Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D12BB196970311F1B8E2FE0ACF1D38B0.roa
File:                     D12BB196970311F1B8E2FE0ACF1D38B0.roa (raw, json)
Hash identifier:          BiUb3UGJTfevtxD9B493XG7mPz4nrQKzUvJYi6yoLQw=
Subject key identifier:   11:47:DB:BA:50:61:CC:C6:69:E4:B3:01:99:56:33:90:47:69:13:76
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC96
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D12BB196970311F1B8E2FE0ACF1D38B0.roa
Signing time:             Thu 13 Aug 2026 10:43:28 +0000
ROA not before:           Thu 13 Aug 2026 10:43:24 +0000
ROA not after:            Mon 21 Sep 2026 10:43:24 +0000
asID:                     273020
IP address blocks:        45.195.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117910 (0x1cc96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 13 10:43:24 2026 GMT
            Not After : Sep 21 10:43:24 2026 GMT
        Subject: CN=6a7d9fd0-8bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ac:e4:82:23:b3:98:23:53:ff:7d:e8:ef:51:
                    dc:41:e2:b2:de:07:fd:ff:54:48:59:00:1e:92:47:
                    86:7a:3f:f6:f4:ff:0a:e4:bb:3e:8d:85:e9:e1:a3:
                    45:46:13:fc:26:3e:21:1f:55:d4:68:f7:e1:87:22:
                    86:6c:d1:25:a2:2f:95:db:1e:00:4a:ad:3b:ff:69:
                    b8:68:49:a6:dd:61:13:63:af:a1:bd:b3:26:9e:39:
                    05:5d:c2:ca:e6:bd:ea:f8:f8:19:4f:ac:ca:63:d3:
                    01:b3:b6:39:6a:ae:01:1d:53:d1:11:67:62:ad:b4:
                    fc:84:0f:ee:9d:e9:d3:18:63:f2:35:07:0b:87:0d:
                    6c:a3:2a:00:cb:82:d8:5e:c3:4c:1d:1e:2d:2d:5b:
                    8c:4b:11:f3:01:c1:76:ee:f6:87:c7:23:ff:ed:11:
                    2c:85:c6:fa:85:e8:71:da:0e:a5:ea:d1:bb:c4:bc:
                    13:61:6b:6e:41:af:7b:8f:a6:53:5f:b3:92:a0:0e:
                    5f:1b:57:73:b6:89:61:20:ef:fc:70:7c:93:20:3e:
                    89:02:92:ac:4b:aa:d8:37:25:cd:30:36:e3:2b:6f:
                    f9:b5:39:09:59:fa:e8:7e:a1:99:4f:fb:97:9f:bc:
                    bb:7c:43:c8:9c:bb:19:32:82:d4:21:41:9c:c9:01:
                    c6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:47:DB:BA:50:61:CC:C6:69:E4:B3:01:99:56:33:90:47:69:13:76
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D12BB196970311F1B8E2FE0ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:98:2d:d6:1d:4a:d5:ed:91:6a:31:62:a4:67:33:ad:ae:b0:
         32:45:1c:02:32:b5:73:e3:10:e6:74:94:1e:fd:39:89:c7:9f:
         61:1e:50:19:41:ab:10:10:1b:c9:a1:5a:a3:e2:62:f6:88:9d:
         a5:dc:52:67:2c:ac:c8:e5:80:1f:26:17:a4:06:f2:48:8f:fd:
         de:87:dc:67:17:c2:4a:b6:6e:b7:30:49:40:dc:62:96:d8:3a:
         c8:68:3d:0d:e7:b6:fd:d1:0d:e3:1a:cb:fc:f5:d6:9b:16:7c:
         48:cf:5e:f1:3c:2f:45:1e:3f:72:91:8d:4f:54:df:29:92:7f:
         bc:ae:c1:24:45:1b:45:38:92:fc:c3:d4:cd:62:44:b9:7b:47:
         c9:1a:d0:81:78:d4:3c:fd:12:3b:1e:90:a1:cd:5a:49:6c:6e:
         3f:38:2c:29:46:19:14:7b:c4:66:82:e9:df:95:a7:4e:5b:28:
         27:e0:c3:1f:85:c5:e0:26:16:2f:42:0f:dd:3e:c6:4a:1a:b4:
         63:65:b2:11:04:ee:3c:23:7d:bf:39:64:95:23:04:bc:80:2e:
         9b:3d:71:b2:9b:fa:8f:8a:d0:bf:c7:00:63:4c:d8:c5:c3:d5:
         3a:67:85:6d:80:ae:5d:3b:70:f3:56:6b:95:fd:38:f9:bd:cc:
         e2:33:58:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----