Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F9ADC50D05C11F1BC3FABB5CE1D38B0.roa
File:                     4F9ADC50D05C11F1BC3FABB5CE1D38B0.roa (raw, json)
Hash identifier:          XOqmGk9jswqmwhPGUgAp3z/vOIc1LERDPOxyS5N3yWE=
Subject key identifier:   70:0F:E3:00:6D:1F:4C:E6:FB:E0:0D:9D:55:7C:28:96:B5:99:72:75
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01E031
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F9ADC50D05C11F1BC3FABB5CE1D38B0.roa
Signing time:             Sun 25 Oct 2026 10:10:32 +0000
ROA not before:           Sun 25 Oct 2026 10:10:27 +0000
ROA not after:            Tue 24 Nov 2026 10:10:27 +0000
asID:                     201814
IP address blocks:        45.192.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122929 (0x1e031)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 25 10:10:27 2026 GMT
            Not After : Nov 24 10:10:27 2026 GMT
        Subject: CN=6addd598-bd5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:2a:fe:a9:15:32:73:0a:c9:c6:cb:5a:7c:
                    52:c6:f3:f4:d4:45:46:57:93:f2:c2:08:69:6f:70:
                    46:0a:eb:a4:a9:1d:ef:ef:8b:06:34:f4:3b:de:09:
                    30:ff:ce:32:62:86:54:08:18:46:9d:36:49:fa:b8:
                    74:5f:40:ce:e4:ab:c8:e0:41:a2:f2:bf:9a:43:b3:
                    82:36:a2:f2:c1:a9:68:9a:6e:71:3d:69:ef:78:3d:
                    84:8a:79:1a:53:f1:71:d1:72:b8:a6:55:d1:07:fb:
                    28:e9:31:ca:c0:6d:f0:f5:c8:9a:c1:3b:7f:e1:59:
                    bc:b0:32:df:de:12:27:4d:34:3e:9b:13:27:ec:8c:
                    84:a9:2a:98:84:d7:2f:87:14:f9:0c:a1:60:8f:ab:
                    0a:85:94:dd:aa:0e:e9:4d:1f:93:5a:e3:a9:c1:d7:
                    bb:66:34:66:d8:0c:72:a6:5f:85:6d:62:35:01:0e:
                    b4:60:3a:11:5f:a5:34:5b:d0:f6:15:a9:81:cc:ba:
                    b2:cc:1a:61:ce:c0:1f:0f:7c:12:dc:cc:48:32:c2:
                    80:1c:27:5b:e2:32:df:3b:4b:0a:ad:13:12:6d:a3:
                    06:24:e4:f2:ce:63:2e:c4:9f:94:b2:76:1d:42:6a:
                    51:33:ae:a9:26:25:35:89:fb:b1:57:ab:9a:01:a5:
                    cc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0F:E3:00:6D:1F:4C:E6:FB:E0:0D:9D:55:7C:28:96:B5:99:72:75
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F9ADC50D05C11F1BC3FABB5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:39:72:41:ce:f5:62:1d:b7:b2:25:10:f8:d9:65:d7:84:9b:
         37:d8:b1:b1:af:9f:e9:58:11:aa:ae:ba:f9:42:93:7e:a3:64:
         dc:e7:9a:73:85:8a:dc:e8:0a:69:8f:11:b4:2d:35:28:20:d1:
         94:07:48:cb:3b:bc:42:e6:75:64:68:94:ff:b9:8f:72:74:0f:
         43:89:d3:35:d1:8c:9d:06:b5:db:53:5d:08:9c:16:2f:74:3c:
         79:69:4a:2f:3b:c0:2a:b6:42:e2:94:ba:ed:5b:45:f0:39:c6:
         45:4f:5d:14:c8:a2:fb:d2:fd:88:3e:1f:2a:f4:1b:45:bf:3a:
         38:11:5c:83:7f:73:45:f9:22:4e:c9:51:ed:4e:fb:52:e4:f2:
         35:74:d2:41:29:b9:95:37:73:41:a2:54:5b:d3:55:d5:aa:e4:
         0f:5f:53:3b:4b:1b:3b:7b:86:4a:c2:e8:89:5e:68:a2:18:37:
         57:f9:76:f1:5d:d0:02:4b:30:bb:e3:46:d0:f5:9b:45:a1:b3:
         24:ed:e9:80:9c:c5:e4:4c:99:bd:73:40:b9:a7:6a:e3:15:68:
         ee:05:18:be:86:95:a0:cb:b2:0a:fc:cf:d3:11:0f:38:0e:d4:
         c6:70:50:02:71:57:61:a2:c7:9a:0c:03:ca:27:38:8f:ef:7e:
         6c:e1:9b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----