Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BDDE6FAC4AD11F18884ECB7CE1D38B0.roa
File:                     2BDDE6FAC4AD11F18884ECB7CE1D38B0.roa (raw, json)
Hash identifier:          imV77tZ/TPvySvIl8Ft7EmxzCE+4W9om6IhAc23LK2g=
Subject key identifier:   E1:3F:D1:BB:EB:FB:89:E2:D1:21:E8:A4:25:F0:52:73:F4:AC:83:EE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC8C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BDDE6FAC4AD11F18884ECB7CE1D38B0.roa
Signing time:             Sat 10 Oct 2026 13:19:07 +0000
ROA not before:           Sat 10 Oct 2026 13:19:03 +0000
ROA not after:            Tue 17 Nov 2026 13:19:03 +0000
asID:                     22773
IP address blocks:        45.202.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121996 (0x1dc8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 10 13:19:03 2026 GMT
            Not After : Nov 17 13:19:03 2026 GMT
        Subject: CN=6aca3b4b-6409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c4:fa:94:d5:81:a2:23:65:35:e5:30:92:99:
                    73:d2:94:07:d5:20:11:58:41:30:4b:12:0c:94:34:
                    63:84:a9:3b:9c:19:f9:72:ba:70:12:40:6e:22:0b:
                    4b:d2:0d:5f:e1:66:f5:6d:1d:eb:5d:21:23:53:72:
                    ae:b4:60:92:4d:c1:d0:bd:ee:14:0f:97:8c:d7:59:
                    b7:84:db:0d:37:e1:87:04:3e:50:ef:18:32:43:53:
                    95:2f:0b:0a:35:dc:c3:dd:4e:21:f3:49:d9:27:1e:
                    74:c5:08:09:35:b7:6d:8e:1b:7d:fc:d3:9d:49:75:
                    ac:f8:ee:a7:52:8d:c2:f5:30:0d:c2:55:7a:fd:81:
                    6e:3b:ef:e6:6f:75:6b:e5:c6:f9:8f:5e:b2:31:b4:
                    5c:f3:c1:aa:dd:c1:58:b3:32:c5:ab:c7:1b:f7:d3:
                    8e:6d:80:d8:1e:cd:28:0a:e0:f7:13:5e:ab:ae:ea:
                    77:a7:06:6f:0c:de:cb:52:d5:82:ef:4a:15:47:7b:
                    06:da:11:27:cf:7a:29:09:93:71:c8:68:d3:5f:8c:
                    96:f5:75:e6:1e:42:5a:23:63:97:99:51:9b:8b:e2:
                    37:2c:cc:94:95:8e:15:e2:61:41:54:7e:6e:ed:dd:
                    45:57:b2:6f:70:13:fe:cf:7f:c1:60:93:0d:b0:ce:
                    74:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3F:D1:BB:EB:FB:89:E2:D1:21:E8:A4:25:F0:52:73:F4:AC:83:EE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BDDE6FAC4AD11F18884ECB7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:1f:fa:af:02:4e:51:9e:2f:7d:67:93:85:b0:a9:e5:53:c4:
         76:af:c0:83:26:0b:47:d5:d9:65:22:9f:51:cf:56:2f:16:6a:
         03:3d:a1:c4:88:33:c1:05:a3:59:61:aa:49:d7:1a:24:47:fb:
         64:ba:74:6c:36:57:ed:42:9a:ec:40:62:e7:75:1f:8e:78:ed:
         33:40:19:19:e0:f0:bb:92:11:17:4c:aa:db:2e:f3:ae:ff:a3:
         a7:7d:43:ee:f2:e8:12:aa:82:65:d4:49:65:c1:22:34:1c:7f:
         c0:f7:2c:4f:50:00:89:a9:a0:fa:79:9b:95:03:89:08:82:d6:
         b2:83:1c:0d:0e:27:d0:7d:28:a2:e6:6a:80:32:79:81:a9:47:
         a1:df:31:0d:f0:4f:ef:23:e6:a4:a7:0e:d2:50:bd:4a:fb:10:
         b9:43:f6:94:72:cd:2a:45:85:e7:0e:fa:5a:75:32:3e:14:a5:
         7c:0b:61:7d:10:f0:10:fc:19:67:57:79:72:9c:90:7d:2b:70:
         83:cb:f8:00:5c:2a:6b:1b:ab:71:8b:b7:c2:95:79:b3:87:cf:
         90:a7:f1:df:d5:e1:01:f0:e4:ad:90:2a:8d:96:af:6f:28:49:
         f8:24:92:a3:7d:cd:c8:b0:97:84:3b:2a:b6:b9:ae:f5:f6:05:
         60:11:53:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----