Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76513C3C909B11F1BA2BE5B9CE1D38B0.roa
File:                     76513C3C909B11F1BA2BE5B9CE1D38B0.roa (raw, json)
Hash identifier:          d5fL6ojU8AOwLRciIx6+vBTaSqnSkaD60EkaZsrkpuY=
Subject key identifier:   05:D6:1A:F9:93:A1:19:D5:EE:F5:FC:D3:76:6E:8E:AA:88:30:D6:AC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C9B7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76513C3C909B11F1BA2BE5B9CE1D38B0.roa
Signing time:             Wed 05 Aug 2026 07:01:21 +0000
ROA not before:           Wed 05 Aug 2026 07:01:17 +0000
ROA not after:            Sat 12 Sep 2026 07:01:17 +0000
asID:                     272854
IP address blocks:        45.195.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117175 (0x1c9b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  5 07:01:17 2026 GMT
            Not After : Sep 12 07:01:17 2026 GMT
        Subject: CN=6a72dfc1-4e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:98:dc:90:47:fc:1a:4f:40:35:fe:23:c8:43:
                    ad:09:4e:b0:e0:de:64:09:8a:4a:ed:3b:89:05:e8:
                    40:49:56:e9:20:db:0d:28:7c:bf:18:78:86:4c:97:
                    f5:b8:ac:6d:35:d5:f6:4e:db:f4:79:66:1b:9c:8d:
                    b8:97:3a:d2:e9:db:b9:e8:23:5f:7f:32:03:fa:54:
                    09:5b:de:9a:96:43:60:31:2f:39:9e:f4:c4:ff:f5:
                    0f:c9:ca:45:e0:ae:06:5f:ab:28:f4:18:90:15:4f:
                    4c:88:b5:f1:34:e2:80:ca:d9:97:85:75:95:b6:18:
                    b1:ed:db:0f:93:7f:74:54:d9:9a:7c:32:1b:9d:59:
                    f1:74:ad:4a:d1:fa:fa:e4:d0:8f:34:d0:7b:24:b7:
                    3c:24:85:14:e7:3a:88:b0:f4:f6:94:ec:8e:db:2e:
                    f9:49:a8:52:18:17:68:f6:cb:a0:e5:56:fb:8d:f2:
                    53:47:d9:89:ff:08:ee:32:38:28:6d:5f:4e:dd:d4:
                    1d:86:0e:e6:4c:1c:67:03:71:2c:13:f1:9b:b4:18:
                    d7:d8:b6:74:f2:ff:3b:6e:97:da:a1:1b:6f:93:fb:
                    0f:9e:18:f6:7e:95:95:1b:80:a4:11:f7:81:68:68:
                    e3:e3:89:58:ef:1f:69:74:80:f2:06:cd:b4:00:23:
                    c1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D6:1A:F9:93:A1:19:D5:EE:F5:FC:D3:76:6E:8E:AA:88:30:D6:AC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76513C3C909B11F1BA2BE5B9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:3c:93:cb:f0:b8:4e:26:3c:90:ee:ad:47:66:34:b5:11:c3:
         0a:48:7c:ea:fb:01:0b:f7:cb:69:46:3f:65:ba:92:41:43:d7:
         3b:6d:1f:92:17:ff:22:fd:66:6a:5f:a3:2a:a1:bb:6f:eb:59:
         a6:ee:d2:e4:25:ea:98:ea:2b:e3:d2:af:94:57:4f:56:54:0c:
         de:b0:11:4d:a9:ff:36:93:d1:fa:ce:8b:81:3b:0a:8c:f2:8a:
         b8:ac:ff:eb:07:df:7f:5b:43:06:41:fd:11:d3:a3:34:8a:41:
         41:4b:d5:89:1b:f1:ab:c5:0f:d6:58:6f:87:d8:c0:3d:84:b5:
         e3:56:1b:76:83:07:cd:63:e6:49:eb:32:ef:ab:a8:52:50:36:
         0b:ba:d1:23:98:ea:c1:28:6c:a7:9e:8c:46:91:67:1f:01:69:
         72:df:90:06:10:b5:73:29:44:e7:41:6b:9d:e9:0e:3a:93:b2:
         97:40:f3:4a:f2:a5:50:8c:74:3a:5b:de:3c:f1:2f:dd:bb:ad:
         2e:33:01:66:cc:d2:f5:a9:c8:22:49:d4:f3:a9:a3:43:ae:df:
         b1:b9:e2:6d:b5:5a:b5:ee:1f:8d:90:f6:0f:2f:39:71:04:10:
         ee:e9:64:19:65:a1:11:b4:b1:d8:c4:5d:72:27:61:2f:85:e7:
         cd:e5:ef:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----