Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1D906EA909A11F1943CCEB5CE1D38B0.roa
File:                     C1D906EA909A11F1943CCEB5CE1D38B0.roa (raw, json)
Hash identifier:          elsKhjRgq0R2bjRjIZmLBNFZB7hFIqp1SP1c0VVYQRk=
Subject key identifier:   E6:EF:FC:27:8B:89:20:01:3B:E4:1A:F2:1F:A6:30:02:1F:A4:AB:36
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C9B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1D906EA909A11F1943CCEB5CE1D38B0.roa
Signing time:             Wed 05 Aug 2026 06:56:18 +0000
ROA not before:           Wed 05 Aug 2026 06:56:14 +0000
ROA not after:            Thu 10 Sep 2026 06:56:14 +0000
asID:                     274174
IP address blocks:        45.200.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117173 (0x1c9b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  5 06:56:14 2026 GMT
            Not After : Sep 10 06:56:14 2026 GMT
        Subject: CN=6a72de92-82b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4a:50:2a:96:b2:b5:fe:28:74:59:95:de:ff:
                    24:26:10:05:2c:12:22:5c:db:ff:71:32:55:97:87:
                    d3:32:6f:e2:c3:c0:cd:84:19:18:a0:60:e2:44:64:
                    37:78:d1:96:73:47:f1:db:45:ca:e8:42:13:54:85:
                    3b:bc:2d:57:74:eb:f0:9a:78:cf:2f:57:f9:a1:6a:
                    3f:58:50:c0:22:9a:5d:49:42:7c:c4:91:37:1c:4d:
                    ae:da:0b:be:2c:51:64:bd:bc:10:f9:e8:92:99:fc:
                    05:a7:d3:b9:29:05:7a:05:f3:0d:2d:96:76:8e:92:
                    2a:23:96:f6:98:97:17:d9:f3:5d:16:d1:43:2f:f0:
                    ec:a6:6b:b2:e8:88:25:01:dd:e1:d5:da:18:c8:c4:
                    9d:b0:8a:a9:88:46:af:87:52:d6:00:dd:9f:8e:06:
                    0d:b2:0b:8c:59:97:32:84:6e:d5:3d:d3:0c:60:68:
                    a9:63:33:8d:06:3c:62:21:89:f1:c3:89:7e:0c:0e:
                    75:79:4a:22:d4:22:bf:ef:98:c6:3a:f3:98:65:a2:
                    1e:80:75:bd:94:df:af:a6:86:d7:5a:99:ad:9b:7b:
                    ab:55:07:fd:e9:75:5f:15:df:bf:45:7a:c5:7a:19:
                    0e:4a:60:c8:13:13:fa:5a:86:b5:cf:30:13:90:6a:
                    e7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EF:FC:27:8B:89:20:01:3B:E4:1A:F2:1F:A6:30:02:1F:A4:AB:36
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1D906EA909A11F1943CCEB5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:7d:50:dc:04:72:75:e4:d3:4e:07:a9:a9:c3:ae:29:56:5c:
         2b:02:12:f1:9d:cd:b3:8f:8a:19:d3:94:5f:23:84:69:bb:eb:
         19:dc:a5:7f:b0:93:58:b3:3b:16:06:6f:60:92:c4:de:a8:03:
         a8:77:96:0a:93:28:37:46:57:42:30:01:f6:71:84:1c:f5:f4:
         af:4e:af:67:90:c1:5e:36:35:e2:92:0c:ae:07:7b:b1:f9:c8:
         4a:f3:f5:ee:34:45:91:b5:d4:12:7f:9e:b6:61:35:83:7d:f3:
         9a:6a:20:80:46:6a:1a:e9:25:06:f9:8f:0c:89:44:0d:fd:de:
         6f:93:d1:85:65:21:6c:9f:0e:8f:ed:89:64:bc:74:63:1f:43:
         74:38:2f:19:32:69:f8:a9:cf:e7:71:a9:96:b9:75:46:38:cf:
         b7:5f:7c:f8:7e:5b:41:83:74:05:c5:ac:36:eb:03:ce:92:af:
         85:b6:7b:35:7b:3a:58:d1:24:cc:0b:66:0b:79:d4:d6:79:a1:
         91:fc:41:86:bd:59:b5:77:62:d6:a2:23:47:92:37:1c:a0:e4:
         24:e7:59:17:a9:52:b5:6f:16:fb:ab:5e:c1:c3:fd:8d:e9:6b:
         ed:30:33:5f:f5:74:f6:0a:04:d6:a9:e5:f7:59:54:37:c5:72:
         41:1b:e2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----