Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C02BE84E8D9311F1A6A9B3CFCE1D38B0.roa
File:                     C02BE84E8D9311F1A6A9B3CFCE1D38B0.roa (raw, json)
Hash identifier:          fOU07YudTesMPDNY/FbWE97fxOrLFqa9DCXabVCQIMc=
Subject key identifier:   20:F2:40:2B:61:20:7F:89:DC:3E:C3:CE:0C:BF:02:9C:10:B5:2F:03
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C900
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C02BE84E8D9311F1A6A9B3CFCE1D38B0.roa
Signing time:             Sat 01 Aug 2026 10:28:35 +0000
ROA not before:           Sat 01 Aug 2026 10:28:31 +0000
ROA not after:            Sun 13 Sep 2026 10:28:31 +0000
asID:                     8796
IP address blocks:        45.205.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116992 (0x1c900)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  1 10:28:31 2026 GMT
            Not After : Sep 13 10:28:31 2026 GMT
        Subject: CN=6a6dca53-fc38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3d:5c:d8:d1:6a:59:4e:de:65:a0:a5:03:8b:
                    21:73:89:97:c2:1b:6e:29:6d:6b:10:33:89:18:64:
                    e8:bf:1a:ae:76:f4:62:b6:5a:c3:78:84:f3:da:f0:
                    f0:84:b2:1f:71:ad:3c:29:19:ba:b1:ef:e8:bd:2d:
                    73:fa:69:30:f4:be:d8:0f:25:e4:d0:cd:96:99:6a:
                    3e:3c:2d:7a:00:bb:b7:2b:1c:0a:b6:64:09:f1:f1:
                    12:8a:70:be:a2:b4:84:6d:b7:96:56:58:0f:b8:14:
                    b6:46:5e:e3:6d:51:55:5a:d4:a2:96:ac:fb:f1:3f:
                    08:05:40:f5:3a:de:f9:57:6a:d1:06:ae:fd:04:93:
                    0f:1b:67:6b:f8:da:86:7c:64:19:ff:7e:79:de:2a:
                    6d:ba:a6:10:1a:c9:cb:95:fe:89:17:e2:07:1a:0b:
                    f6:3f:0c:02:cd:66:67:5b:21:bb:4b:05:8d:c0:46:
                    e9:9e:03:25:75:51:8f:2b:8f:3c:a6:c9:d6:ce:5c:
                    2c:97:6a:bd:e4:77:66:0c:9d:a9:79:59:34:45:bb:
                    68:aa:fa:a0:45:c9:c8:d7:ec:ab:76:c9:fa:36:2e:
                    49:ef:0d:3e:3a:55:87:39:15:e2:09:b0:fa:ab:1a:
                    ce:fe:3b:d7:98:53:0b:41:ee:03:00:b1:7d:89:2e:
                    42:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F2:40:2B:61:20:7F:89:DC:3E:C3:CE:0C:BF:02:9C:10:B5:2F:03
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C02BE84E8D9311F1A6A9B3CFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:f1:03:c7:ed:88:0c:b4:49:9b:c9:0c:51:8d:42:ee:ad:b1:
         fc:5f:aa:13:a7:c9:26:9d:3f:b6:08:4f:e4:5f:44:cc:3c:a5:
         fb:6f:88:7d:7a:15:58:98:61:b7:6a:e3:a1:75:0b:ec:75:8d:
         1a:81:0a:20:02:79:55:66:4e:eb:ea:3f:8c:53:b0:49:a1:2e:
         7b:bd:4b:6c:bb:c1:21:66:6c:d9:25:f2:aa:e8:0e:66:d3:12:
         ed:09:9c:0b:03:83:af:17:4c:c1:3e:39:86:bd:b9:10:0e:e7:
         e1:2c:b0:7e:e2:34:a0:7a:f3:09:5c:81:60:0c:93:fc:b0:60:
         12:d5:21:f2:f7:3d:dd:6d:a8:2e:38:96:da:5f:a0:b1:e7:91:
         31:2d:4e:a8:02:79:38:07:b9:9c:29:ee:fc:81:bb:80:12:95:
         a0:98:10:45:cc:37:79:a8:82:c9:a8:a4:c5:f7:99:38:c7:88:
         35:65:f9:61:fb:0f:27:40:0a:dc:e5:7b:41:cd:fe:16:79:85:
         c1:4b:74:8d:28:46:f7:d5:ee:dd:41:79:64:e7:23:70:ac:69:
         0b:8c:28:e1:cc:38:3b:e4:f9:c0:d1:ee:f5:ba:89:bf:a6:08:
         35:dd:32:52:c3:e9:0f:47:75:77:52:6a:37:f6:6c:64:af:e6:
         33:30:e8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----