Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C7837AC9D6411F1B9486CB5CE1D38B0.roa
File:                     2C7837AC9D6411F1B9486CB5CE1D38B0.roa (raw, json)
Hash identifier:          S/voJQdS6UCanHk7FLnt2LLJ+uINMOrxOgVS3wHudao=
Subject key identifier:   A5:20:CE:CD:A5:F3:CB:17:FD:28:55:B5:11:0A:D3:B7:2C:67:A2:63
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CFEC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C7837AC9D6411F1B9486CB5CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 13:28:20 +0000
ROA not before:           Fri 21 Aug 2026 13:28:16 +0000
ROA not after:            Wed 23 Sep 2026 13:28:16 +0000
asID:                     17497
IP address blocks:        45.192.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118764 (0x1cfec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 13:28:16 2026 GMT
            Not After : Sep 23 13:28:16 2026 GMT
        Subject: CN=6a885273-22f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d5:75:f2:2a:92:f8:62:4e:2a:30:10:98:e0:
                    7b:35:8f:31:27:1d:0e:54:c1:b2:df:50:99:90:55:
                    06:42:c6:82:1b:6c:62:01:d5:b9:6a:1c:be:c5:91:
                    5d:f1:d4:02:f3:04:92:9d:61:03:d2:ce:04:e6:42:
                    b6:78:4c:87:7a:51:88:a9:60:8e:9a:70:1a:71:6c:
                    92:99:86:a6:5f:fc:1f:59:3e:61:32:5f:70:71:27:
                    b2:27:8a:f3:a5:e5:a6:88:95:71:70:c6:83:0d:d0:
                    90:64:76:a3:0a:19:af:0e:8f:9c:e8:a9:5f:23:a3:
                    98:0a:51:ec:b9:8f:96:17:65:cd:73:a4:2c:ee:23:
                    47:88:5f:ca:2f:27:da:38:e6:bb:a2:f7:54:28:c9:
                    41:7f:97:21:f7:f4:41:42:0e:ea:3f:40:80:15:84:
                    70:2b:f2:f6:ba:ce:c4:cf:8c:99:12:d9:b5:4d:7d:
                    13:47:a6:66:f9:2f:3e:42:22:48:90:0a:44:1e:35:
                    72:21:11:74:83:b3:e9:91:a0:51:e9:cf:d9:ef:dd:
                    63:36:06:9b:f5:22:9a:2e:86:f4:e6:77:0a:d6:bf:
                    03:21:f1:14:17:63:f5:77:23:94:8f:6c:53:01:7d:
                    56:63:e0:68:e9:df:68:b9:ed:ad:19:18:b2:33:69:
                    fc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:20:CE:CD:A5:F3:CB:17:FD:28:55:B5:11:0A:D3:B7:2C:67:A2:63
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C7837AC9D6411F1B9486CB5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:4f:f1:ed:ab:40:86:a7:73:7c:5c:00:44:e8:df:40:af:a6:
         1a:59:8f:d6:ce:f0:d0:b2:f4:5b:7a:5c:f1:e1:1e:5d:30:67:
         ba:a8:36:0f:e4:96:61:1c:95:7f:23:ba:f1:20:fe:af:c3:75:
         06:78:dd:ee:bb:17:e6:95:59:a5:ff:fb:0d:d3:97:5d:59:a8:
         2b:5e:32:a9:e2:ee:2a:84:b5:60:63:4f:27:4d:03:9f:14:1e:
         73:cb:a2:80:bf:e4:bf:ca:28:23:6f:50:c0:02:da:f0:a4:f0:
         e0:e4:a1:44:e9:1d:00:ec:a2:41:71:76:ad:89:f3:c6:12:fb:
         01:55:e6:31:68:ef:54:a0:c6:d6:73:09:1e:79:fe:cf:e4:d7:
         4f:43:e9:f7:f6:29:9c:df:88:7c:87:9f:75:27:82:84:b0:dc:
         ce:79:2b:8f:5f:60:b2:c8:12:9f:bd:31:e8:75:b0:2b:ef:aa:
         4d:61:91:5b:da:e6:45:fc:f4:ed:a7:f4:5e:be:ca:bd:c5:aa:
         b8:f0:82:1a:18:73:30:0f:a1:4d:c9:66:29:17:1f:79:ca:16:
         ed:b7:1a:f8:bc:b7:2b:04:15:a0:ab:8c:67:36:ba:f7:1d:ce:
         1b:8d:32:b5:1f:d9:c2:70:12:4e:8b:42:5c:be:2f:61:fe:13:
         e6:97:9c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----