Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97B4AC9AC86511F185319706CF1D38B0.roa
File:                     97B4AC9AC86511F185319706CF1D38B0.roa (raw, json)
Hash identifier:          Sh9IDaL1T5Xf/GJa1N2vtMrmlwTJP3AR6WvBrJtMC4Q=
Subject key identifier:   96:E7:1D:7F:83:68:CE:7A:F9:45:0E:F3:8A:0C:D5:3B:E2:F8:E5:58
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DD76
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97B4AC9AC86511F185319706CF1D38B0.roa
Signing time:             Thu 15 Oct 2026 06:56:49 +0000
ROA not before:           Thu 15 Oct 2026 06:56:44 +0000
ROA not after:            Tue 24 Nov 2026 06:56:44 +0000
asID:                     32043
IP address blocks:        45.196.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122230 (0x1dd76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 15 06:56:44 2026 GMT
            Not After : Nov 24 06:56:44 2026 GMT
        Subject: CN=6ad07931-ca38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ac:0a:5e:ac:a1:fd:b3:f9:1c:f1:dc:6f:81:
                    ae:22:8d:09:3a:40:d6:ca:a4:83:ba:cc:bf:64:22:
                    24:99:ad:40:02:54:22:9a:bf:1c:6c:ec:b0:0a:37:
                    06:0b:2d:a7:f0:26:36:ba:29:a2:42:61:f4:a1:d5:
                    bf:a5:1c:1f:7f:93:da:50:35:9e:6b:b1:e9:f4:59:
                    8a:fe:8a:57:9f:a1:d0:73:af:4e:eb:6f:64:9c:be:
                    82:e5:7e:d3:d2:0c:4a:0c:52:6c:ff:d5:5c:75:7f:
                    2d:07:e6:14:fc:62:19:78:6d:d8:ac:0c:8b:4c:bb:
                    bb:c5:3e:85:73:b6:d2:a2:04:54:3f:4e:42:36:47:
                    2e:3e:88:09:d7:4a:15:eb:c6:f0:60:dd:a6:47:6e:
                    00:5f:6f:e0:38:ec:38:42:9e:a7:ba:cf:02:f7:d8:
                    42:24:df:1c:83:79:fc:01:d2:95:97:20:78:5b:45:
                    f0:af:55:28:09:77:76:57:86:d8:4f:11:0e:36:5b:
                    0d:6b:7d:b6:a3:ed:b8:62:60:06:58:07:28:b6:d2:
                    06:42:08:09:3c:ce:fe:de:04:31:8f:a0:1c:6c:a7:
                    78:96:7b:df:1b:c5:8b:8f:9f:b1:18:a4:be:c4:45:
                    fa:45:6b:b4:99:9e:17:c9:c2:21:b7:f7:75:85:13:
                    58:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E7:1D:7F:83:68:CE:7A:F9:45:0E:F3:8A:0C:D5:3B:E2:F8:E5:58
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97B4AC9AC86511F185319706CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:ff:43:86:be:0f:ef:32:95:f1:68:0d:4e:b6:e0:bf:cb:1f:
         4f:0b:ec:28:99:1d:bf:f0:fb:13:6c:af:db:fc:94:54:fa:fe:
         c2:98:6c:ae:c8:f7:91:bf:c0:d0:20:37:95:23:e2:d2:12:80:
         b9:be:77:7d:0f:53:23:e9:53:61:a1:71:8d:ff:72:bf:c1:a2:
         e5:91:5e:1c:64:99:23:a5:47:b3:0a:dd:b1:f1:d7:7b:9a:53:
         e1:a6:49:b0:32:09:80:5c:37:09:b9:e4:1f:e8:c7:1d:8d:56:
         d7:d7:c3:1f:b7:bd:c5:43:93:5d:6a:a8:5b:51:fb:0a:b4:6d:
         70:ae:d6:ae:df:51:ae:57:1f:21:d5:9c:19:62:0c:8e:92:81:
         20:e6:c6:cd:11:95:1f:67:63:16:86:01:25:81:7b:48:be:27:
         1c:e1:53:76:e9:58:cc:8e:27:e1:b3:ae:81:f1:70:50:58:93:
         91:45:46:c5:69:7c:32:8c:51:3b:95:93:a6:01:ff:27:37:17:
         b4:e8:46:77:6f:d9:6a:f6:4b:9d:c8:9b:c0:04:03:e4:9d:04:
         15:f0:29:9e:a4:9d:d4:79:10:99:f5:97:a2:4b:f2:75:36:37:
         b8:d4:4a:5d:ac:17:be:71:f2:e0:e5:7f:1e:c8:6d:13:06:d7:
         fd:06:3b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----