Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71254D60B0F411F19990E6EFCE1D38B0.roa
File:                     71254D60B0F411F19990E6EFCE1D38B0.roa (raw, json)
Hash identifier:          m0tTTE3qOavkSSnWzQHOLPBiaixJTB0p3Hh37D52H58=
Subject key identifier:   0B:D2:20:53:27:6B:F2:CA:8B:70:DB:37:D5:01:07:4E:A1:5F:9C:B5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D665
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71254D60B0F411F19990E6EFCE1D38B0.roa
Signing time:             Tue 15 Sep 2026 10:58:54 +0000
ROA not before:           Tue 15 Sep 2026 10:58:50 +0000
ROA not after:            Mon 14 Dec 2026 10:58:50 +0000
asID:                     142286
IP address blocks:        45.207.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120421 (0x1d665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 10:58:50 2026 GMT
            Not After : Dec 14 10:58:50 2026 GMT
        Subject: CN=6aa924ee-20fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1a:66:8b:98:3b:d0:9f:a6:97:27:6b:6f:7a:
                    07:69:46:9f:e4:f3:2b:35:6b:ca:3f:cf:21:28:58:
                    72:3e:60:ef:52:6c:cf:2d:0a:c1:93:01:1c:36:f4:
                    db:e2:4b:43:cd:70:02:e9:39:d9:f6:98:75:91:84:
                    29:14:92:77:8b:37:77:1a:4a:eb:04:c1:02:63:0f:
                    06:6f:e4:6c:7b:da:d2:2c:92:a7:8b:64:1d:50:0f:
                    ee:46:e4:ff:ce:57:46:0f:b4:2c:b1:34:b4:3b:eb:
                    5b:cc:de:17:97:5a:e5:60:b6:a7:37:fd:b5:52:2e:
                    ab:68:07:b0:3e:59:4e:ff:e7:0b:26:b8:ec:cd:b9:
                    07:94:78:d9:08:5b:45:db:c1:fc:27:b9:9b:61:57:
                    c0:20:2b:04:2f:de:c6:29:0e:63:07:ed:d1:41:08:
                    ff:b2:68:28:6b:68:fa:cf:80:67:73:d1:4a:aa:ca:
                    98:de:fa:f9:d5:35:7d:77:4c:65:ff:20:88:7d:3f:
                    ee:1a:3d:7e:44:11:82:e2:c4:be:97:58:a6:be:9f:
                    0d:5a:25:0d:45:75:55:23:4f:97:84:ea:d3:f4:b0:
                    2a:85:2b:a2:68:2a:8f:8c:2e:89:1b:4d:b2:40:a2:
                    86:77:41:0f:aa:d0:2a:cc:d9:ef:6f:23:12:f3:db:
                    10:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D2:20:53:27:6B:F2:CA:8B:70:DB:37:D5:01:07:4E:A1:5F:9C:B5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/71254D60B0F411F19990E6EFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1e:bc:d8:d5:0f:a4:6e:49:f1:ab:89:4b:9b:25:f1:7b:81:f6:
         f4:73:d2:f9:bf:26:84:fb:3e:77:9b:33:27:3a:92:6f:5e:25:
         c9:51:f8:33:62:ab:ba:1d:1c:a4:54:b9:3e:38:82:6c:bc:59:
         05:22:2a:7b:1a:9e:b6:7c:f3:51:bd:fc:56:28:58:35:b4:f1:
         5c:d0:30:c7:1f:5c:d2:08:ab:a2:41:ad:c4:6e:1c:ad:b1:09:
         9d:e5:f3:c5:04:19:61:e8:ce:73:e0:73:da:dd:d3:2f:0c:0a:
         73:57:db:55:89:3c:2f:29:9f:a5:a6:14:f9:fd:b4:99:39:8e:
         fb:4c:96:56:26:8c:98:be:15:76:a3:28:af:a3:c3:a6:ae:e5:
         69:d5:99:ef:59:ad:d6:43:44:98:c0:64:76:9a:e1:a2:53:47:
         cc:53:69:17:a3:e2:5a:5f:9c:4f:84:ff:d3:bc:1d:db:ca:10:
         5f:55:37:e6:a1:be:cf:20:89:87:f2:af:08:9c:b1:96:47:46:
         5c:59:a5:5d:43:16:4b:91:57:6d:cc:64:52:5d:c1:2a:c7:1b:
         e8:11:9a:50:eb:58:ea:cf:b5:82:06:78:f3:b8:ea:df:55:d8:
         db:69:3b:c0:67:eb:c7:7d:d6:be:31:91:dd:57:1c:2a:57:8b:
         3f:cc:8c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----