Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C074D18A5DB11F1BAFB78C0CE1D38B0.roa
File:                     4C074D18A5DB11F1BAFB78C0CE1D38B0.roa (raw, json)
Hash identifier:          SrHcEzT1Wf2uWMK6ff606/uvbL7H4lIOnaQFsYcgS8s=
Subject key identifier:   1F:1D:7B:6A:89:43:8B:BA:96:2B:44:95:F4:46:76:0B:F8:BA:4A:EC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D22B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C074D18A5DB11F1BAFB78C0CE1D38B0.roa
Signing time:             Tue 01 Sep 2026 08:01:12 +0000
ROA not before:           Tue 01 Sep 2026 08:01:07 +0000
ROA not after:            Thu 08 Oct 2026 08:01:07 +0000
asID:                     401362
IP address blocks:        45.200.1.0/24 maxlen: 24
                          45.203.128.0/24 maxlen: 24
                          156.253.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119339 (0x1d22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  1 08:01:07 2026 GMT
            Not After : Oct  8 08:01:07 2026 GMT
        Subject: CN=6a968648-c069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1c:df:82:b8:32:f2:05:e4:13:52:5b:8c:42:
                    13:eb:25:94:ff:b5:c6:fc:6a:9b:1a:4f:13:bc:d8:
                    dd:31:45:51:3b:e6:91:73:e6:8e:a2:83:60:87:d5:
                    d4:1b:46:c2:c1:98:1d:94:48:57:4f:78:11:b2:90:
                    b9:b5:47:76:10:82:19:39:97:6a:8c:4c:23:a6:ee:
                    b1:05:a7:d8:11:2f:66:e8:95:7b:10:2c:83:47:0b:
                    8f:9a:5b:3d:99:f8:94:6e:0a:9a:37:57:39:d0:0d:
                    71:ce:4f:f5:d4:1f:b6:b4:09:3a:3f:5a:42:66:b0:
                    55:98:90:e6:cf:58:b4:3b:c3:c8:da:cb:5d:b8:27:
                    96:a6:56:40:6e:b5:9c:b1:f9:11:1a:2d:da:3c:12:
                    2d:27:df:76:13:f5:34:14:8c:c1:23:e3:a0:48:9f:
                    9f:22:14:7a:6c:4e:0c:c2:9b:98:2f:82:12:9e:32:
                    53:e8:8e:95:02:79:91:8c:63:54:ee:e2:e0:23:81:
                    4e:85:99:75:5a:39:44:52:68:55:ff:f7:a6:32:11:
                    4e:2d:52:19:10:81:95:bf:08:38:0a:37:47:58:73:
                    91:ee:cc:9b:77:5a:ad:a1:dc:59:c3:02:d5:11:f6:
                    59:5a:14:7d:b2:f7:4d:fe:ee:eb:32:76:03:db:61:
                    68:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1D:7B:6A:89:43:8B:BA:96:2B:44:95:F4:46:76:0B:F8:BA:4A:EC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C074D18A5DB11F1BAFB78C0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.1.0/24
                  45.203.128.0/24
                  156.253.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:1a:b0:71:82:a6:3e:04:55:c7:6c:a1:97:db:7e:5c:96:6e:
         91:6d:91:ac:5a:2b:1f:a4:84:87:5e:8e:1f:89:77:cd:16:0a:
         d3:36:58:71:80:d7:28:cc:6c:3e:33:1e:77:c3:77:bb:63:61:
         50:73:c3:a0:eb:d4:80:86:27:1f:a2:27:17:c3:3b:6b:00:74:
         26:f5:e4:24:04:f5:8f:f1:9f:ac:e4:97:17:c8:64:27:88:d5:
         10:9c:2e:b7:39:33:3b:b0:12:df:8e:35:14:8e:c1:9a:d1:0e:
         2f:30:3c:5e:ca:2d:18:e9:04:67:1f:46:02:1a:6f:0c:69:e4:
         37:03:2a:de:04:6a:c3:3f:aa:ce:d0:34:fa:6a:8d:c6:67:95:
         5a:50:e6:89:f7:16:f8:af:7a:2e:84:99:36:ae:a0:4b:74:ca:
         b0:2b:56:db:b7:55:5b:84:89:6d:e5:89:58:14:e4:ac:a6:75:
         2c:b7:db:8e:eb:84:e2:48:ab:48:8c:40:f0:a8:32:34:81:18:
         dc:4f:5a:e3:f3:8e:24:76:36:0e:38:93:58:40:0d:66:1f:84:
         a8:a9:50:e9:48:e6:74:9e:70:6e:df:3f:c8:cd:92:5d:d0:91:
         ea:6a:cb:39:08:49:52:ed:71:f7:f7:4f:6f:a0:27:4c:35:88:
         3f:e3:ef:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----