Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DF3DBBC9D4B11F18D094AA4CE1D38B0.roa
File:                     8DF3DBBC9D4B11F18D094AA4CE1D38B0.roa (raw, json)
Hash identifier:          AkMI9rzilu+ko9Yk7Ym7QR/9/EF72MkVDxrzhd5CCzo=
Subject key identifier:   51:7F:A9:DF:E3:FD:D3:89:16:14:FA:8C:0B:14:DB:C8:92:95:E5:87
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CFA5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DF3DBBC9D4B11F18D094AA4CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 10:32:06 +0000
ROA not before:           Fri 21 Aug 2026 10:32:01 +0000
ROA not after:            Fri 09 Oct 2026 10:32:01 +0000
asID:                     395793
IP address blocks:        45.195.148.0/23 maxlen: 24
                          45.195.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 00:27:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118693 (0x1cfa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 10:32:01 2026 GMT
            Not After : Oct  9 10:32:01 2026 GMT
        Subject: CN=6a882926-3439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a1:46:a7:f1:88:16:43:08:2c:c3:e1:45:6b:
                    77:29:54:6f:cf:aa:b1:7d:ae:f1:b1:3e:e1:ea:eb:
                    73:30:ad:09:dd:8a:b5:5c:38:16:4c:ac:34:df:57:
                    e9:c3:3a:af:c6:8b:12:d2:11:1b:49:39:33:27:6a:
                    90:a7:a9:07:47:d8:52:04:6e:f6:54:67:e0:95:ba:
                    d8:58:7f:6b:89:b0:83:dc:24:a9:5e:d1:2c:12:85:
                    89:14:a7:7b:23:be:ac:c1:33:91:70:55:e0:bc:58:
                    06:cf:3e:8d:e1:12:5c:79:94:5a:1f:23:6d:e9:eb:
                    0c:4c:06:a2:12:ea:dc:bc:e2:65:d1:78:2a:4b:1b:
                    4f:eb:bc:0c:d9:b1:85:8a:54:37:24:e6:95:c8:20:
                    03:65:8d:e5:c4:ce:b9:d7:9c:1f:ba:ab:19:ef:02:
                    6f:1d:76:76:4b:c8:99:30:ad:4f:60:f5:5a:f8:44:
                    5c:53:b5:47:b6:7b:38:e1:f0:08:e9:66:9d:d8:7d:
                    ea:7f:9b:57:eb:50:82:5e:a4:93:16:db:4a:87:18:
                    db:a7:7c:a4:c1:98:f1:ad:04:ac:ba:ad:0b:9b:d3:
                    e1:b5:2e:bf:95:18:62:b6:1d:7d:d3:e6:6b:55:a0:
                    04:ed:d6:8f:43:fb:1b:dd:0c:16:30:0a:c0:32:99:
                    2f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7F:A9:DF:E3:FD:D3:89:16:14:FA:8C:0B:14:DB:C8:92:95:E5:87
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DF3DBBC9D4B11F18D094AA4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.148.0/23
                  45.195.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:80:0d:16:1d:e1:89:f5:cd:f8:0c:69:01:54:61:bf:9e:2c:
         3e:fb:2a:8e:ed:47:4b:a2:44:52:3c:44:82:75:37:56:c4:a4:
         53:3e:2a:60:dd:d9:bf:5a:a7:c6:a2:73:c5:e1:57:53:ba:68:
         8f:33:69:de:7c:46:ae:5d:7e:1c:7f:3e:cc:33:0a:41:78:b3:
         18:8b:36:0e:ee:d5:15:70:ab:82:ba:96:47:c7:54:bb:c6:6b:
         57:18:6f:f7:c0:9e:42:f6:90:bf:f7:4c:e4:01:c1:f8:18:bc:
         7d:fd:d1:28:21:be:da:8c:cf:a9:6b:6e:55:79:4e:41:f4:19:
         e1:2e:9c:fa:96:ba:c7:f3:41:2c:34:5a:42:fb:3d:39:29:a9:
         92:9b:86:9f:46:ad:08:e9:a9:4d:1a:df:58:c5:d3:5a:7b:8a:
         d0:ca:87:68:ab:00:3a:be:2c:b4:ae:2b:84:b3:d5:d8:a2:36:
         7f:97:79:9d:a5:f0:1f:32:74:28:52:c0:c3:88:c1:b2:5e:30:
         6d:9f:29:ea:ff:d2:ca:29:de:21:2c:b1:2c:00:22:f2:ac:51:
         e0:4f:d8:35:05:93:87:63:84:7f:50:4f:e4:87:ad:f0:5c:e8:
         4c:e8:e5:64:bb:23:c5:0a:6e:d3:4d:d9:97:a2:ec:e8:3b:96:
         79:89:bc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----