Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C96A27B6A69511F19DB8E4A8CE1D38B0.roa
File:                     C96A27B6A69511F19DB8E4A8CE1D38B0.roa (raw, json)
Hash identifier:          vaOZ8otOmSi1WBOYpgrrzmsppzOFoE8loxixEdHKf1U=
Subject key identifier:   61:30:CB:6D:72:42:06:AB:AA:2D:E8:CB:A2:DC:15:07:C0:DD:6C:FE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D234
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C96A27B6A69511F19DB8E4A8CE1D38B0.roa
Signing time:             Wed 02 Sep 2026 06:16:09 +0000
ROA not before:           Wed 02 Sep 2026 06:16:05 +0000
ROA not after:            Fri 09 Oct 2026 06:16:05 +0000
asID:                     401362
IP address blocks:        45.203.131.0/24 maxlen: 24
                          45.203.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119348 (0x1d234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  2 06:16:05 2026 GMT
            Not After : Oct  9 06:16:05 2026 GMT
        Subject: CN=6a97bf29-1515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:88:44:49:de:13:b0:bb:bb:6a:ef:44:2a:a3:
                    2e:e0:f9:a0:2d:7c:49:68:9a:76:8c:92:fe:a4:85:
                    b8:3d:62:6d:e5:d2:04:95:f8:46:b2:03:93:55:a7:
                    4b:cd:03:e2:20:d7:6b:3c:4a:c2:fa:7c:15:92:52:
                    1c:ee:bc:de:9c:3a:aa:d1:af:b4:d3:22:f7:82:16:
                    53:3c:6e:27:af:d6:1a:45:10:df:c5:65:26:b0:47:
                    35:b3:a5:17:e6:65:c5:f8:67:af:95:e7:41:ab:21:
                    92:c2:52:15:57:cc:44:3d:1d:8f:c6:3f:b2:33:d9:
                    c5:e5:fa:94:fb:1c:98:fb:90:34:aa:e5:ac:be:a0:
                    8f:01:95:85:cd:15:ac:da:4a:23:80:31:a3:db:2d:
                    9c:f2:a5:d0:bc:10:6a:a9:92:eb:d5:d3:93:f0:13:
                    4f:a0:fb:8d:8e:4d:5f:3a:fd:0f:76:5b:8b:32:99:
                    f4:55:32:9a:e6:52:e2:77:63:d1:d1:40:ac:e8:46:
                    d3:b9:ed:23:62:9d:d1:49:fa:1b:0c:e2:c9:ec:83:
                    cb:55:7d:cb:64:e5:7d:a0:b6:f3:64:7c:ba:04:c4:
                    e7:72:dd:69:ca:3f:2e:27:f5:20:f7:7e:56:63:88:
                    ed:e9:70:26:b6:3e:ab:fe:34:f2:c0:1b:f3:4d:50:
                    b0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:30:CB:6D:72:42:06:AB:AA:2D:E8:CB:A2:DC:15:07:C0:DD:6C:FE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C96A27B6A69511F19DB8E4A8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.203.131.0/24
                  45.203.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:8a:f6:b3:7a:f5:57:f0:df:47:4d:f3:5c:7d:6a:61:c5:17:
         7d:4b:0d:c5:7e:1a:42:cf:eb:ef:26:55:7d:01:4b:c7:0e:18:
         d1:17:f1:b1:0a:0d:df:24:17:df:c1:78:51:57:ea:b7:a9:36:
         33:43:49:1a:7e:b1:6f:39:77:1f:b4:49:e3:bb:a9:4e:02:ae:
         0d:07:26:86:be:87:4e:2e:74:d2:b2:13:ad:6b:9c:3f:93:1e:
         21:f9:38:3b:29:88:83:5e:cc:2f:3d:ba:90:41:21:c6:73:3e:
         bc:95:86:38:b8:c5:47:ab:cb:a6:3d:09:fb:13:c0:28:bc:c2:
         67:9d:f3:33:72:89:52:cd:96:7b:73:91:42:95:65:86:2b:42:
         34:ac:c0:47:9c:29:24:13:6e:75:2b:13:3e:1b:c8:b9:f3:0f:
         42:8a:31:f0:41:b4:dc:72:63:c5:44:d6:f0:91:df:1d:3c:39:
         a1:ec:43:01:cd:64:bd:7a:3a:c8:5e:cd:5f:80:d7:81:65:c3:
         40:4f:9f:b8:09:82:44:50:4a:d3:c0:b9:0a:f5:52:49:9c:1a:
         d0:ba:6c:9a:cc:fa:0d:0c:02:51:a7:e0:0c:7f:26:5a:9e:1d:
         7c:1f:d3:0e:e6:0f:f9:da:b9:81:22:14:61:6b:12:ac:de:c9:
         bd:52:1e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----