Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77B45314C79811F1884E07CDCE1D38B0.roa
File:                     77B45314C79811F1884E07CDCE1D38B0.roa (raw, json)
Hash identifier:          U0AKk0N/TJBDae3rr2eI3YpMoZNj31JhaK08v9Jg5LQ=
Subject key identifier:   DB:4B:61:68:CA:B8:F4:D5:F0:6B:DB:18:9E:80:34:F0:89:48:56:01
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DD36
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77B45314C79811F1884E07CDCE1D38B0.roa
Signing time:             Wed 14 Oct 2026 06:28:28 +0000
ROA not before:           Wed 14 Oct 2026 06:28:24 +0000
ROA not after:            Thu 19 Nov 2026 06:28:24 +0000
asID:                     59245
IP address blocks:        45.196.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122166 (0x1dd36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 14 06:28:24 2026 GMT
            Not After : Nov 19 06:28:24 2026 GMT
        Subject: CN=6acf210c-3e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bc:0c:f6:ae:f8:3c:89:67:f6:4c:9b:e2:ec:
                    62:6c:f9:7b:b2:43:d3:97:d8:81:a4:e8:be:0e:91:
                    ae:cd:65:9c:0d:46:81:a5:a1:34:25:70:e2:e6:35:
                    e8:d2:b8:51:dd:2d:99:2a:da:3c:7b:c4:2f:44:07:
                    37:13:92:a9:df:00:6e:62:3c:31:b3:cf:34:71:f2:
                    83:1a:89:6f:58:41:74:c0:cc:00:2c:61:1c:09:b3:
                    5f:63:94:0f:f1:f0:f3:7c:74:49:ab:e1:2f:4f:93:
                    da:77:76:88:ed:2f:c9:aa:38:e7:9e:be:10:f0:1d:
                    1f:2d:21:25:5c:c4:72:f6:55:b8:0e:a0:28:1d:27:
                    8c:30:42:fc:17:0d:90:d2:ef:81:17:4a:d5:d9:6e:
                    ff:7e:4c:79:3e:50:9c:ec:f4:d1:7e:03:5a:91:25:
                    31:a5:94:f9:7d:16:2e:62:ee:f6:6d:bd:d1:91:1c:
                    af:94:23:0a:79:75:9f:67:cf:8d:81:83:d5:5a:f4:
                    80:f1:1f:06:0c:64:91:59:c4:38:59:10:a9:05:c4:
                    0a:ae:06:ea:b2:53:2b:e6:6d:94:48:48:b1:59:b2:
                    1f:7a:a7:3c:27:c9:5e:3c:7a:72:ee:76:03:c2:cc:
                    40:1a:96:10:dd:ee:40:89:f8:87:f8:4e:02:82:26:
                    3f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4B:61:68:CA:B8:F4:D5:F0:6B:DB:18:9E:80:34:F0:89:48:56:01
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77B45314C79811F1884E07CDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:7b:6f:bf:78:b1:17:36:a2:2b:ec:4d:14:6f:5e:43:71:48:
         a0:f9:ec:66:b8:ab:e1:f1:f9:ec:18:7c:ce:bc:ab:0d:72:06:
         9b:22:32:e4:c4:52:79:d7:8d:a7:98:c3:fe:16:2a:50:59:4a:
         b1:9f:79:77:03:8d:08:d0:d2:b4:00:75:dc:a2:3e:47:e9:96:
         5c:9c:d8:75:fc:ba:90:5e:10:f1:d8:a2:c9:57:06:c6:6c:e6:
         d3:45:57:c3:c7:76:cc:6a:95:df:e7:7c:0b:1b:0c:ee:b5:a0:
         05:b2:1f:01:98:21:be:2f:91:c9:48:ba:d0:10:f4:cc:36:01:
         a1:c4:89:5d:a1:45:e0:11:8e:74:35:14:69:db:6b:bd:80:80:
         b3:b8:09:ff:d4:b8:eb:40:2c:5b:40:01:fc:9c:fe:91:be:b0:
         46:88:dc:86:ff:00:27:e5:e7:ec:72:1c:21:06:73:9d:da:6b:
         52:a1:27:48:4f:bb:31:a4:08:7a:92:23:a3:2a:8b:ce:63:3b:
         27:a2:04:94:fc:ca:f5:c1:d7:86:d6:2c:97:89:a5:b0:48:2a:
         59:4b:e2:3f:77:88:f0:af:99:c2:c6:ca:e7:53:44:55:78:83:
         ab:b1:61:8c:60:6e:f0:2d:1a:f2:5f:f0:09:45:77:52:12:7e:
         bc:7c:cb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----