Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/888B4AC8C56B11F19F133914CF1D38B0.roa
File:                     888B4AC8C56B11F19F133914CF1D38B0.roa (raw, json)
Hash identifier:          xyc3lSKeC+IS7n9sTEF4qlvZLwB3d8HTg4j6xfhatiI=
Subject key identifier:   26:45:29:18:E8:01:C6:5E:73:5C:34:58:1C:47:CC:2A:B9:09:E1:F9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DCBD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/888B4AC8C56B11F19F133914CF1D38B0.roa
Signing time:             Sun 11 Oct 2026 12:01:47 +0000
ROA not before:           Sun 11 Oct 2026 12:01:42 +0000
ROA not after:            Wed 18 Nov 2026 12:01:42 +0000
asID:                     197574
IP address blocks:        45.198.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122045 (0x1dcbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 11 12:01:42 2026 GMT
            Not After : Nov 18 12:01:42 2026 GMT
        Subject: CN=6acb7aab-81b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0f:f3:ed:e0:a7:f1:70:f3:de:91:c8:80:6e:
                    b8:d7:8c:4e:33:43:c2:3f:6b:eb:80:30:b5:64:69:
                    0e:13:3c:4f:32:2b:60:9a:1e:8c:8e:74:ed:06:c3:
                    4d:eb:30:d5:fa:cf:e7:9d:2a:d3:03:df:4a:53:3b:
                    96:09:fb:3b:cc:6e:4e:57:cf:d3:b5:14:92:e1:dc:
                    62:df:be:58:8a:bb:b5:34:fd:3d:64:fc:6d:f3:32:
                    17:81:8d:09:4b:cc:44:0e:f9:28:61:e3:92:d7:94:
                    7b:42:42:6a:dc:f4:49:a5:6b:f7:2d:48:95:8e:7b:
                    9e:40:fa:20:a2:27:00:9a:73:12:63:89:fe:de:e4:
                    ba:38:a0:6a:74:e8:28:fb:dd:33:8c:de:f0:9a:54:
                    7c:17:fc:8d:90:bd:cc:50:55:d8:b5:04:27:07:db:
                    16:08:a9:a8:5c:94:2b:bc:84:ae:5e:c2:ce:88:1b:
                    76:19:be:ba:4f:52:01:ec:fa:ac:ef:0e:76:ae:ce:
                    ac:96:74:65:1e:f7:62:69:ac:38:e3:c4:68:c0:79:
                    a7:4c:c3:f3:25:a2:09:40:ec:55:26:2d:ef:f9:bb:
                    35:26:cc:72:03:d1:47:72:9d:ea:31:e3:e3:62:2b:
                    34:d4:70:06:ef:85:3c:bf:43:f9:d1:82:11:4d:36:
                    82:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:45:29:18:E8:01:C6:5E:73:5C:34:58:1C:47:CC:2A:B9:09:E1:F9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/888B4AC8C56B11F19F133914CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:83:c0:ad:bb:ee:f3:34:5b:73:91:d5:1c:7b:c7:bd:9e:12:
         16:48:c8:5f:69:d3:d2:a9:f5:7e:72:cb:ca:4c:1c:aa:f2:96:
         69:ea:98:1b:79:71:79:66:ff:27:6c:1b:1a:56:9b:6e:cf:d2:
         f7:1c:66:1b:8a:6c:64:f8:11:3a:79:2f:7a:95:ed:5a:75:30:
         13:44:a5:78:02:e0:52:f6:4f:82:74:81:f8:e8:b5:63:db:5b:
         84:d5:42:f3:c0:f0:ff:2e:9f:49:ca:8e:c1:d3:d5:3c:13:6f:
         b2:d2:97:23:66:39:d0:5c:cf:50:19:6a:7b:8c:a0:03:d8:4f:
         27:c6:82:2e:d6:27:9c:fe:d5:3b:41:9b:aa:6c:15:e0:c2:64:
         22:29:7c:f6:4a:f3:a2:c5:17:02:b8:42:55:fe:94:00:6d:ed:
         6d:3a:dd:21:96:f0:21:93:93:4e:8c:eb:89:5b:61:52:52:11:
         fa:fb:7e:f9:ea:ff:f6:29:5b:0f:e3:94:3d:66:f2:fb:68:9f:
         12:8f:3c:3c:00:a4:c6:0a:c9:77:a1:3e:60:b1:d6:15:69:c0:
         37:5a:47:06:11:9c:34:78:74:bd:56:48:7c:f8:25:f9:86:f0:
         8b:ec:0f:fc:6d:83:6c:69:06:64:12:98:0c:f4:f5:93:7e:ca:
         0c:e9:2b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----