Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B976D7E8AB5211F1B48DBED5CE1D38B0.roa
File:                     B976D7E8AB5211F1B48DBED5CE1D38B0.roa (raw, json)
Hash identifier:          yzSkwTnHWaS1/R+ey0TB7ogmLZGcqKSCp7+7ovbvQIA=
Subject key identifier:   07:65:A8:93:17:3C:62:08:1C:E4:09:50:73:F6:58:14:63:3D:42:7D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D3CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B976D7E8AB5211F1B48DBED5CE1D38B0.roa
Signing time:             Tue 08 Sep 2026 06:58:41 +0000
ROA not before:           Tue 08 Sep 2026 06:58:37 +0000
ROA not after:            Tue 13 Oct 2026 06:58:37 +0000
asID:                     395886
IP address blocks:        45.205.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119755 (0x1d3cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  8 06:58:37 2026 GMT
            Not After : Oct 13 06:58:37 2026 GMT
        Subject: CN=6a9fb221-7422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cd:d6:0c:19:cd:12:6c:8e:e2:c7:5f:9d:04:
                    f6:00:50:da:bc:db:a6:ed:9c:bc:79:08:3a:e5:60:
                    df:97:31:77:ad:0b:d9:40:31:c1:8f:1e:81:50:a6:
                    33:51:fb:79:21:fb:27:24:d8:ea:c8:56:1a:6b:fb:
                    b3:f7:2a:90:fa:5c:0a:4b:88:39:b3:88:c7:cc:5e:
                    06:da:85:b7:9e:4a:06:f1:6a:cc:10:fe:16:37:2c:
                    b0:f1:f7:84:bd:4b:62:6e:e8:70:ed:30:5c:c5:f1:
                    fd:e2:dd:ea:d4:7a:33:8a:99:d0:63:98:f0:de:f1:
                    e9:a9:81:44:e5:57:5f:e0:f3:96:16:bd:66:e0:3a:
                    d8:80:df:60:99:2b:32:c6:93:28:47:73:64:67:4a:
                    1a:2a:9d:d3:91:e5:d6:8b:81:a9:ad:e5:23:38:42:
                    2d:07:00:7d:1a:a7:83:19:99:b3:40:c8:41:32:f6:
                    8c:79:f0:cc:45:d2:37:28:fd:17:d2:d7:b3:e6:bc:
                    29:dc:1b:45:33:e9:d8:bf:bd:a9:22:7b:78:fe:73:
                    15:38:17:33:bb:51:22:cc:ec:9b:a1:f4:22:b6:09:
                    f2:6c:6b:86:89:3f:04:ff:4d:ec:fc:ef:99:1c:c1:
                    3c:ca:22:a7:87:18:4b:a7:f0:71:9f:15:13:25:4b:
                    bd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:65:A8:93:17:3C:62:08:1C:E4:09:50:73:F6:58:14:63:3D:42:7D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B976D7E8AB5211F1B48DBED5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:95:b6:b5:01:fe:45:9b:c3:f9:5f:70:cb:89:31:8f:15:f0:
         6a:f8:78:68:07:3b:39:ee:2b:ab:66:78:aa:7c:11:7e:c1:5c:
         bb:8f:dd:cb:cf:4a:38:eb:b2:e2:bf:e1:0a:5d:c5:f4:2b:ac:
         d9:76:2f:c7:ec:34:cc:15:95:05:b5:b6:75:79:dc:eb:b8:d5:
         23:9b:37:30:b3:00:cc:8e:6b:d7:76:67:37:37:22:9c:42:7b:
         e3:3e:15:58:46:8e:3b:a9:eb:70:e2:bc:81:f0:28:81:a0:64:
         ac:56:7d:13:8e:a9:bd:af:6a:11:f7:56:33:7b:bf:b7:c4:36:
         f0:c5:5b:16:ce:dd:bc:b4:f3:b1:3d:91:e3:8b:ff:08:ab:a2:
         56:82:66:e7:cf:ea:b1:a8:e8:22:12:8e:16:82:47:0b:d0:e8:
         6e:c6:ff:6b:c7:6a:5c:d1:54:ff:78:4f:f5:bb:fa:fc:66:f9:
         ab:61:f0:ff:67:5c:92:9b:0f:3e:97:bc:57:9f:fc:31:ab:45:
         cf:8b:1c:47:e2:aa:db:94:d1:29:28:d9:ff:94:6e:5d:43:97:
         c7:57:86:a1:7d:86:1d:da:b1:80:39:5e:c6:71:5b:b6:77:fe:
         aa:09:e3:0b:6b:02:66:4e:b2:4c:b6:71:7a:75:80:fb:aa:74:
         8e:80:91:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----