Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F8286F6A45211F1AB1F8BF6CE1D38B0.roa
File:                     7F8286F6A45211F1AB1F8BF6CE1D38B0.roa (raw, json)
Hash identifier:          10VvL7Rkg5Bb4QoLRw0m89hrXsHbctmiBESeJRDhdIY=
Subject key identifier:   9B:66:02:88:34:A6:B5:0A:D2:E5:68:DB:3C:5A:EF:A3:5D:24:96:56
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D1F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F8286F6A45211F1AB1F8BF6CE1D38B0.roa
Signing time:             Sun 30 Aug 2026 09:09:26 +0000
ROA not before:           Sun 30 Aug 2026 09:09:22 +0000
ROA not after:            Wed 09 Sep 2026 09:09:22 +0000
asID:                     147176
IP address blocks:        45.201.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119281 (0x1d1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 30 09:09:22 2026 GMT
            Not After : Sep  9 09:09:22 2026 GMT
        Subject: CN=6a93f346-3add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d4:c3:26:f0:70:89:7d:e1:9b:33:c3:d4:b2:
                    56:a9:f6:26:e1:76:84:e4:4a:f3:d3:ac:d9:3a:f9:
                    32:74:13:a7:99:de:bb:7b:fc:42:2a:16:77:b7:dd:
                    d6:0a:65:cf:4c:e2:38:d7:2c:8e:ea:d4:7f:d0:78:
                    91:a0:7d:0e:72:16:29:7e:8f:e7:71:1e:66:99:b2:
                    66:66:03:43:f5:47:32:10:bf:7f:22:19:df:d8:b9:
                    8b:ea:30:9b:a0:bc:71:1f:07:19:0d:61:0d:f4:62:
                    80:9c:ff:a0:28:24:52:00:96:46:f9:48:e5:65:14:
                    73:32:2a:1d:83:77:c9:b1:d3:b7:24:f3:fd:c5:52:
                    ed:6b:c0:8c:94:68:a3:45:c2:02:0e:e6:20:7f:aa:
                    7b:60:a3:6e:da:fe:20:bf:9f:96:63:1e:4d:dd:2b:
                    b1:2f:76:3c:d1:b8:9b:6f:70:28:e3:56:5a:aa:76:
                    ca:cf:a1:c4:63:18:ae:45:d3:5b:fe:d8:69:43:bf:
                    b3:4d:f9:4b:ce:ed:aa:47:07:ba:c5:d2:10:f0:89:
                    fa:35:4a:ff:d2:50:90:f3:12:c6:70:c2:38:4d:a8:
                    aa:17:b6:79:d8:bc:b6:f4:ec:2d:12:7e:f1:a1:d2:
                    a5:b4:6f:51:e1:5c:5f:19:9c:3f:72:03:51:28:ff:
                    5e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:66:02:88:34:A6:B5:0A:D2:E5:68:DB:3C:5A:EF:A3:5D:24:96:56
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F8286F6A45211F1AB1F8BF6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:7d:bf:b7:a9:ba:89:1c:aa:9e:ff:78:0f:b4:1e:79:46:c2:
         82:96:f7:1b:b7:97:ce:7f:e0:86:55:da:5c:31:52:b8:c9:2a:
         68:d9:04:2f:0b:65:a5:79:f0:cf:2b:18:88:ab:a0:b4:40:3c:
         fc:55:e7:67:65:a6:7f:22:86:fd:5f:a5:e2:f4:58:d4:98:a6:
         6c:a8:98:4b:75:4b:d3:3c:cd:3f:b5:e5:90:5f:9c:9a:61:94:
         72:a1:64:6f:d4:f9:48:70:f0:63:56:d4:ff:1b:2f:a9:5d:e2:
         0d:79:cd:aa:06:20:2a:76:4c:13:dc:66:ea:c6:74:6c:97:9a:
         8c:be:67:c4:08:1c:87:13:3f:ce:a8:f2:eb:a0:40:6b:5c:ba:
         fb:48:44:a9:f5:62:f9:be:a0:77:61:c3:17:12:3b:1c:48:19:
         c8:e1:11:6a:3a:ba:4e:83:ee:c8:5d:c8:24:9f:07:dc:37:2b:
         09:35:1a:a0:d7:91:40:4c:de:14:42:3f:be:96:27:42:a4:1f:
         cc:e4:c6:f8:28:56:eb:a4:f6:a0:2d:41:99:62:97:92:17:6b:
         93:2a:d1:f8:45:e4:7c:e2:c6:08:48:f9:48:31:4d:4c:22:bb:
         68:6b:a8:c4:6e:54:64:8d:1e:bf:10:a6:87:4c:1d:5e:88:79:
         83:e9:52:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----