Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4862EBDAC92C11F18282B715CF1D38B0.roa
File:                     4862EBDAC92C11F18282B715CF1D38B0.roa (raw, json)
Hash identifier:          suoTrFIM+q2ShV1k5wXXwrCsUdYhsL5tsVZuqHAisRE=
Subject key identifier:   DF:C2:A1:29:78:3D:96:08:4E:88:BB:1B:93:54:46:E0:AA:37:26:F2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DDC6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4862EBDAC92C11F18282B715CF1D38B0.roa
Signing time:             Fri 16 Oct 2026 06:39:06 +0000
ROA not before:           Fri 16 Oct 2026 06:39:00 +0000
ROA not after:            Fri 13 Nov 2026 06:39:00 +0000
asID:                     213690
IP address blocks:        45.192.0.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122310 (0x1ddc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 16 06:39:00 2026 GMT
            Not After : Nov 13 06:39:00 2026 GMT
        Subject: CN=6ad1c68a-b558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a6:bb:bb:3a:ea:6b:99:7c:f8:04:84:d9:48:
                    88:9d:7f:80:7b:fd:c9:4b:15:f8:44:d9:fd:14:94:
                    18:22:b0:a0:46:9b:58:61:22:e6:3d:c3:0c:50:21:
                    71:62:be:11:de:96:0c:81:e4:1e:ad:22:e6:fc:34:
                    3c:71:5d:86:35:59:6e:7d:45:38:bc:ee:29:af:29:
                    ac:56:cc:ad:3e:b0:6a:dd:d9:24:f8:84:52:b6:ea:
                    9d:87:1c:b4:00:b0:43:14:8d:0c:e9:11:84:c5:56:
                    3a:55:c8:80:86:2d:89:f4:6c:59:3a:0a:46:ec:d4:
                    43:25:2c:37:60:d3:d0:28:35:01:b9:fb:4b:91:9d:
                    62:44:28:f8:11:31:99:39:d2:54:86:9c:67:54:6c:
                    7d:0e:7c:75:c6:36:8a:ff:44:00:32:b2:77:b2:17:
                    5e:e9:0b:99:75:9e:e1:02:84:4a:41:fe:6d:b1:1a:
                    0d:d8:3a:1f:17:a5:52:de:67:e9:2f:bf:f6:13:3b:
                    55:b5:50:1a:8a:3e:01:ed:b7:63:77:35:49:78:04:
                    f8:74:bc:01:8a:9d:57:56:7f:54:e7:b1:79:93:e2:
                    0b:e0:68:27:e9:5b:97:37:25:09:54:0d:69:aa:bb:
                    3d:7e:fe:20:ee:0a:e4:1f:96:85:d1:9b:7b:a5:bf:
                    b3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C2:A1:29:78:3D:96:08:4E:88:BB:1B:93:54:46:E0:AA:37:26:F2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4862EBDAC92C11F18282B715CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:7e:31:0a:22:a7:98:4c:55:2e:3f:30:8f:e1:a2:7b:b5:38:
         09:03:09:e1:93:98:3e:6a:73:b1:ad:41:f8:22:76:a8:92:93:
         4d:53:86:bb:e1:c5:19:75:7c:85:d4:54:13:e5:e1:2b:1d:2f:
         1d:8c:56:12:df:a8:c5:3a:43:84:62:68:0f:ab:6a:7c:b1:ba:
         7e:5f:2f:b2:7c:3c:77:20:32:c7:ca:d4:57:a3:39:7f:50:0f:
         4c:61:e9:73:3a:68:7f:84:26:64:9c:17:1b:9a:4c:b5:e1:60:
         89:32:37:63:74:4b:fe:aa:de:5f:c0:59:7f:eb:37:ab:ae:1b:
         2f:ce:9e:de:39:ae:b1:af:89:37:14:e3:cb:70:63:4c:bc:23:
         e3:91:1b:53:2a:8c:46:05:67:3f:19:fa:fd:8c:5a:c9:39:f7:
         f9:f5:e7:03:d2:8e:e0:ad:ec:e4:1e:e6:83:54:dd:3c:62:9e:
         54:af:02:f5:29:18:a0:19:41:dc:c3:7c:c7:65:cf:06:24:aa:
         a0:7f:19:fa:6f:49:a7:50:17:ff:a0:e9:17:d6:d5:86:7c:24:
         4c:e0:00:76:61:50:cc:95:52:2e:76:ca:ce:04:9e:b6:77:71:
         51:f5:c2:75:fd:f7:53:80:86:26:c1:1e:1b:2e:f3:d2:28:70:
         b0:63:95:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----