Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA0EA55ECB8911F19F05F002CF1D38B0.roa
File:                     AA0EA55ECB8911F19F05F002CF1D38B0.roa (raw, json)
Hash identifier:          2XmTf2XBvAT8B99XKIilaeO5RK2fe/VIfGGBtPX+s3E=
Subject key identifier:   58:ED:51:BF:2E:E5:43:FC:30:FC:42:10:6D:04:AC:17:FE:84:2D:94
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DEB0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA0EA55ECB8911F19F05F002CF1D38B0.roa
Signing time:             Mon 19 Oct 2026 06:52:35 +0000
ROA not before:           Mon 19 Oct 2026 06:52:30 +0000
ROA not after:            Fri 27 Nov 2026 06:52:30 +0000
asID:                     198566
IP address blocks:        45.203.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122544 (0x1deb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 19 06:52:30 2026 GMT
            Not After : Nov 27 06:52:30 2026 GMT
        Subject: CN=6ad5be33-479c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8c:73:2e:fa:78:b1:12:23:82:f9:96:5d:fb:
                    21:5f:48:db:97:58:37:38:77:6a:f6:63:57:6c:7e:
                    4f:c4:b3:6d:c6:f3:ae:9e:de:a3:97:df:5e:b1:df:
                    f6:47:5a:8a:f5:18:ee:67:0d:73:91:d6:29:b0:4a:
                    67:a6:bb:d0:19:8e:57:f3:3b:8d:f7:a1:43:65:4c:
                    95:d5:e1:7e:00:48:fa:8e:a5:07:f4:b5:ac:d0:98:
                    3d:cd:80:d2:e4:15:d7:b2:17:aa:a9:4f:33:f7:be:
                    21:5f:ff:4d:d8:17:5a:63:d1:1d:26:fd:7a:3b:5c:
                    69:ad:19:5e:aa:c8:a9:d8:5e:f7:4c:f6:6e:15:f0:
                    9f:31:db:b5:88:93:bd:c2:ab:2a:ca:35:66:1d:36:
                    95:a5:20:67:63:7d:2b:e5:e6:86:38:8d:74:d7:ca:
                    d7:42:a7:5d:dc:40:ef:ed:b6:0f:60:7d:47:ff:52:
                    c7:26:69:da:f2:a1:26:16:6b:14:a8:e5:f2:14:c7:
                    2b:d7:f3:fa:e6:b3:1e:ff:2f:a0:7c:fe:9a:8c:c2:
                    c1:fe:9f:25:78:c5:e1:89:74:67:5e:ba:47:26:3e:
                    0c:a6:b0:e0:e8:75:f3:32:d6:51:92:0b:78:e7:82:
                    91:67:54:e1:50:ac:45:5e:89:2d:a3:c9:af:fc:b8:
                    20:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:ED:51:BF:2E:E5:43:FC:30:FC:42:10:6D:04:AC:17:FE:84:2D:94
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA0EA55ECB8911F19F05F002CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.203.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:0d:6d:c7:31:88:b9:0f:cb:9f:e7:f3:e9:8e:5f:59:f2:80:
         db:f4:4b:04:81:1d:c8:7f:c3:fc:45:65:7b:ec:ee:81:cd:3f:
         f8:4d:ce:2b:60:ca:d5:70:4f:1b:2b:4a:1a:dc:f9:51:59:9d:
         8d:9a:8e:f9:d4:d2:fb:9e:78:62:ac:51:fe:29:5a:2b:a3:c6:
         0f:74:4c:70:c7:98:ec:15:aa:0a:a3:04:45:55:23:85:db:6a:
         4d:9a:5e:dc:42:81:f8:16:6e:68:44:b1:c4:ad:9d:75:a4:bc:
         0c:89:52:25:d8:e6:22:1f:63:ee:23:88:d0:68:e4:cb:50:cf:
         84:d8:c0:b4:23:01:17:98:6e:90:42:7b:79:d8:e6:c7:2d:d9:
         50:52:b3:ea:de:37:95:0c:18:bb:ad:21:04:c5:b8:6d:f1:b4:
         f2:cd:f5:4a:00:cd:18:c1:e8:d5:1c:21:62:15:c6:07:28:58:
         99:5a:2a:6b:98:8b:9b:5e:93:b8:ce:18:fb:86:8f:86:ec:77:
         c6:57:bd:72:c3:14:ca:4d:9f:85:e8:7e:3a:f1:37:8a:6e:ed:
         d9:30:c3:35:ea:7f:02:4a:2b:d1:4e:b4:02:f3:7a:9a:7d:8c:
         97:1e:a4:41:ba:94:8a:f5:86:f9:dc:9c:70:02:56:7f:15:97:
         3a:dc:46:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----