Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7805F9CCD2F11F1BD00FBC3CE1D38B0.roa
File:                     A7805F9CCD2F11F1BD00FBC3CE1D38B0.roa (raw, json)
Hash identifier:          Sj08WlPAEklSEp5qYHV2/aSBhEGP9GuKuEYL0ArTN8w=
Subject key identifier:   1F:6B:52:BE:A0:9A:B8:B0:39:8D:52:11:B2:72:51:5A:17:F4:5A:CF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DF66
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7805F9CCD2F11F1BD00FBC3CE1D38B0.roa
Signing time:             Wed 21 Oct 2026 09:13:19 +0000
ROA not before:           Wed 21 Oct 2026 09:13:15 +0000
ROA not after:            Tue 05 Oct 2027 09:13:15 +0000
asID:                     7607
IP address blocks:        45.194.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 18:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122726 (0x1df66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 21 09:13:15 2026 GMT
            Not After : Oct  5 09:13:15 2027 GMT
        Subject: CN=6ad8822e-c1c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fa:29:4e:6f:7a:b7:c3:77:21:f0:50:e4:2d:
                    0c:40:43:b5:f1:53:82:ac:73:e0:f8:66:9c:2a:81:
                    3b:12:f7:7f:ba:5e:16:5e:3a:2d:58:11:5d:ea:9c:
                    f8:73:77:51:27:3c:28:b8:e0:bd:a1:eb:a6:28:80:
                    9a:b9:e2:a3:6a:be:e7:90:c4:08:d6:00:30:78:3d:
                    ba:70:f5:53:d3:7b:ed:75:24:34:6a:fe:5b:12:2f:
                    da:0d:30:e3:91:4b:f3:80:41:93:87:50:dd:84:22:
                    cc:5e:b3:1c:4b:70:06:6f:3d:1a:e9:25:40:5b:d9:
                    38:9c:1a:b4:b7:0e:bf:95:d7:44:e9:97:ab:d6:d6:
                    c2:a0:35:4b:51:a2:74:f5:1e:85:76:1e:9e:09:61:
                    7d:f8:a1:68:0f:43:93:fb:c3:d9:10:17:7f:57:db:
                    16:eb:65:8f:22:d1:77:2f:78:72:3d:2b:76:d5:74:
                    12:aa:7a:d0:17:cf:af:31:cf:0d:af:57:e0:a5:d3:
                    53:a4:e9:a7:cf:21:8d:38:f1:2e:3d:c8:6d:d6:c2:
                    99:53:54:16:42:8b:3a:27:b9:1e:8f:83:fe:1b:ad:
                    04:62:98:1f:73:3e:36:1c:49:9e:df:58:4d:9a:c2:
                    aa:72:ef:44:31:1c:61:79:a8:2e:ad:68:55:6f:f9:
                    31:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6B:52:BE:A0:9A:B8:B0:39:8D:52:11:B2:72:51:5A:17:F4:5A:CF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7805F9CCD2F11F1BD00FBC3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         46:67:b1:b3:ae:84:3a:00:67:5e:28:3d:b4:1e:bf:72:69:b3:
         21:3a:57:70:99:70:cb:07:80:40:0f:3e:f6:9e:02:a3:ec:99:
         30:8c:fb:ab:42:7e:e4:ba:99:ec:6b:82:9e:df:c6:c2:92:7e:
         98:0d:6d:d0:26:1a:75:48:9a:75:3c:0c:d1:31:95:9a:ba:46:
         da:c4:ae:a3:7c:83:c1:c7:1b:c3:2d:ca:71:cc:d8:1d:ce:40:
         fd:46:34:36:98:e0:9d:98:6e:41:3d:2d:69:3f:e8:de:48:83:
         1b:e3:b2:0b:cf:b5:ef:7e:90:82:25:05:4f:10:66:a5:28:c1:
         a1:10:b2:90:76:f0:b9:a4:5c:b5:63:24:29:52:6f:fe:5f:8b:
         8f:d4:bd:04:54:67:49:f1:a0:40:55:f6:2f:c9:5e:9b:f3:1a:
         d8:4d:ce:12:88:d6:75:0c:a1:56:3e:a9:28:8e:0f:e5:6f:13:
         3d:49:f0:78:2a:e6:d6:c0:30:37:33:f8:90:a8:5e:99:83:24:
         ff:1a:76:24:b5:71:c0:71:5d:ff:9a:7f:d1:22:3f:fe:f2:22:
         81:b4:4b:11:4e:7a:c2:4d:83:eb:0a:ba:11:60:6d:fe:52:8c:
         ef:26:e2:06:98:1d:c8:79:f5:cd:84:63:53:c0:7b:a3:c6:04:
         b1:ff:ab:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----