Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0EF1070A6AC11F18377D5B0CE1D38B0.roa
File:                     D0EF1070A6AC11F18377D5B0CE1D38B0.roa (raw, json)
Hash identifier:          aUlRjn3xVl/zDIRMJEWAM+qPzpBR3Xvz+JQ4jYAWdYc=
Subject key identifier:   B5:02:8A:EC:D8:94:F4:71:F8:19:ED:A9:29:43:2C:42:D9:D7:11:FF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D26C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0EF1070A6AC11F18377D5B0CE1D38B0.roa
Signing time:             Wed 02 Sep 2026 09:01:00 +0000
ROA not before:           Wed 02 Sep 2026 09:00:56 +0000
ROA not after:            Fri 09 Oct 2026 09:00:56 +0000
asID:                     48031
IP address blocks:        45.204.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119404 (0x1d26c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  2 09:00:56 2026 GMT
            Not After : Oct  9 09:00:56 2026 GMT
        Subject: CN=6a97e5cc-5602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3f:31:83:af:30:fc:5d:c7:fd:08:d8:cd:c7:
                    9c:65:92:7a:ee:60:6b:60:14:f9:de:7e:94:c8:91:
                    c1:f8:fb:4b:90:1b:f6:8a:22:ca:dc:bc:fc:2f:1c:
                    ed:f4:11:e7:29:4e:00:02:f8:2b:f6:6f:30:5c:5c:
                    77:77:ed:ac:92:c6:02:2c:ea:7f:c1:8e:bb:18:62:
                    ae:d1:f1:92:6b:e5:db:1a:45:9b:73:e3:19:c5:48:
                    ee:6b:ea:5c:cd:c9:e9:5e:6f:62:73:c4:9e:cc:74:
                    52:c1:16:05:6e:9e:18:b0:84:f5:69:a7:c8:fb:2b:
                    b9:55:84:e6:d9:9f:fb:89:36:39:32:7e:7d:e0:b1:
                    3b:a3:35:63:da:0d:bb:80:10:a5:ff:91:03:80:54:
                    04:ff:bb:0d:e4:da:f5:d1:06:6c:dc:c7:b6:32:14:
                    f3:b2:5a:ee:40:fe:91:42:0b:56:c7:a0:7d:58:f7:
                    6d:d6:16:bf:97:3e:2f:8c:fa:09:2f:b3:4c:e1:86:
                    de:ec:d2:e3:f4:65:c7:90:4b:6b:31:4c:5e:ea:ec:
                    b7:67:a6:0e:01:be:fb:03:af:87:4f:1a:7e:83:9f:
                    6d:97:bb:61:96:89:9f:ef:d7:26:fc:4d:91:56:db:
                    c1:d3:48:e9:05:22:1b:8e:78:e7:3f:30:68:55:99:
                    4f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:02:8A:EC:D8:94:F4:71:F8:19:ED:A9:29:43:2C:42:D9:D7:11:FF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0EF1070A6AC11F18377D5B0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:a3:89:41:5b:4b:35:f5:38:19:66:2a:9e:55:da:46:c5:23:
         ec:62:b0:31:52:3a:d7:bf:11:24:88:b4:69:9f:ef:31:66:51:
         3a:e9:cd:29:05:6c:f5:79:5c:96:c3:fc:bb:a6:eb:dd:f7:21:
         5a:e8:c9:51:ec:4c:16:70:5c:cd:f2:6c:ba:2e:22:d3:8e:5a:
         ac:2d:52:ed:54:a7:d4:97:e8:dd:56:b5:a3:d5:9a:ca:17:f2:
         70:77:f1:7c:ab:13:e7:ba:55:82:7a:a0:bc:94:6c:7a:03:32:
         31:4a:78:96:13:3b:ca:d8:7b:6c:e2:db:7a:9b:ee:cc:53:32:
         12:f7:49:27:7c:28:94:e5:ab:4c:6b:0f:7c:33:3c:cc:de:ff:
         10:f7:aa:50:50:dc:18:30:3b:2e:6c:ef:b7:a5:da:a1:d5:af:
         f2:ba:a4:7b:7b:d7:6d:eb:50:bf:3e:f9:a3:27:f5:1b:eb:f3:
         11:7f:bb:b5:08:a0:1c:8b:14:84:da:7e:83:15:18:92:70:82:
         dc:9f:77:12:dd:60:55:73:4a:5e:20:f1:ac:29:42:2c:7c:d1:
         4a:84:5d:8f:a4:ca:ae:fb:27:fa:66:1e:32:63:94:11:97:1d:
         42:f8:25:55:be:ac:c1:5d:7f:e3:8e:0d:0a:89:d9:ba:0c:ca:
         83:cf:d8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----