Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F9C5B92C18811F1BAEDD6A1CE1D38B0.roa
File:                     6F9C5B92C18811F1BAEDD6A1CE1D38B0.roa (raw, json)
Hash identifier:          bTNucdcoNvU4VKqSxNgd1W/TWJ1mi1xqQHTuuzqnzO0=
Subject key identifier:   81:BA:DF:B2:94:43:D9:95:DC:8E:29:B9:A5:58:9D:5F:58:D2:67:83
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DB8E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F9C5B92C18811F1BAEDD6A1CE1D38B0.roa
Signing time:             Tue 06 Oct 2026 13:18:36 +0000
ROA not before:           Tue 06 Oct 2026 13:18:32 +0000
ROA not after:            Fri 13 Nov 2026 13:18:32 +0000
asID:                     274327
IP address blocks:        45.194.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121742 (0x1db8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  6 13:18:32 2026 GMT
            Not After : Nov 13 13:18:32 2026 GMT
        Subject: CN=6ac4f52c-2f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f7:a1:43:b4:e1:50:a4:85:70:22:e1:28:3f:
                    d8:2f:4a:4a:da:ce:7c:c0:e9:67:97:c2:68:c3:64:
                    74:33:f2:54:fb:3a:3e:e2:1f:46:22:f1:ef:84:20:
                    96:0d:e2:28:ea:35:70:17:1c:2b:93:ca:ad:1a:f5:
                    bd:1d:da:5d:4e:62:3e:ca:50:f1:21:fc:4a:1c:6f:
                    8a:ac:d0:ac:dd:90:2f:68:00:0f:0b:39:cb:ca:8a:
                    70:69:21:90:0c:d0:0f:48:19:ac:5b:c9:e1:4b:64:
                    8a:da:ab:e0:e0:64:98:06:ca:ed:a3:d1:f3:67:d6:
                    e3:c8:a6:bc:c1:63:f6:2d:20:41:84:41:29:c6:0e:
                    82:7e:c8:55:9a:f9:2f:a5:eb:7a:24:24:07:e5:cc:
                    3c:2d:ec:dd:10:ee:df:0c:a2:42:20:bb:fe:8d:05:
                    d7:d6:02:40:30:90:1e:ac:f8:33:c9:c6:4b:b9:5e:
                    ee:f3:87:ba:7b:e9:50:e5:52:5a:c0:6a:7c:43:83:
                    aa:bc:15:10:21:e4:b8:4c:89:92:81:ef:fa:94:58:
                    cb:4e:51:e4:89:ef:e5:a2:b4:03:c1:77:2a:e9:51:
                    b1:de:36:f1:49:64:d3:0e:55:a4:bb:9c:cb:78:dc:
                    d6:74:96:f2:44:f0:bd:31:29:8c:ae:44:d1:3a:4a:
                    4a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:BA:DF:B2:94:43:D9:95:DC:8E:29:B9:A5:58:9D:5F:58:D2:67:83
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F9C5B92C18811F1BAEDD6A1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:4c:ed:3b:9b:b5:d1:b6:38:91:01:af:13:9f:f9:ad:c6:7e:
         78:19:07:20:8e:0f:50:54:dd:06:62:77:2b:68:d9:3d:bb:ef:
         4d:e6:f0:cb:0a:e6:6e:46:60:b1:62:4e:59:1e:b9:bb:d9:8a:
         d0:64:ff:af:8f:e5:8f:df:05:fa:26:e7:35:cf:e8:10:3f:a4:
         4a:1f:4c:f3:26:1d:3d:67:af:1a:83:27:31:31:6b:69:9c:35:
         5a:f7:30:65:6d:e3:5e:39:60:89:ea:eb:2a:1e:f0:01:66:7d:
         90:fc:89:dd:2b:a8:9b:4b:e1:2e:13:bc:48:e4:35:73:3b:b1:
         bc:7c:86:2a:a4:1e:2e:57:e6:a4:42:bf:a4:d7:6e:9b:04:b6:
         85:de:91:aa:61:39:3f:08:11:f4:69:ef:a5:f4:d0:7e:76:c5:
         5f:a7:ce:50:3a:7b:9b:c4:3d:34:44:1c:e1:e9:61:87:83:08:
         58:72:f1:51:bc:fa:b5:96:f1:f4:ce:16:9e:79:d9:c0:4a:8b:
         d9:75:cc:7a:21:eb:d7:9a:9f:24:ed:b9:72:9a:46:c5:6a:b2:
         8c:ca:0c:ad:3a:5a:8d:7c:2e:8e:84:1f:dc:03:ce:a5:d7:1b:
         1a:ba:18:35:58:9d:1d:2d:46:0d:08:a3:c3:77:94:8b:87:43:
         8a:45:c2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----