Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C59A67548E4E11F1A9234FC5CE1D38B0.roa
File:                     C59A67548E4E11F1A9234FC5CE1D38B0.roa (raw, json)
Hash identifier:          UBeOCwsYWlBAdSerOfYPeTi3mb3LwNotskOFNPfPvZA=
Subject key identifier:   E0:B6:56:4F:3A:1B:F8:5D:4A:17:9F:E0:B4:91:A5:1B:D3:87:94:30
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C927
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C59A67548E4E11F1A9234FC5CE1D38B0.roa
Signing time:             Sun 02 Aug 2026 08:47:20 +0000
ROA not before:           Sun 02 Aug 2026 08:47:16 +0000
ROA not after:            Sat 12 Sep 2026 08:47:16 +0000
asID:                     402506
IP address blocks:        45.205.24.0/21 maxlen: 24
                          45.207.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117031 (0x1c927)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  2 08:47:16 2026 GMT
            Not After : Sep 12 08:47:16 2026 GMT
        Subject: CN=6a6f0418-00e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:29:52:30:bd:18:5f:3f:ee:2d:f3:68:1a:78:
                    10:8b:40:36:03:6b:64:fd:19:cb:39:99:6a:09:56:
                    5d:db:00:54:31:f0:8e:95:52:95:67:03:f9:7e:b1:
                    74:3a:1c:67:f9:18:00:a7:a7:09:e4:38:5c:06:d8:
                    d8:49:8b:40:da:3d:bd:c0:b6:d3:a3:96:0a:45:4a:
                    38:6c:76:32:38:7d:5a:6b:6f:3f:a8:b3:17:3e:80:
                    18:21:bb:3e:41:bf:ee:7f:aa:4b:ba:48:04:17:41:
                    16:56:fc:cc:5e:55:d3:9b:fe:a3:36:11:13:f1:5b:
                    04:d5:84:6e:c3:15:92:22:0d:51:a7:c1:55:31:d9:
                    0c:60:b6:8b:57:61:5a:c0:c5:3d:88:72:9d:b5:a2:
                    db:ac:e5:2a:9b:f0:24:a9:62:3d:3b:88:92:2a:02:
                    26:dd:ea:00:a5:a5:a1:d7:ee:83:5e:a5:8a:4c:14:
                    ca:4e:ba:9b:76:30:3e:88:9c:84:d1:c5:f0:d3:a5:
                    26:62:5c:d8:09:0f:c3:0d:b1:b4:8f:e0:af:e9:70:
                    60:db:d9:f1:2b:a0:0a:cb:4c:f6:bc:9c:b1:ff:56:
                    e5:24:d5:ac:11:fe:43:5b:c6:20:b0:fd:a7:77:96:
                    28:22:11:c6:bc:23:b1:4a:a4:a1:df:ce:a6:a8:6c:
                    68:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B6:56:4F:3A:1B:F8:5D:4A:17:9F:E0:B4:91:A5:1B:D3:87:94:30
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C59A67548E4E11F1A9234FC5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.24.0/21
                  45.207.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5a:b5:a0:00:d7:4b:16:ba:82:a9:a3:cd:5b:08:bd:d7:ea:f0:
         22:52:64:be:43:01:02:7d:28:7e:01:8d:54:e8:ff:b4:b0:66:
         34:4f:53:c3:83:de:1b:8f:cb:7a:a4:91:e1:3d:a4:fe:a6:20:
         65:d8:bc:6f:76:5e:0a:9e:83:26:f5:bc:67:7f:c5:f9:e8:e4:
         de:fd:75:18:04:aa:1d:d2:ad:11:7f:1f:cf:18:0f:a3:6a:74:
         a8:6d:7a:dd:34:69:2d:03:01:dd:d4:05:48:60:04:71:9c:75:
         05:5d:30:4c:53:f9:bd:50:87:af:66:69:3c:ec:38:89:9e:d3:
         00:59:cb:50:5c:59:d3:c3:fa:ad:53:d5:fb:7d:d2:13:03:fd:
         85:e2:0b:34:2b:05:ba:ca:2d:ce:03:09:19:26:c6:0d:f1:47:
         6b:4c:0f:2d:65:5e:cb:34:70:f2:43:0d:20:26:a8:93:9c:74:
         9e:73:68:55:93:01:5b:2f:d1:9b:d3:b2:bc:20:7f:f5:20:47:
         b8:f6:86:53:f7:ce:21:4e:e5:04:db:a6:a6:1c:0c:f2:db:13:
         6b:a7:c6:51:a5:be:ef:c6:2e:35:4a:17:de:16:ea:9a:be:b7:
         39:56:48:a7:26:73:b2:48:c1:16:9c:5e:b6:ad:7f:d3:ae:a1:
         eb:4f:06:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----