Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D748D748F6011F1A4B326B8CE1D38B0.roa
File:                     8D748D748F6011F1A4B326B8CE1D38B0.roa (raw, json)
Hash identifier:          dkEVNF8etXapZGbX2G3Z3Q2gEYWD+xogQFKd8CSHTiQ=
Subject key identifier:   C5:AF:55:3E:D8:CC:C7:30:A1:ED:65:C9:AC:86:D0:7A:A4:FB:80:40
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C9A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D748D748F6011F1A4B326B8CE1D38B0.roa
Signing time:             Mon 03 Aug 2026 17:27:08 +0000
ROA not before:           Mon 03 Aug 2026 17:27:04 +0000
ROA not after:            Tue 22 Sep 2026 17:27:04 +0000
asID:                     137899
IP address blocks:        45.205.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117155 (0x1c9a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  3 17:27:04 2026 GMT
            Not After : Sep 22 17:27:04 2026 GMT
        Subject: CN=6a70cf6c-47f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fc:2c:39:9f:90:67:28:60:25:e3:42:49:63:
                    1a:e2:ef:f7:8a:fe:b4:c2:82:50:b9:b0:45:5c:e2:
                    e8:0c:ee:9e:49:f7:4f:6b:29:ac:a7:4c:6a:07:a4:
                    03:fd:2c:ba:7f:65:1a:4b:c8:fa:9a:08:72:95:fe:
                    97:e7:be:a1:6e:b3:9e:8c:cf:d9:e5:05:b3:61:40:
                    51:ef:ce:9c:ed:32:c0:25:98:6d:c5:ee:be:84:78:
                    61:c9:2e:84:e8:15:63:30:2d:37:c0:cb:00:ae:b1:
                    13:e6:ec:b8:e9:50:29:62:23:2f:b2:fe:38:3e:a5:
                    f6:e1:1e:69:bd:7a:68:91:fb:9d:78:f8:35:a1:e2:
                    a0:ac:37:5f:6c:77:29:9b:73:f3:00:98:84:f7:dd:
                    1b:b7:7c:ec:f5:12:67:43:e4:4e:ad:57:71:50:0e:
                    ff:6a:f4:9f:57:bc:b2:e3:16:e0:0f:75:cb:f4:62:
                    bf:53:1e:7b:18:9d:1d:d8:83:fb:ef:bc:51:ed:c8:
                    d6:eb:4c:a6:b3:f3:e8:de:7f:31:12:61:7f:3d:73:
                    4e:0d:25:7c:b8:3e:68:94:9c:e7:0b:b0:b1:23:62:
                    ff:da:a0:3e:f2:58:7b:2d:e4:0d:40:3e:f7:2b:72:
                    0b:b3:84:78:02:72:7f:12:0d:da:d9:37:20:66:dc:
                    ba:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AF:55:3E:D8:CC:C7:30:A1:ED:65:C9:AC:86:D0:7A:A4:FB:80:40
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D748D748F6011F1A4B326B8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a7:95:71:41:43:2f:bc:6f:57:5d:ea:74:31:9d:ab:69:7f:3b:
         95:ee:1b:eb:a8:56:85:4c:cd:4d:93:64:8a:ea:06:cf:a0:61:
         c8:a2:b5:76:a5:4b:5c:e7:bb:6b:55:4a:6b:74:70:7b:2c:01:
         df:10:40:0e:e4:75:cf:3d:87:e8:6a:39:3d:13:53:1a:72:d7:
         51:51:7f:f4:b4:5a:11:33:39:8c:94:63:f5:1b:19:33:dd:59:
         85:24:e4:14:0a:f6:6b:00:cc:d8:ea:95:c3:79:22:c4:a2:dd:
         02:44:9d:97:ff:59:58:53:80:4e:00:a2:86:41:fa:4d:a0:42:
         ef:d9:b1:85:3e:af:0e:24:52:e9:c1:a6:dc:38:9b:14:1f:77:
         92:3f:21:01:db:aa:50:bf:35:44:96:59:a1:3f:56:32:a7:70:
         98:bf:23:67:71:66:5e:14:60:a0:df:34:e6:be:91:cd:5b:fd:
         db:99:6b:12:11:60:06:4e:23:1f:b4:f6:68:25:8e:a8:ab:df:
         f4:31:ed:9c:93:12:23:28:3b:50:2d:a1:fd:cf:eb:52:c0:17:
         e2:d5:ad:91:ab:28:c3:88:bc:ed:90:da:3d:00:a0:52:0d:4b:
         2a:9b:20:2b:99:9f:ac:45:b7:61:47:7c:36:19:54:3a:f6:66:
         f7:41:69:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----