Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B100B2709C6411F18EEB3BABCE1D38B0.roa
File:                     B100B2709C6411F18EEB3BABCE1D38B0.roa (raw, json)
Hash identifier:          MOA/rPWL4EIzWgvs4VfdPoWjq4lypw4x8qy87KZsn0s=
Subject key identifier:   6D:4E:8B:0D:17:E9:91:CC:B6:E3:C5:B2:1D:47:EB:F9:5E:75:9A:84
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE78
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B100B2709C6411F18EEB3BABCE1D38B0.roa
Signing time:             Thu 20 Aug 2026 06:59:31 +0000
ROA not before:           Thu 20 Aug 2026 06:59:27 +0000
ROA not after:            Mon 21 Sep 2026 06:59:27 +0000
asID:                     215925
IP address blocks:        45.205.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118392 (0x1ce78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 06:59:27 2026 GMT
            Not After : Sep 21 06:59:27 2026 GMT
        Subject: CN=6a86a5d3-9091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:13:f7:32:f6:c8:d3:4d:44:e6:8b:78:44:76:
                    8b:92:00:1b:7e:e2:67:b2:e5:de:40:33:2c:f9:f1:
                    c0:78:2a:cb:f5:45:00:cf:27:9c:7d:a3:ee:1c:73:
                    c1:30:e5:f2:60:40:88:05:32:ee:82:9e:ed:20:bb:
                    f3:45:e7:95:46:e7:6e:be:26:81:7e:4f:e4:57:70:
                    8e:8b:dd:ed:c7:08:1f:d6:91:32:4c:4d:2c:51:d7:
                    29:32:d9:60:dd:d1:b5:2d:b9:74:eb:a7:e4:0c:d0:
                    5c:9d:46:a1:6e:da:22:6e:f2:dd:c0:cb:3c:8f:9a:
                    aa:9a:55:69:07:4a:1d:10:c0:27:09:ec:25:10:0b:
                    98:43:0e:2c:d6:77:d0:6e:6c:f5:97:2d:c5:5b:c7:
                    97:26:4c:6a:ff:a0:67:6c:bf:5e:2d:3b:3c:8c:2f:
                    8e:14:38:bf:44:5c:3c:b6:9f:6e:00:5a:a0:b8:99:
                    8e:ca:15:33:4a:1b:3c:b0:cc:00:c5:78:cf:c6:a0:
                    1b:e6:69:99:ee:26:55:7b:70:ef:2c:25:00:a6:df:
                    96:a4:c9:9f:f7:ae:07:d3:76:39:57:2f:ac:a7:87:
                    9f:c7:da:e9:67:08:e3:81:3d:49:1c:c2:01:a6:70:
                    a0:a2:ae:d8:95:5d:3e:cc:3b:b4:e2:a2:a0:f1:53:
                    75:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4E:8B:0D:17:E9:91:CC:B6:E3:C5:B2:1D:47:EB:F9:5E:75:9A:84
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B100B2709C6411F18EEB3BABCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:ba:db:ba:47:80:ac:f5:05:cc:c2:28:94:1f:74:7f:ae:9c:
         71:ea:e6:10:13:f9:a6:a2:f1:11:48:2d:59:17:24:ba:f5:d1:
         dc:e5:38:c8:ad:51:38:5f:b9:9b:95:a2:40:5c:0a:b8:60:0a:
         1c:9d:7b:02:89:e0:65:49:76:da:0b:ea:97:99:22:1c:9e:23:
         96:3a:e8:ba:28:78:a0:18:b4:03:40:f6:3d:ba:4d:02:ad:04:
         b1:d9:92:31:b3:cb:5a:73:a0:0c:0c:f1:05:46:27:8b:8c:c1:
         ed:e6:46:03:c1:97:8e:b8:9b:80:c5:48:72:ac:b1:1d:af:a7:
         e7:4b:26:ff:0c:bf:8d:8b:49:f0:a4:92:eb:92:5f:c5:d8:8b:
         13:a6:b8:34:c8:35:2f:bb:44:74:95:95:db:08:6e:32:46:1d:
         07:24:c0:ea:43:ee:9a:e4:73:bd:e7:2c:e2:9c:62:f8:18:17:
         25:4f:02:21:db:6a:f0:3a:d8:35:90:73:44:bf:f2:c3:a1:87:
         34:07:9b:20:cd:c6:6d:8b:ec:22:1d:84:3b:b5:7c:a5:11:61:
         77:42:ca:78:8e:b8:d0:19:00:c0:23:0e:3c:49:c7:ec:79:6b:
         16:66:bb:9c:90:c6:39:cd:be:92:e2:9c:f1:99:b9:da:c4:fd:
         9b:11:f0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----