Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/846D380EA12911F1BF78F6D2CE1D38B0.roa
File:                     846D380EA12911F1BF78F6D2CE1D38B0.roa (raw, json)
Hash identifier:          eEtJ+52G764gZnN+a9scPBucz3MM0xg0vt0Oyb9IOx4=
Subject key identifier:   9A:9A:E1:B2:7E:0D:D2:04:29:3B:51:26:78:AC:D9:DF:67:9A:85:0D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D105
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/846D380EA12911F1BF78F6D2CE1D38B0.roa
Signing time:             Wed 26 Aug 2026 08:38:32 +0000
ROA not before:           Wed 26 Aug 2026 08:38:28 +0000
ROA not after:            Sat 03 Oct 2026 08:38:28 +0000
asID:                     20473
IP address blocks:        45.207.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119045 (0x1d105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 08:38:28 2026 GMT
            Not After : Oct  3 08:38:28 2026 GMT
        Subject: CN=6a8ea607-45d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:40:0a:5d:9e:f1:ac:a1:45:b8:a8:21:de:ee:
                    59:cd:b0:ad:2a:47:39:27:28:a4:6a:6b:a1:4f:47:
                    5f:83:72:c5:f2:fe:6b:a7:a3:a9:c7:3b:33:ed:af:
                    ff:84:d2:24:95:09:03:c8:68:1b:55:9b:25:48:f9:
                    99:57:7b:7f:ca:4b:10:ab:73:b0:bd:7f:d5:27:54:
                    cd:f7:f1:ce:81:7c:78:12:2b:c5:8b:29:50:96:e4:
                    9a:2e:44:81:b4:8c:35:34:2c:88:15:6a:fb:90:71:
                    6b:de:66:6b:13:6b:89:89:e1:75:96:15:ec:e1:fd:
                    aa:6b:7b:5a:26:7a:87:31:27:1d:b5:c4:f2:d7:34:
                    4c:e5:72:10:78:5f:16:69:18:7c:18:20:a5:e1:52:
                    da:11:ef:ab:0d:85:28:3c:f3:65:bb:fa:ad:c4:eb:
                    67:6d:da:9a:ed:8c:ce:c2:84:43:e8:f4:e0:92:10:
                    89:e6:f7:67:6d:4e:f4:79:d7:50:fb:82:7b:48:0d:
                    7a:5d:66:c2:2a:a7:d6:8b:8d:e4:de:3c:e3:4d:9d:
                    cb:6a:ab:bc:f8:46:07:90:2a:9e:48:31:1c:a4:2d:
                    f4:f5:33:d8:ed:52:a6:56:82:bd:55:98:f4:d1:d8:
                    15:08:2a:84:8f:bf:02:9a:83:97:8f:8b:02:53:62:
                    ab:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9A:E1:B2:7E:0D:D2:04:29:3B:51:26:78:AC:D9:DF:67:9A:85:0D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/846D380EA12911F1BF78F6D2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:53:cd:95:65:da:bb:57:93:43:60:0b:fa:38:1f:99:89:10:
         7b:b6:ef:46:64:96:fd:b4:ba:f9:e6:2b:4b:e7:75:0d:18:e8:
         71:7c:67:1b:33:72:b8:8d:8b:e9:f0:3b:bf:75:e3:b4:32:0e:
         7a:d3:87:09:0e:92:18:c0:5d:bc:fd:4b:53:00:fc:b4:5c:aa:
         85:f1:c2:47:40:32:ec:74:ac:29:b1:7a:34:e9:ff:44:d4:2a:
         e6:0a:b8:47:57:77:99:39:8f:04:7f:c4:3b:26:b1:7e:fa:02:
         5c:96:78:6b:05:53:d5:07:0b:e6:30:73:20:a1:85:80:cd:d9:
         c5:54:f1:57:61:d7:9d:ac:85:12:76:1c:e9:52:25:46:1a:01:
         21:e1:1b:4c:45:8a:53:57:b5:29:60:6d:e4:bb:a1:ad:8e:39:
         e1:53:f8:74:f3:4f:2f:65:e0:9a:aa:4f:70:b3:3d:90:c4:01:
         eb:09:d0:f6:b9:26:51:3c:fc:ef:1f:7f:9b:3c:be:8e:f8:04:
         44:9a:fc:d8:c5:d1:37:7b:31:9e:6c:3e:e5:a5:a8:15:8c:48:
         cc:93:b6:b8:d2:3d:74:82:c8:f9:d2:c3:1d:ec:86:6c:fe:b1:
         7b:14:bf:db:54:00:cf:1e:ff:27:43:b7:42:15:9d:f4:80:ec:
         bd:3b:e5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----