Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D1ECB7E96F711F1861FC0C2CE1D38B0.roa
File:                     4D1ECB7E96F711F1861FC0C2CE1D38B0.roa (raw, json)
Hash identifier:          vQWuo1gvJCxkEM4t0juu7XcASyN0OZGAUJNNN2AYNEo=
Subject key identifier:   7A:08:83:3C:2F:CF:DA:8F:65:54:C5:DC:22:90:D0:6D:BD:AA:24:08
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC7C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D1ECB7E96F711F1861FC0C2CE1D38B0.roa
Signing time:             Thu 13 Aug 2026 09:13:52 +0000
ROA not before:           Thu 13 Aug 2026 09:13:48 +0000
ROA not after:            Mon 21 Sep 2026 09:13:48 +0000
asID:                     32043
IP address blocks:        45.197.168.0/22 maxlen: 24
                          45.203.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117884 (0x1cc7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 13 09:13:48 2026 GMT
            Not After : Sep 21 09:13:48 2026 GMT
        Subject: CN=6a7d8ad0-b245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:35:3a:e4:bb:4c:18:17:e9:8f:37:8d:80:a9:
                    f3:06:ae:2c:51:13:c7:9a:de:c1:15:d4:98:f7:50:
                    e8:c2:7d:55:52:61:51:61:a3:b9:89:e2:1c:6f:f6:
                    52:8a:bf:41:28:02:93:c0:92:b4:47:f7:5f:62:5e:
                    05:f3:6d:34:18:e4:18:bc:d8:69:77:83:73:7e:2f:
                    90:e8:d0:0a:53:bd:11:39:4e:03:23:54:16:1f:67:
                    e3:cc:77:2c:37:b1:7a:83:36:f5:f1:2e:b3:04:d9:
                    4a:a0:d6:14:4b:bd:e1:a2:90:b3:cd:7c:97:58:bd:
                    5a:67:ac:d0:39:71:3b:ef:3d:a6:7e:b7:13:88:89:
                    79:bb:92:09:d3:62:a2:3a:6e:2d:8b:13:6b:be:c5:
                    85:61:da:25:21:01:78:49:c7:4c:39:65:60:88:26:
                    51:2b:e6:04:1b:ad:8d:ee:fa:e9:ad:83:bc:a7:22:
                    50:b2:cc:0f:45:01:c2:0c:45:e7:65:f4:83:49:84:
                    61:2e:b7:fd:4c:bc:c6:7a:01:b6:81:eb:17:66:66:
                    20:4a:bc:f5:81:85:17:50:c7:67:42:8c:0b:e7:e1:
                    dc:ec:87:45:fd:90:64:54:e4:68:bb:c6:ad:4b:88:
                    29:5d:d2:ec:3d:0b:03:56:5b:4e:7d:b7:29:ab:0a:
                    c8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:08:83:3C:2F:CF:DA:8F:65:54:C5:DC:22:90:D0:6D:BD:AA:24:08
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D1ECB7E96F711F1861FC0C2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.168.0/22
                  45.203.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:2a:7a:93:9b:35:ca:11:08:67:b3:50:f4:7b:32:ae:f0:2b:
         76:ca:55:7b:05:6d:6d:f0:c3:85:5f:ac:15:76:ef:19:76:f4:
         60:29:b1:af:c1:85:cf:3d:cd:8e:a0:b1:c5:13:26:ce:be:dc:
         8b:fb:e7:76:eb:b8:a6:9d:59:2f:4a:3a:64:83:3d:c5:0d:9a:
         d8:0d:e8:d1:4e:7f:90:25:ab:6c:ca:46:fe:f1:16:bf:85:f8:
         fe:88:bd:93:bc:97:04:b3:f2:73:16:c4:cd:be:96:31:4d:7a:
         ce:9f:72:fd:92:5f:86:38:84:fa:78:ca:92:dd:cc:ee:d7:7a:
         5f:ee:c2:04:78:a4:eb:b6:fc:25:27:c1:9d:5d:1e:5d:b7:15:
         20:b8:92:b7:0d:06:21:3d:db:ef:00:2b:94:d1:0e:64:6b:bc:
         52:f9:5a:6d:a9:07:9e:7f:f1:5b:83:02:f8:65:07:a5:36:b1:
         95:b3:4b:e3:85:f9:eb:fa:d2:61:32:b4:8f:72:5d:9f:0b:cf:
         54:22:5e:60:55:9f:9e:d0:f1:12:4a:c2:a0:e6:e8:19:a5:54:
         9f:95:ed:de:87:b2:7b:71:87:99:73:3e:b5:23:2f:4f:d3:3b:
         e7:4b:34:09:87:6b:f1:ff:53:b9:ac:15:b4:7b:c1:70:d2:37:
         f6:8d:8a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----