Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5FDD8DCBE3911F1A38F6B11CF1D38B0.roa
File:                     C5FDD8DCBE3911F1A38F6B11CF1D38B0.roa (raw, json)
Hash identifier:          KWCxVeqRDZf+RzcqkghH4ptOmtnejnycL4LV5gpWQW0=
Subject key identifier:   A4:69:9E:09:2E:CE:26:6C:29:93:76:CB:C5:C7:79:F8:31:CF:11:CE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA14
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5FDD8DCBE3911F1A38F6B11CF1D38B0.roa
Signing time:             Fri 02 Oct 2026 08:17:57 +0000
ROA not before:           Fri 02 Oct 2026 08:17:53 +0000
ROA not after:            Wed 28 Oct 2026 08:17:53 +0000
asID:                     274879
IP address blocks:        45.194.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121364 (0x1da14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  2 08:17:53 2026 GMT
            Not After : Oct 28 08:17:53 2026 GMT
        Subject: CN=6abf68b5-8555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:af:ce:9e:ed:d0:fc:71:dc:3d:18:9a:2b:58:
                    d2:e5:d9:32:1c:91:6c:12:9a:0d:5a:0b:08:05:2b:
                    b4:a5:b1:ee:1b:31:60:31:65:e1:15:51:fe:2d:fb:
                    a7:53:21:d1:e3:42:1d:08:c8:f4:6f:c4:b6:2c:8b:
                    d1:f4:d1:35:d0:d5:74:41:d1:6c:e5:de:dc:81:6e:
                    60:88:ce:cf:7b:cb:d8:7c:5d:88:0d:43:ef:45:22:
                    6d:14:f9:fc:65:e6:7c:64:91:56:9b:e1:3f:da:bc:
                    25:5c:9b:54:8e:a7:1b:2c:cf:8f:7b:ef:52:49:c3:
                    4e:2a:f7:a2:fb:cc:75:e9:de:a2:85:92:83:c4:1c:
                    d1:ee:ff:ef:ea:39:ce:df:47:e9:31:0c:43:65:bf:
                    2d:6c:f2:49:aa:3c:62:cb:a7:6c:6a:a3:4b:c4:ce:
                    b7:80:09:a1:e8:49:f7:e9:03:8f:27:2f:8e:22:65:
                    ac:7e:44:f6:fa:af:f0:ce:c9:11:93:bf:3f:54:14:
                    b5:9c:c1:be:fd:7b:4c:5a:dd:e0:9c:15:bc:e1:4e:
                    53:c3:50:85:18:56:6c:41:ad:3a:6c:a6:e4:80:91:
                    de:f7:5a:75:d8:df:43:e8:f3:ef:0a:c7:ee:9d:a6:
                    96:ad:22:fa:d6:54:02:5d:f4:d5:8c:bd:d0:89:c6:
                    75:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:69:9E:09:2E:CE:26:6C:29:93:76:CB:C5:C7:79:F8:31:CF:11:CE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5FDD8DCBE3911F1A38F6B11CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:23:46:b7:f0:f0:67:f1:17:81:e3:a8:0a:55:b4:7b:fe:53:
         ec:6e:b0:ae:e1:ad:ee:56:79:5d:8a:f0:a7:e4:32:df:71:db:
         94:0b:e3:d5:5c:f9:2d:2d:02:cf:5b:ec:be:d4:46:19:44:29:
         5f:34:2c:fa:7e:c2:45:60:ea:46:7e:0c:c0:81:c4:f6:21:65:
         c4:10:37:8d:1d:a6:62:3c:72:41:06:99:47:2e:c7:93:05:ae:
         1a:24:8b:ae:8c:c2:5c:e2:56:44:61:50:0d:5a:70:0e:99:32:
         84:2f:f2:5a:9d:08:5c:9d:bc:8a:58:77:be:54:a1:c6:0e:46:
         0c:48:cb:62:1d:0f:4c:bb:3b:91:2f:d7:59:2e:99:60:c2:84:
         f1:3c:e4:95:78:3b:42:2a:4a:fb:ec:43:90:2f:6c:89:c6:93:
         70:65:18:0a:e0:97:69:f1:b2:13:fc:49:08:ee:f3:b1:d5:48:
         dd:d0:a2:b4:1e:36:52:6d:a6:cc:7d:ae:bd:a1:cc:a2:ac:4b:
         6b:6e:ba:a1:4e:db:4b:e9:d1:41:53:4e:ae:cd:62:b8:63:de:
         53:a6:6d:1e:d0:cf:17:fb:c0:b2:8c:3e:a5:67:f0:9b:da:68:
         7b:a4:a8:a5:44:86:25:21:54:d6:61:6a:66:32:c5:6b:05:3c:
         9b:68:8c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----