Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/760A9E66C3B411F19CB0CAE8CE1D38B0.roa
File:                     760A9E66C3B411F19CB0CAE8CE1D38B0.roa (raw, json)
Hash identifier:          JjNsvAmOOjm5GED8JH9WZMmrsa8j4FoP0eCTE+XOQyc=
Subject key identifier:   B9:70:3F:CB:66:4F:4F:78:E2:74:71:70:77:6C:AD:96:E8:74:BB:EC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC01
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/760A9E66C3B411F19CB0CAE8CE1D38B0.roa
Signing time:             Fri 09 Oct 2026 07:38:47 +0000
ROA not before:           Fri 09 Oct 2026 07:38:42 +0000
ROA not after:            Mon 19 Oct 2026 07:38:42 +0000
asID:                     153517
IP address blocks:        45.194.20.0/23 maxlen: 24
                          45.194.20.0/24 maxlen: 24
                          45.194.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121857 (0x1dc01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  9 07:38:42 2026 GMT
            Not After : Oct 19 07:38:42 2026 GMT
        Subject: CN=6ac89a07-54c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:25:b6:d7:ac:96:37:05:b3:c7:60:5a:92:8f:
                    a7:42:c4:02:d1:a5:38:88:65:fc:99:af:31:79:5b:
                    47:e5:30:7b:b1:54:da:f2:0d:f0:d5:29:ef:a9:35:
                    64:bb:04:50:a7:bc:b0:18:ee:8b:53:12:8a:b9:c0:
                    e8:9a:7a:81:e0:80:f7:90:c1:f3:25:c7:d1:c4:5d:
                    24:ae:69:49:fb:a9:99:1a:bd:84:2b:ea:d9:0a:e5:
                    b8:73:e2:71:1e:38:91:97:bd:06:09:c1:87:dc:60:
                    fc:40:20:0f:09:b4:b3:88:8b:6d:0b:4c:05:36:8e:
                    d2:ae:04:be:59:72:dc:3c:1e:b6:7d:39:f4:47:65:
                    98:35:7a:b9:9b:4f:4b:fc:37:25:4d:85:88:d2:d1:
                    cf:97:9a:63:d4:e6:6c:24:81:3f:b9:81:06:56:dd:
                    9e:44:79:e9:5a:5e:0e:36:ea:fa:7b:fd:63:ae:76:
                    b1:57:a5:6c:1a:98:54:f8:55:fb:d2:b8:95:7e:29:
                    00:bb:2d:b4:c5:4e:e2:59:60:e8:87:b2:88:eb:67:
                    58:9a:5e:4a:21:ce:d1:96:b8:c6:46:58:6c:f1:96:
                    79:59:27:0d:a8:28:4c:4c:87:87:9e:d2:f2:ae:bc:
                    43:8b:74:0d:b1:79:b7:ae:de:88:bd:2a:8f:56:90:
                    ea:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:70:3F:CB:66:4F:4F:78:E2:74:71:70:77:6C:AD:96:E8:74:BB:EC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/760A9E66C3B411F19CB0CAE8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:e9:10:85:51:f6:b7:81:c8:ae:9e:da:92:88:42:32:69:45:
         e9:c6:14:25:cb:3c:7a:c4:25:ba:82:2b:70:e5:3f:98:90:87:
         a4:3a:22:43:aa:4b:4d:da:ea:5e:a0:8a:09:12:e0:b7:28:09:
         70:a6:36:ca:8f:32:26:e2:76:0f:3c:80:04:2e:29:28:51:da:
         04:ed:56:2f:74:5e:0e:00:37:06:92:e6:69:06:1c:70:89:9a:
         cb:29:63:49:c6:36:9a:cb:ab:21:29:da:cb:d5:ca:e3:69:15:
         a8:d0:b2:3c:b9:50:6c:59:32:1f:32:c1:b6:ce:41:28:f7:79:
         82:04:40:9e:18:86:f4:04:43:18:8f:4a:37:c5:fa:b4:cf:12:
         ac:f8:ee:cc:5c:dc:7d:a4:6c:cd:7e:c0:07:90:8d:d6:37:0b:
         0a:69:2b:c0:6a:74:31:53:52:64:b4:8b:92:cd:cb:d6:ca:20:
         3d:b3:f0:40:c5:bc:ac:d9:fb:14:37:76:9a:e2:98:a9:43:11:
         b6:b9:1d:e8:2a:18:d8:93:22:92:65:06:87:10:5e:3e:04:59:
         78:92:cf:36:b9:9a:b8:0f:bb:15:3a:ee:d1:01:b5:a4:b2:ab:
         06:7f:36:79:3c:9d:15:0a:23:61:25:0b:60:d8:db:fe:51:fe:
         70:39:ea:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----