Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3B0F7189DEE11F1866E9006CF1D38B0.roa
File:                     D3B0F7189DEE11F1866E9006CF1D38B0.roa (raw, json)
Hash identifier:          IOivpul416M9eT0Galgtc3W5aOuKJGX15izi5EEjiR0=
Subject key identifier:   0E:DB:0D:14:47:C9:A7:0B:1A:6E:B9:17:BF:B3:48:CD:82:3B:17:A5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D005
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3B0F7189DEE11F1866E9006CF1D38B0.roa
Signing time:             Sat 22 Aug 2026 06:00:51 +0000
ROA not before:           Sat 22 Aug 2026 06:00:47 +0000
ROA not after:            Tue 01 Sep 2026 06:00:47 +0000
asID:                     393559
IP address blocks:        45.199.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 01 Sep 2026 06:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118789 (0x1d005)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 22 06:00:47 2026 GMT
            Not After : Sep  1 06:00:47 2026 GMT
        Subject: CN=6a893b13-817a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:88:a1:92:19:be:38:b2:c6:1c:c3:01:b2:cd:
                    97:b1:37:e2:b0:a2:7f:47:0c:47:63:80:d5:ec:5c:
                    f6:60:54:63:3d:39:f0:6e:c9:af:24:2a:ff:91:02:
                    7c:26:81:62:c0:29:87:f1:df:38:a3:47:f0:0c:aa:
                    66:91:34:49:a3:9c:96:a0:1c:8c:3e:54:6a:3b:68:
                    66:58:46:60:c6:16:6e:a6:cf:96:1e:c1:09:a3:1d:
                    6c:b6:b0:ea:43:3f:b1:04:c6:45:19:08:4b:6f:02:
                    32:d4:86:cf:1e:95:0b:a6:83:77:cc:cd:65:ba:b1:
                    24:48:f2:cc:86:57:52:d3:17:d4:ad:eb:98:0f:fb:
                    b1:ab:6d:81:0a:a4:ff:7e:fb:c8:16:b1:7e:8f:7a:
                    14:2a:7b:67:a2:26:b2:2a:55:c0:6a:a6:bb:13:15:
                    15:e0:a4:83:8f:3c:b3:0b:bf:05:25:11:7f:86:60:
                    04:c6:aa:9d:5d:d4:85:e9:d0:c1:e0:fc:46:96:da:
                    f2:0e:6c:17:04:29:2b:3e:a9:99:52:e8:ff:c7:1c:
                    0d:1b:6e:a7:38:76:06:84:0b:31:7a:f8:a6:c9:86:
                    05:eb:ac:23:04:d6:92:0a:a6:5a:b5:23:ee:42:f6:
                    ae:47:9a:9f:4b:0d:1e:d9:b2:e8:c5:53:14:2e:28:
                    5e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DB:0D:14:47:C9:A7:0B:1A:6E:B9:17:BF:B3:48:CD:82:3B:17:A5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3B0F7189DEE11F1866E9006CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:94:52:0a:6f:53:9c:1d:2f:cd:66:cb:b9:4f:c8:2c:d8:1c:
         c3:1e:fd:de:ee:90:90:b4:bb:38:ae:63:9f:0f:3e:66:5c:35:
         8f:fd:2b:05:c2:64:d2:00:e5:93:90:66:b0:e3:f2:b1:30:fa:
         fd:8d:c8:e6:85:a5:88:9f:75:6a:d4:7e:50:0b:02:57:7b:c5:
         94:82:3c:62:1b:3d:fe:cf:5e:65:c6:ef:de:ba:de:af:f1:07:
         bd:8d:38:8f:be:7f:3a:07:e1:20:8e:b3:e5:83:3b:45:be:9c:
         66:f1:d5:fe:c4:55:f0:ce:d3:71:76:71:1c:1a:bd:1d:3a:7f:
         23:ae:35:b7:d8:9f:63:85:a2:08:ee:3e:0c:8e:06:96:81:d1:
         77:40:a6:dc:03:4f:85:30:1d:72:1b:1a:78:48:7d:53:0e:75:
         ef:e0:ae:62:71:88:3e:ef:6f:53:8d:cb:56:0c:f4:b7:e2:35:
         84:83:19:eb:60:ac:51:5c:ab:34:cf:27:03:44:7c:48:ad:4a:
         8a:db:1f:6a:51:f2:a9:d7:36:1b:78:69:36:78:de:7f:64:d8:
         d2:86:5c:0a:40:65:80:b7:f3:e1:50:6d:d4:19:0b:3f:05:25:
         ca:91:ed:13:9b:55:1a:08:ad:71:7a:e4:45:55:ee:94:69:b6:
         39:ca:8b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----