Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8796DD5CBE3711F1ADE14002CF1D38B0.roa
File:                     8796DD5CBE3711F1ADE14002CF1D38B0.roa (raw, json)
Hash identifier:          JMIrfjvryGsRVKcHNhAf9dTdwN1XQBRSmUbT8VL+RDo=
Subject key identifier:   09:E7:D0:29:8D:DC:12:2A:ED:22:6E:51:A0:09:79:AD:68:E9:4C:65
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA0E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8796DD5CBE3711F1ADE14002CF1D38B0.roa
Signing time:             Fri 02 Oct 2026 08:01:54 +0000
ROA not before:           Fri 02 Oct 2026 08:01:49 +0000
ROA not after:            Mon 09 Nov 2026 08:01:49 +0000
asID:                     48031
IP address blocks:        45.204.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121358 (0x1da0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  2 08:01:49 2026 GMT
            Not After : Nov  9 08:01:49 2026 GMT
        Subject: CN=6abf64f1-9b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:aa:dc:46:4c:9d:45:6e:89:46:57:e1:15:1b:
                    58:69:7d:42:a3:5d:69:e0:ef:38:0d:e9:91:f7:10:
                    07:6a:8f:de:d7:58:76:4f:75:b1:a4:ff:d8:40:72:
                    eb:21:35:f9:aa:19:74:84:96:65:6d:6f:08:25:15:
                    c8:ab:c7:67:85:ea:86:99:29:84:f7:1b:fe:60:f4:
                    87:e7:81:c0:10:9c:60:9c:80:8a:15:07:1b:ae:38:
                    30:29:3d:28:5f:9f:1c:b1:6c:21:0f:3b:51:ba:72:
                    2e:e7:7c:dd:23:c7:6f:94:6c:3a:4e:95:fa:fd:b5:
                    79:85:cb:37:4d:e0:08:78:23:9a:0e:8a:78:2b:78:
                    39:22:30:6c:c8:d1:25:20:4b:97:be:27:fb:d4:12:
                    91:99:45:93:69:ec:39:ff:15:ef:d8:52:be:84:43:
                    39:2c:e6:ca:af:df:00:d8:95:17:ad:06:24:00:a7:
                    71:be:a5:8f:96:5d:25:69:6a:6d:24:7e:ba:f6:cb:
                    14:1b:66:94:b2:81:08:e8:22:ec:d5:76:b1:29:87:
                    80:5e:b7:91:e1:36:2c:cd:3f:2b:58:e7:08:ac:7e:
                    d1:a0:62:69:07:91:84:f7:48:81:f1:bb:85:2b:59:
                    bf:72:84:f7:50:92:2b:61:bf:d0:3c:22:1d:39:43:
                    e6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E7:D0:29:8D:DC:12:2A:ED:22:6E:51:A0:09:79:AD:68:E9:4C:65
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8796DD5CBE3711F1ADE14002CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:d3:50:9a:5a:75:7d:f0:df:af:eb:f6:ee:83:7e:ee:8b:77:
         da:06:05:8c:6d:59:49:a6:1a:b7:7a:5a:67:c0:c2:e4:e1:96:
         fe:b8:14:5b:01:72:5f:04:86:69:91:28:c8:31:ec:80:a7:5b:
         90:fb:77:e5:9d:86:f4:3f:b6:5c:a0:0d:0c:df:9c:95:b8:af:
         7c:80:fc:f1:5a:f1:b7:2f:93:76:41:42:01:2f:37:4a:d8:a6:
         45:9f:83:ff:19:99:c9:b1:d2:8c:7b:7b:0c:8a:0e:43:e2:81:
         cf:9d:99:a2:c1:0d:55:29:24:74:9f:f0:9a:da:27:54:03:c4:
         0b:fa:e9:1f:ad:2e:87:cc:91:31:aa:47:d5:be:1a:5b:d2:ea:
         39:28:a5:20:33:43:da:48:6f:0d:7d:4c:14:f5:ea:da:40:ff:
         c8:81:bb:03:f0:a2:c8:e8:bf:2e:48:76:b4:84:4e:b8:ab:af:
         cc:11:7e:26:09:ad:72:7e:03:3d:13:28:71:10:1e:16:c6:aa:
         05:2e:96:fd:2e:3a:c3:02:96:27:0c:4c:0f:63:72:0c:5e:e1:
         36:7e:2e:9d:79:71:6e:4d:9f:2e:2d:21:36:d8:04:0f:37:c0:
         5b:e8:84:00:24:eb:83:6a:f8:b9:11:34:57:45:fe:92:81:13:
         3c:a3:b2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----