Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EA8305EC4AE11F1A2B5B2C1CE1D38B0.roa
File:                     9EA8305EC4AE11F1A2B5B2C1CE1D38B0.roa (raw, json)
Hash identifier:          seebxMt2+AuMbRIl64sRnn7dzNKxTLrlpA/6s00iI2w=
Subject key identifier:   87:7F:C7:37:A9:08:80:00:79:A8:6F:4D:67:7A:C5:AC:08:72:92:0F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC8E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EA8305EC4AE11F1A2B5B2C1CE1D38B0.roa
Signing time:             Sat 10 Oct 2026 13:29:29 +0000
ROA not before:           Sat 10 Oct 2026 13:29:24 +0000
ROA not after:            Tue 17 Nov 2026 13:29:24 +0000
asID:                     11404
IP address blocks:        45.204.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121998 (0x1dc8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 10 13:29:24 2026 GMT
            Not After : Nov 17 13:29:24 2026 GMT
        Subject: CN=6aca3db9-adfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f6:6f:8a:14:f4:c0:09:1f:a6:37:2b:12:dc:
                    35:b7:e7:c3:8b:cc:b1:15:57:65:12:47:f4:ab:9a:
                    d3:b7:54:22:b3:af:9e:ff:86:ed:c7:c0:71:46:ee:
                    34:9a:d5:1e:eb:5b:d6:5b:46:95:45:5a:a2:f2:f0:
                    c6:9f:9d:1f:a8:8a:d8:6e:8e:ac:3c:58:8d:6c:6f:
                    ed:25:bc:00:01:35:dc:ad:70:14:f5:c9:11:4d:28:
                    9c:87:c0:1b:98:5c:f7:19:99:50:31:b7:ca:74:a0:
                    14:07:8f:f4:fc:92:2c:ca:37:ad:6a:6d:42:b8:7a:
                    12:26:13:15:b7:3c:11:21:9b:73:2b:dd:d3:7b:cf:
                    b8:cd:17:d6:6e:87:c3:7e:7e:6d:d2:57:78:20:c4:
                    bc:20:ca:66:ee:30:a5:e2:8e:89:e7:08:f0:39:46:
                    6a:07:a6:20:61:a3:99:21:5e:35:a8:9e:2a:59:9c:
                    32:f7:81:72:9f:a1:9e:50:23:b1:99:0f:85:67:a1:
                    a7:65:94:f6:8a:49:10:21:20:fc:bf:97:b8:be:a0:
                    a6:cd:04:f1:ee:4c:69:10:21:cf:0e:49:fb:bf:fe:
                    d0:59:c7:10:14:b0:33:ee:ba:69:2d:19:32:46:ab:
                    a3:2d:c9:c6:de:90:d9:cc:e2:61:90:4c:4c:37:9a:
                    07:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7F:C7:37:A9:08:80:00:79:A8:6F:4D:67:7A:C5:AC:08:72:92:0F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9EA8305EC4AE11F1A2B5B2C1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b0:f7:ca:71:aa:c3:61:c3:b9:23:a3:d6:d7:af:ad:0d:50:9b:
         92:db:c2:09:9e:be:79:ca:d7:34:05:4a:4b:93:6e:b1:07:9b:
         3b:50:1c:e7:2b:e1:1b:0e:ec:00:b0:c0:6e:8e:ed:02:af:79:
         f8:d5:fa:75:bb:41:0c:3b:27:10:b9:96:8b:b5:cc:82:a5:3f:
         20:31:17:d2:b2:12:8e:24:a4:fc:18:d1:f1:9b:fa:3a:cb:49:
         2e:9f:6c:86:e7:66:69:7e:96:96:bd:c3:57:be:11:32:7a:db:
         21:be:e0:e5:31:93:18:62:2f:e1:91:5d:0a:60:d4:74:5c:5b:
         4d:62:4f:66:83:94:86:19:66:d3:89:52:99:51:5b:e6:00:5f:
         8c:03:bc:25:09:79:fd:0b:c4:77:8b:8d:e4:2f:76:4b:47:23:
         c5:22:26:5d:d5:fe:71:eb:fb:a1:52:b1:21:59:0d:7a:66:12:
         0a:3d:17:21:35:ce:72:d5:1f:7e:15:bf:92:7a:e7:23:68:bb:
         30:13:41:62:7f:ca:2a:67:ad:09:36:92:31:2c:d7:04:fa:83:
         b2:71:40:b1:70:fa:93:d3:01:78:d0:cb:b2:fb:b1:34:b5:56:
         ee:da:67:3c:24:da:98:7d:25:e5:3b:9a:18:12:05:9a:87:a4:
         1e:bf:b9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----