Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A346876EA66D11F18A60AE1ECF1D38B0.roa
File:                     A346876EA66D11F18A60AE1ECF1D38B0.roa (raw, json)
Hash identifier:          T7fU8YBitIt0rH3NQ4iRtAXYvmbXk3/97aizLCfmwNg=
Subject key identifier:   10:0E:97:BF:B1:53:77:B2:71:C6:23:5D:0F:7E:65:55:0D:64:76:3D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D232
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A346876EA66D11F18A60AE1ECF1D38B0.roa
Signing time:             Wed 02 Sep 2026 01:28:45 +0000
ROA not before:           Wed 02 Sep 2026 01:28:41 +0000
ROA not after:            Thu 08 Oct 2026 01:28:41 +0000
asID:                     401362
IP address blocks:        45.202.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119346 (0x1d232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  2 01:28:41 2026 GMT
            Not After : Oct  8 01:28:41 2026 GMT
        Subject: CN=6a977bcd-e6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:24:6a:ef:61:2b:4e:84:e8:f1:13:f4:4f:95:
                    b2:74:6e:23:8c:9a:c8:ed:2d:c3:c1:3a:14:24:39:
                    c5:07:e1:63:10:1a:aa:af:12:59:87:3a:b6:60:db:
                    ef:12:34:2f:5d:fa:6c:79:f3:b1:41:14:43:93:88:
                    9d:b3:c2:bf:fe:fb:1d:16:76:0e:ce:1f:ef:2d:d2:
                    33:99:18:b9:2d:b0:25:77:81:0e:f3:5f:74:58:ec:
                    cf:17:6b:36:2c:07:33:56:61:f2:84:2e:17:01:44:
                    7d:e2:16:b8:f6:e2:f0:e0:91:2d:c6:81:65:b4:26:
                    02:fe:b7:7a:18:56:e1:27:2e:07:d2:a9:93:11:7b:
                    e0:40:ea:45:78:8e:f7:c5:29:91:b3:b2:d4:db:a3:
                    9d:1f:b6:ca:fb:d8:01:84:ea:35:7e:66:62:0d:06:
                    8c:b8:1e:1e:ec:fc:f7:3c:34:69:59:63:46:e4:68:
                    0d:21:8b:86:6e:9b:d4:e4:8b:6c:a5:d2:da:59:11:
                    d7:0a:02:d2:fa:f0:4a:26:28:ee:6e:08:60:60:ed:
                    33:0a:25:a6:dd:b1:b2:ce:e9:62:e3:3f:30:a9:aa:
                    22:71:a1:57:0f:76:d8:28:c1:04:05:c1:f1:70:a4:
                    ff:af:f6:2c:cc:dd:20:30:b4:90:fc:d0:24:21:23:
                    3e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0E:97:BF:B1:53:77:B2:71:C6:23:5D:0F:7E:65:55:0D:64:76:3D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A346876EA66D11F18A60AE1ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:40:c4:8f:22:ff:86:a7:f3:0e:dc:c9:ab:d5:c3:75:b4:3c:
         f1:b7:8a:9f:7b:56:c2:e1:f8:47:64:52:4d:90:ef:6a:79:32:
         79:c7:42:13:d3:b4:da:3b:cd:90:91:d1:da:a2:46:2f:6a:ec:
         b1:5e:0e:a2:46:9f:7c:35:9f:97:45:64:16:d8:32:8f:7e:3b:
         fa:81:85:1d:3b:45:9f:c9:4d:65:e6:ee:fd:1d:c3:78:a9:eb:
         76:f8:da:a2:bf:ff:c2:c1:f8:04:8b:f3:17:ed:7a:d1:02:bf:
         89:fc:57:bc:cb:7a:18:6c:aa:36:92:fe:ee:ad:2e:87:d2:59:
         df:e7:41:17:86:70:10:b0:f1:ea:89:fc:2a:0f:40:d5:21:b9:
         09:84:0e:30:ee:fe:70:c8:a9:df:ae:38:b9:34:6a:17:76:ad:
         cf:a2:e5:26:25:3e:ae:04:bb:c7:3a:67:90:0e:c2:1e:64:7f:
         7b:1b:c5:72:0d:ab:3e:01:cd:fc:d2:02:b8:9b:e7:1b:a2:3e:
         a5:d9:a9:cc:71:68:6d:4e:da:7e:b5:66:28:1e:e9:7b:8f:c6:
         08:31:d6:c4:a1:43:a6:8d:bf:0b:43:95:6f:48:a4:08:c3:79:
         88:ab:b3:b5:15:e5:49:2e:8f:2a:c6:c3:22:fc:25:5f:32:ae:
         03:80:f5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----