Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C21D6448A06C11F194623DD8CE1D38B0.roa
File:                     C21D6448A06C11F194623DD8CE1D38B0.roa (raw, json)
Hash identifier:          YhLqhW3Pe4qmkowuwfafMtfpGcXojebRyCzHEkuqg1U=
Subject key identifier:   E9:74:31:02:19:DC:66:5A:39:39:D3:0D:73:F9:A5:25:DC:CD:94:89
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D0D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C21D6448A06C11F194623DD8CE1D38B0.roa
Signing time:             Tue 25 Aug 2026 10:07:20 +0000
ROA not before:           Tue 25 Aug 2026 10:07:16 +0000
ROA not after:            Thu 08 Oct 2026 10:07:16 +0000
asID:                     214049
IP address blocks:        45.194.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118998 (0x1d0d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 25 10:07:16 2026 GMT
            Not After : Oct  8 10:07:16 2026 GMT
        Subject: CN=6a8d6958-3880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:33:2a:03:87:0d:db:95:24:9c:51:5f:50:
                    90:ae:98:5c:78:76:e1:51:4e:b9:d3:f5:33:c6:36:
                    5d:18:b6:83:f3:d2:94:10:f1:46:13:46:b6:8d:25:
                    f1:7a:7a:f5:27:9e:f6:1e:2d:de:2d:1b:b0:30:cd:
                    9e:9f:33:66:5c:70:2a:e0:60:be:c8:ab:3f:4c:87:
                    db:e6:34:65:ed:3e:dc:7a:7f:ef:de:b4:07:69:c8:
                    26:e4:02:81:17:48:41:cb:7d:c6:b3:1d:a7:68:a5:
                    38:92:8b:f2:7a:63:d9:b6:dd:dd:17:f7:24:9b:cd:
                    3a:6f:25:1a:fb:d7:af:5d:84:b6:cd:1b:fb:83:de:
                    a5:c9:0e:38:4d:74:c5:d2:9f:6d:48:f8:94:18:80:
                    7e:6b:a8:0f:80:84:fd:c8:73:df:f2:95:af:60:fc:
                    96:74:3f:71:24:e7:3e:af:ab:24:6e:d6:65:c8:58:
                    80:92:93:07:15:f7:18:4b:87:2c:bf:e4:a1:51:57:
                    36:3d:2f:5f:f5:3e:fa:4b:89:d5:18:35:27:0f:05:
                    70:d8:05:a9:b6:5e:97:61:9e:dd:ee:f7:32:28:4f:
                    a7:4f:c6:b2:53:c1:66:8c:33:01:45:9b:5e:94:24:
                    01:be:65:d4:64:32:ee:a8:7f:cb:24:ba:47:99:b5:
                    81:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:74:31:02:19:DC:66:5A:39:39:D3:0D:73:F9:A5:25:DC:CD:94:89
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C21D6448A06C11F194623DD8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:5f:03:b3:48:2c:30:f9:9f:27:56:7b:e0:63:55:f6:14:5c:
         5d:cb:9a:c6:e7:ac:f7:10:99:d7:77:77:3b:29:5c:fd:c1:39:
         b1:46:5c:96:20:29:35:e9:c1:42:55:6d:12:81:7f:11:d3:80:
         0b:cb:3c:57:30:85:fa:70:06:f6:87:54:55:24:36:8d:4f:d5:
         44:4a:65:2b:0f:10:59:6a:64:b4:6c:0e:33:2d:54:f5:f5:e6:
         1e:c4:5f:2f:a0:9c:22:53:64:22:ac:c4:f2:12:27:b3:ce:ee:
         89:78:eb:1b:5e:8a:2c:d6:32:cb:17:c4:f4:9b:e9:97:51:28:
         7e:89:61:e3:5c:b6:6f:6f:0e:90:eb:6b:e1:38:55:c0:cd:2c:
         9e:12:5d:2a:76:a5:fd:6b:e9:db:4a:16:33:73:ae:d7:b2:b1:
         0b:19:ea:f2:70:83:a7:71:b7:23:cc:8e:81:33:09:24:a5:9f:
         1d:52:fc:81:58:f1:0b:9a:73:e8:7a:a8:3e:a3:fd:7e:d5:2a:
         16:02:d2:a5:28:28:da:17:a9:f4:64:b6:75:3c:2f:11:73:57:
         40:08:58:cf:80:9c:d5:66:70:e8:3c:4b:9b:99:e9:4e:47:9c:
         d1:14:b5:bf:e3:97:7d:ff:ed:1e:7c:89:8d:2c:f1:bd:88:b0:
         51:fd:72:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----