Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/912C8680BF1A11F19207A4C7CE1D38B0.roa
File:                     912C8680BF1A11F19207A4C7CE1D38B0.roa (raw, json)
Hash identifier:          xwtui/r7lak+ZwiTp/TnVWWDwMrcKPPOkKQ6vmNpi74=
Subject key identifier:   CA:FA:A8:02:F0:FE:07:99:FB:E7:3C:2F:BF:83:56:FD:CE:75:9D:E5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA5F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/912C8680BF1A11F19207A4C7CE1D38B0.roa
Signing time:             Sat 03 Oct 2026 11:07:05 +0000
ROA not before:           Sat 03 Oct 2026 11:07:01 +0000
ROA not after:            Tue 10 Nov 2026 11:07:01 +0000
asID:                     61254
IP address blocks:        45.196.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121439 (0x1da5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  3 11:07:01 2026 GMT
            Not After : Nov 10 11:07:01 2026 GMT
        Subject: CN=6ac0e1d9-5ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b5:1d:4b:12:c5:b0:e4:0e:ca:2f:14:46:f1:
                    49:ed:2f:c8:6f:dd:11:f1:e6:4f:4e:5f:2c:45:e4:
                    42:c3:ca:86:33:c1:ab:fe:6d:16:01:33:79:72:49:
                    59:dc:b5:dc:c6:26:12:49:ff:34:08:67:0e:73:5d:
                    9c:da:dd:46:59:9b:dc:6d:ed:c7:72:e7:ae:3b:df:
                    96:e1:d0:6a:9a:14:3b:c6:0b:a3:c9:ab:d7:d0:01:
                    b7:69:c3:d1:29:20:12:57:7e:a6:ec:c8:1a:b9:a6:
                    9d:89:03:5c:81:97:09:64:1f:4a:4a:ee:ca:45:5d:
                    ef:32:3a:f2:64:e1:cf:e2:91:a0:ea:53:ed:0f:04:
                    0c:9f:dd:1e:06:d9:4b:10:2b:18:07:8c:fe:58:ad:
                    95:a2:50:c7:4a:2a:9f:31:40:5f:52:12:27:9e:4d:
                    c0:91:dc:3e:95:34:e3:87:8c:fb:27:10:26:99:8e:
                    e7:1c:d9:72:1f:72:7e:b4:41:e2:de:35:bf:59:49:
                    f5:64:09:7a:91:02:f7:ff:24:22:4d:3b:52:4e:ad:
                    dd:31:af:c7:8c:e5:ea:07:b8:58:a0:ea:e4:44:31:
                    75:ea:65:ce:b2:41:93:3a:50:93:d4:6b:3c:95:bb:
                    00:11:e1:a4:d5:6f:24:1f:5f:87:ef:ae:57:91:f0:
                    04:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FA:A8:02:F0:FE:07:99:FB:E7:3C:2F:BF:83:56:FD:CE:75:9D:E5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/912C8680BF1A11F19207A4C7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:c7:e6:c2:4f:0d:f4:08:d9:f0:b6:46:13:6a:00:6b:70:ba:
         c1:fb:ed:96:b9:82:49:68:05:2d:db:a3:87:21:00:62:db:6d:
         6f:65:01:b0:1b:3c:6b:29:a5:95:a8:42:73:84:26:ce:67:82:
         53:6c:cf:ba:15:45:2e:4a:a8:0a:82:ef:8a:7c:3c:cc:95:97:
         af:e6:93:ca:60:17:96:31:40:a2:5b:a3:88:6c:3e:8d:4e:46:
         95:67:4c:e0:50:98:2b:75:1e:56:43:f7:ec:53:ab:13:10:87:
         e6:07:e9:b4:b8:5e:d9:c4:03:1b:94:1b:85:c1:b9:fa:9c:a4:
         72:62:00:77:70:84:f3:e0:17:10:07:94:7f:85:ee:98:22:cd:
         ec:56:a5:a5:ba:ef:0d:f4:64:27:30:70:4b:49:b1:7c:6f:19:
         c2:65:3f:59:a2:b0:14:7a:2a:02:0e:88:15:d5:01:03:06:1f:
         9f:3c:86:ec:ca:cd:a8:2c:b4:1b:60:be:4b:c8:00:15:df:52:
         38:7a:77:a0:b6:f7:d7:a0:f6:73:8e:e7:d1:c3:d4:2e:8c:d6:
         0b:f7:3e:9b:96:3d:4c:5f:dc:8c:31:bf:81:20:c6:f4:43:2a:
         d3:c5:17:2e:84:17:18:9b:07:a8:2c:d6:33:31:99:9c:30:cc:
         e3:ad:e7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----