Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1ECCEAA96EF11F1912E0F14CF1D38B0.roa
File:                     B1ECCEAA96EF11F1912E0F14CF1D38B0.roa (raw, json)
Hash identifier:          QSvt9LBpW7Lwv2Gy37OOZh7emekBUEUIfkffuupSM0o=
Subject key identifier:   B9:BD:DB:83:55:E7:7F:E1:0D:C2:69:CE:36:F0:0C:34:C6:C5:82:F1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC66
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1ECCEAA96EF11F1912E0F14CF1D38B0.roa
Signing time:             Thu 13 Aug 2026 08:19:25 +0000
ROA not before:           Thu 13 Aug 2026 08:19:21 +0000
ROA not after:            Mon 21 Sep 2026 08:19:21 +0000
asID:                     63099
IP address blocks:        45.198.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117862 (0x1cc66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 13 08:19:21 2026 GMT
            Not After : Sep 21 08:19:21 2026 GMT
        Subject: CN=6a7d7e0d-070a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b1:6d:b6:ad:4c:f1:80:f5:70:89:de:df:44:
                    97:3e:29:55:44:16:d8:6a:e1:03:68:ad:dc:cf:27:
                    9c:de:0a:70:24:a6:88:8d:6b:c6:60:73:2f:fa:53:
                    18:e3:27:72:77:67:63:0a:82:d9:07:ea:3a:41:22:
                    24:0c:3e:40:ef:4c:d1:68:d9:4f:07:ca:2f:29:d9:
                    78:4a:a5:01:6e:90:85:17:7a:9e:28:f5:c9:b7:9c:
                    44:03:ee:51:84:d5:6d:72:ec:bb:2e:3e:bc:85:9a:
                    05:15:17:41:85:83:6d:25:4d:44:e9:69:47:ea:9f:
                    a9:07:06:65:04:5c:94:6a:37:31:74:47:fc:f1:a1:
                    ce:98:1c:cb:2b:fd:df:b7:e5:4e:e8:01:35:9b:5d:
                    a9:89:74:6f:f4:e8:39:99:4d:92:f7:cb:14:15:26:
                    e5:cd:86:ac:5e:65:dc:69:53:f3:e4:4a:d5:54:b7:
                    8d:91:71:5e:36:26:9e:2e:0c:fc:5e:8e:cc:e4:6b:
                    9c:c8:27:fc:0c:ca:38:65:d0:c6:14:74:1e:e1:48:
                    3c:ab:77:bc:c6:fe:fe:66:e5:c2:c9:e1:fa:73:6c:
                    f1:77:bf:05:68:25:f4:81:c5:4a:8d:25:19:e0:14:
                    a0:c7:3b:73:af:65:83:cd:bf:15:6b:4b:18:5c:d9:
                    72:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BD:DB:83:55:E7:7F:E1:0D:C2:69:CE:36:F0:0C:34:C6:C5:82:F1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1ECCEAA96EF11F1912E0F14CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:61:1c:0f:a5:90:ae:8d:3d:18:5d:3a:74:fa:00:33:14:d4:
         84:34:be:b6:67:ee:23:93:9f:05:bd:91:0f:12:a4:95:79:30:
         b5:4b:4e:84:fd:0f:e6:1c:0b:5d:dc:14:3b:62:07:d4:bb:49:
         75:a7:c5:d9:20:df:46:59:6f:58:03:53:28:34:e8:4c:cd:e3:
         8f:71:d9:54:4e:34:42:bf:64:10:3b:66:29:ae:1c:0b:05:19:
         2c:c8:1e:4b:2f:87:f1:aa:be:6b:a7:e7:9f:49:18:e4:dc:c7:
         11:82:0a:eb:31:c0:9d:80:bf:b1:bb:58:05:44:27:a6:2b:ff:
         01:85:30:22:4b:1e:b5:2f:a9:80:51:3d:39:81:7e:d6:10:dd:
         77:ba:07:b3:8a:6b:56:2a:fa:d4:cd:4a:77:2b:f3:50:f2:f1:
         5a:76:bc:56:4e:e2:74:46:96:91:f9:71:df:a2:9b:a3:29:bd:
         f1:bd:db:61:dd:8a:4a:74:38:76:58:bf:c5:4d:a9:6b:7f:a9:
         b4:94:e0:34:96:aa:44:bf:cb:9f:a6:8f:ba:fe:4f:59:db:e0:
         c9:6c:97:c4:84:44:fc:a4:17:19:77:68:77:8e:c8:1d:4f:c3:
         30:59:49:c6:97:2a:03:98:e5:c0:e7:5b:7b:b2:1e:ba:79:16:
         45:26:c2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----