Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF73D60CAE9311F1B98B180BCF1D38B0.roa
File:                     BF73D60CAE9311F1B98B180BCF1D38B0.roa (raw, json)
Hash identifier:          QYIf4kgUFh8ohH7Hrc3nNklula2/+bU8cl2PfJS787E=
Subject key identifier:   65:9A:2C:39:93:3C:3F:29:70:D7:EC:52:92:A4:16:4E:F3:5B:55:90
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D598
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF73D60CAE9311F1B98B180BCF1D38B0.roa
Signing time:             Sat 12 Sep 2026 10:21:42 +0000
ROA not before:           Sat 12 Sep 2026 10:21:38 +0000
ROA not after:            Tue 22 Sep 2026 10:21:38 +0000
asID:                     55020
IP address blocks:        45.204.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120216 (0x1d598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 12 10:21:38 2026 GMT
            Not After : Sep 22 10:21:38 2026 GMT
        Subject: CN=6aa527b6-36fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f0:f2:5b:b6:2e:e8:7e:b3:1d:bf:42:18:3c:
                    0a:8d:de:d2:ed:91:dc:03:8c:1a:90:b3:d2:d0:23:
                    bf:ac:cd:43:72:09:03:b5:ce:37:7e:20:a7:23:16:
                    af:7e:cc:97:40:ed:16:9e:d6:00:00:84:96:ea:e7:
                    01:ca:3e:86:9c:0e:30:80:19:1b:cd:44:de:f2:8b:
                    57:7f:f9:26:9a:93:d0:5c:e6:39:72:9f:7f:26:87:
                    b7:96:2a:1a:89:a9:6a:b3:43:6b:77:bc:e8:15:6e:
                    f4:82:6a:21:05:72:c1:1f:c0:c1:9b:1a:3d:3b:01:
                    c6:e4:ec:08:a3:04:bd:2f:17:e5:99:84:34:ec:3a:
                    2a:1f:6c:f6:91:5c:1e:b4:d3:67:99:00:f7:d6:f3:
                    14:a7:4f:90:c7:8d:fd:9d:ca:a4:66:c0:f6:93:a1:
                    1a:5b:57:02:8a:19:38:1c:10:39:d0:d7:17:e1:29:
                    b1:c7:3b:1b:64:e9:1f:a3:1d:a0:ae:01:95:82:e1:
                    a4:4d:d7:b1:ee:bd:49:35:65:68:b3:57:24:1d:ea:
                    d7:bb:e5:6a:14:72:0c:55:84:70:bd:e5:5d:3d:62:
                    77:4d:be:01:5d:72:3b:38:bf:42:17:46:03:ff:f0:
                    20:5c:66:8b:50:8e:23:7a:47:f5:fe:ca:de:e6:8e:
                    5a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9A:2C:39:93:3C:3F:29:70:D7:EC:52:92:A4:16:4E:F3:5B:55:90
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF73D60CAE9311F1B98B180BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:90:5f:ae:09:4c:dc:63:bc:8d:51:8e:a4:cf:e8:32:d5:2e:
         8c:a5:38:c3:9d:5d:e9:19:93:f9:69:8b:55:a0:29:fe:a2:b0:
         ef:5a:51:95:be:4d:a0:e3:83:94:37:d1:21:a9:89:32:94:28:
         7f:bb:b0:6e:d0:2b:45:58:79:3c:dd:84:18:b4:86:45:a2:41:
         62:6c:ef:e0:69:29:89:b6:b3:0e:3a:93:b1:6d:2c:fe:9e:c6:
         ac:20:de:63:7b:2d:35:9f:b8:37:98:4b:2d:9c:68:27:2f:75:
         dd:8e:cb:e0:f5:b0:84:d7:f1:d1:c7:4d:1b:fc:4d:80:0e:ee:
         e6:e8:61:5c:8e:6e:f9:9d:e4:fb:d2:ed:90:00:6e:9e:06:14:
         68:e6:e8:b2:84:8f:fc:bc:39:6e:65:c4:ea:5a:d4:9e:d3:ab:
         da:5f:f7:9e:ec:e3:9c:9b:20:62:84:71:55:cb:0f:ce:ac:38:
         8f:e7:6b:f2:b0:8f:dc:6c:e5:ce:c7:84:4c:04:5f:17:c0:aa:
         e5:04:2e:38:17:cc:08:2e:98:e9:ed:d8:8d:cc:25:e4:e5:ca:
         54:4a:55:bc:7e:9f:57:59:22:47:e2:84:b8:ad:97:3f:fd:b4:
         88:10:b9:d5:51:30:9b:3f:66:ef:12:6e:29:b4:03:d3:d9:e9:
         03:6f:64:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----