Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D8674808CAD11F19B66E4DACE1D38B0.roa
File:                     9D8674808CAD11F19B66E4DACE1D38B0.roa (raw, json)
Hash identifier:          JCD+MYaRMuIvIZny1o5BMgw6FSbEPqW7dNf2V00NW5A=
Subject key identifier:   1D:E1:6C:52:9E:E8:B0:C4:28:D7:6D:55:DD:6F:F6:6A:DC:79:2E:FE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C8E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D8674808CAD11F19B66E4DACE1D38B0.roa
Signing time:             Fri 31 Jul 2026 07:01:13 +0000
ROA not before:           Fri 31 Jul 2026 07:01:09 +0000
ROA not after:            Mon 24 Aug 2026 07:01:09 +0000
asID:                     2914
IP address blocks:        45.195.244.0/23 maxlen: 24
                          45.202.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 23 Aug 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116963 (0x1c8e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 31 07:01:09 2026 GMT
            Not After : Aug 24 07:01:09 2026 GMT
        Subject: CN=6a6c4839-6d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:64:55:2c:1c:2a:17:7e:1c:c0:7e:0f:d0:ee:
                    09:72:c2:57:f3:9a:91:87:35:a9:06:08:2d:89:36:
                    06:68:90:7b:02:09:8c:ae:70:20:74:1e:7a:24:2a:
                    70:76:b7:2d:c9:fb:a7:ed:4b:4a:d9:92:08:89:d7:
                    92:74:3c:12:ac:f3:99:fe:dd:d6:d7:a4:ee:f9:e5:
                    67:09:5b:3d:5a:c0:16:14:c0:cf:0d:30:1a:3c:dd:
                    c3:86:d8:5b:87:d8:97:83:ab:80:31:81:7d:cf:4f:
                    ea:79:f9:8b:4a:86:53:2b:13:91:ed:cc:05:39:84:
                    1b:29:56:e7:03:f6:22:55:f1:da:3f:d2:62:85:f3:
                    ee:a1:a2:04:28:9c:4e:7c:25:8f:fa:66:6c:66:34:
                    54:15:e0:be:6c:6f:a1:80:4a:72:91:29:25:56:7d:
                    4f:3c:43:08:91:5d:e9:e6:8c:7d:cb:2f:73:73:55:
                    53:7e:ea:de:38:75:28:bf:7e:84:9c:ea:ac:22:19:
                    5f:38:1b:e6:4c:7b:d5:af:23:f8:1b:49:68:d8:10:
                    5b:77:16:1c:6f:65:02:96:01:db:a1:7f:13:09:83:
                    95:a4:c7:a5:61:53:8a:96:4b:4b:e0:e7:58:f7:4c:
                    05:ee:5c:a8:c1:97:c9:e1:a1:90:e2:f6:89:4d:6b:
                    94:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E1:6C:52:9E:E8:B0:C4:28:D7:6D:55:DD:6F:F6:6A:DC:79:2E:FE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D8674808CAD11F19B66E4DACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.244.0/23
                  45.202.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:6c:db:31:1d:fe:7d:9b:2c:6a:13:5a:dd:76:b4:d1:6e:d0:
         ff:89:82:19:1c:aa:56:f2:43:1f:96:e6:2f:02:92:c4:b9:cc:
         67:8b:58:29:ed:d7:28:3e:a6:b7:90:26:20:d3:6c:e4:6b:da:
         8f:e5:b8:1a:76:e4:6a:7b:62:c5:fe:b1:f8:66:55:5c:08:79:
         93:f3:03:8a:04:79:da:86:be:db:83:63:af:d4:09:02:00:ef:
         00:e4:9d:8a:6c:1f:f8:c9:b2:53:24:0a:df:81:64:14:6e:21:
         58:c1:60:2c:f3:8c:b0:cb:f6:fa:fd:a7:47:8f:7c:12:d0:8d:
         49:ca:1d:9a:df:54:d1:5d:e6:7b:83:83:7e:42:ad:42:74:c1:
         79:ec:c2:0e:98:7c:46:b1:a2:4b:44:9c:75:2f:48:de:e1:b0:
         90:83:52:16:dc:57:ad:1e:e8:fd:5f:1f:3b:9f:1a:32:97:ba:
         62:cb:73:02:cd:f8:69:94:d2:35:96:ce:a6:63:36:1d:f9:c2:
         a4:33:86:ba:e2:09:35:d9:1f:ee:7d:eb:21:f8:b2:07:43:f1:
         ab:9d:c3:0c:90:1d:13:aa:64:90:5c:db:0a:c1:38:cb:a3:41:
         78:61:17:13:32:0d:75:d5:51:85:c2:47:fb:cf:33:5b:f5:21:
         eb:c3:0f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----