Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1AED7AACA0B11F1B93749C6CE1D38B0.roa
File:                     A1AED7AACA0B11F1B93749C6CE1D38B0.roa (raw, json)
Hash identifier:          0qN+qcJy9r/nCKWIe4p1r+TiDq0CVxfr05P9EkSpfGg=
Subject key identifier:   99:A0:79:F5:F7:4E:FA:2D:90:65:97:BB:32:98:22:7C:A1:82:FB:DA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DE22
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1AED7AACA0B11F1B93749C6CE1D38B0.roa
Signing time:             Sat 17 Oct 2026 09:17:53 +0000
ROA not before:           Sat 17 Oct 2026 09:17:49 +0000
ROA not after:            Thu 03 Dec 2026 09:17:49 +0000
asID:                     20473
IP address blocks:        45.207.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122402 (0x1de22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 17 09:17:49 2026 GMT
            Not After : Dec  3 09:17:49 2026 GMT
        Subject: CN=6ad33d41-0e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:a2:55:75:69:08:13:5b:4e:0d:7f:15:6c:
                    6d:87:2a:b8:c8:58:b5:67:bb:46:4b:47:23:1d:65:
                    c1:1b:7b:d3:ab:6f:aa:c6:53:1a:36:d1:cb:5b:39:
                    9f:17:ae:bf:37:08:bf:64:2e:3e:82:b5:92:0a:6d:
                    aa:fe:76:4d:87:10:40:e2:1f:d6:74:c3:a2:82:14:
                    2f:3c:cf:d4:7c:08:95:98:30:8b:50:99:06:9c:16:
                    f4:c8:bf:67:6e:a5:82:ef:c5:65:f6:dc:3b:87:87:
                    8d:af:f8:15:d0:de:09:59:60:a7:96:97:76:ff:53:
                    08:e6:e2:6c:9c:0a:50:cc:dc:1b:12:68:f6:a4:6e:
                    db:48:9c:ee:9b:d2:7c:41:84:f4:84:bb:b8:ad:bc:
                    3d:21:ff:e4:08:bb:84:fe:1e:a8:d2:9b:c9:10:d4:
                    73:91:59:ca:1a:23:ac:b9:1f:81:a8:38:fb:6e:e5:
                    d1:66:40:5a:b1:2f:e1:5e:f2:ce:d4:18:94:19:fb:
                    ab:e4:ca:09:dc:78:17:56:8b:59:9f:d9:f9:7d:af:
                    16:62:7d:a6:71:73:44:1b:d3:cf:ff:e9:14:33:69:
                    ef:0e:6a:9b:70:53:5a:98:f0:58:fe:6a:c8:fb:8b:
                    3a:6c:c9:75:85:d6:ff:35:10:49:e8:22:7d:65:28:
                    ba:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A0:79:F5:F7:4E:FA:2D:90:65:97:BB:32:98:22:7C:A1:82:FB:DA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A1AED7AACA0B11F1B93749C6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:ed:bb:b7:d0:de:71:b0:7e:e4:48:87:bb:96:94:1e:56:7a:
         36:53:03:18:01:bc:88:e7:fa:88:39:2d:0f:1c:13:e3:73:dd:
         09:c0:1e:a2:de:ae:b1:80:2d:04:ce:5b:85:16:5d:45:7c:a4:
         93:70:33:99:69:4d:3f:fb:e3:21:dc:40:5e:73:44:0e:56:49:
         e2:4c:06:31:87:bf:12:d3:69:ec:f0:6c:18:60:45:48:9f:cc:
         8d:54:09:f3:e8:a4:e1:88:c6:86:45:61:74:73:17:5e:23:68:
         55:2b:97:b0:55:ad:45:08:9f:e1:6d:bb:90:87:11:ae:a3:68:
         3b:65:46:6a:d1:1b:99:e3:13:c0:d6:8e:d2:d8:e7:c6:03:61:
         99:6b:a1:ff:cc:47:b1:4e:cd:10:ff:73:94:2c:43:12:5c:fc:
         75:7a:b0:80:f4:fa:ce:6c:92:5e:a6:1f:08:87:bd:ae:5b:59:
         c0:fc:bd:18:37:93:b7:2e:38:b3:c6:11:47:99:ec:b1:c6:2d:
         c7:06:73:de:80:96:55:7d:bc:c9:31:cb:66:2e:a0:7d:29:f5:
         b6:84:76:0f:29:97:43:ad:50:23:7d:16:55:58:d6:34:ce:87:
         ee:51:38:41:89:3d:87:18:a3:8e:b1:18:ce:27:b4:91:a2:20:
         32:6b:37:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----