21:80:d7:8c:48:15:5e:6c:f6:
                    48:f8:13:b5:ea:c5:13:9b:98:25:51:3c:c8:1b:3d:
                    29:d3:68:9b:3e:ed:27:ab:ef:31:4f:53:93:62:99:
                    9d:00:d8:c7:81:cf:d6:86:68:68:68:b2:55:f5:ff:
                    b4:11:26:f2:82:79:3e:48:c5:f5:58:e3:b0:b5:82:
                    7f:5e:b7:20:61:bb:00:b8:8a:55:20:48:cf:f1:ca:
                    0a:a0:3e:1f:d3:33:5a:c0:eb:66:7b:12:6c:06:69:
                    a5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:54:E7:CA:82:48:E4:36:00:D7:03:82:13:13:48:F1:15:DB:76:A0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/286CE06E949911F18BD14CE4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:9d:d2:e0:32:d9:67:a3:8f:f4:57:32:7b:bd:97:2f:24:fe:
         84:c8:aa:65:16:ec:77:0b:83:f0:69:47:d1:16:f5:37:53:82:
         74:64:09:de:99:7c:80:fd:6c:6f:6b:7a:fe:dd:f9:ee:99:a3:
         71:1f:58:e9:0c:2c:60:db:82:69:db:e1:2e:ce:5c:3c:11:bc:
         c1:28:d5:4e:4c:8c:5e:cd:79:6c:88:24:81:9c:2b:4c:d1:a7:
         1a:40:cf:7e:c9:3e:94:66:f1:c9:c7:da:f8:d7:8e:2a:2e:3b:
         6b:3d:31:92:08:3a:0e:fb:f7:4d:89:ea:a1:f0:8e:78:53:76:
         f1:83:5f:78:33:56:01:c6:ff:b1:fc:0a:14:b7:c6:69:06:2a:
         35:db:64:9e:37:b8:cf:42:f5:81:ee:28:39:93:9d:96:18:fc:
         8d:81:ae:8f:0f:7f:e0:c8:4a:3d:d3:a1:0a:75:b2:76:a4:3f:
         17:c3:b3:b3:5b:66:3a:4d:25:e4:48:e6:50:5e:ad:e7:1d:3e:
         21:a1:51:68:49:79:61:2f:4b:96:7c:64:88:1d:79:b1:c6:67:
         af:a0:b9:24:24:7d:30:9c:8d:d5:e2:e7:ed:4e:dc:e3:5f:49:
         e0:77:c4:e4:92:0c:6f:ca:32:cf:5c:59:e6:28:67:8e:76:52:
         7e:c4:4e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----