Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D66376048F5F11F195501EB4CE1D38B0.roa
File:                     D66376048F5F11F195501EB4CE1D38B0.roa (raw, json)
Hash identifier:          2LnVAYPCVpd8ftGmZA0V/XvyG5L2FvZKSKXfaDHl9gI=
Subject key identifier:   64:D5:BD:DB:FC:7F:2F:D2:FC:0A:8D:3B:54:E5:D7:21:D5:B9:51:F3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C9A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D66376048F5F11F195501EB4CE1D38B0.roa
Signing time:             Mon 03 Aug 2026 17:22:01 +0000
ROA not before:           Mon 03 Aug 2026 17:21:57 +0000
ROA not after:            Tue 22 Sep 2026 17:21:57 +0000
asID:                     402506
IP address blocks:        45.205.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117153 (0x1c9a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  3 17:21:57 2026 GMT
            Not After : Sep 22 17:21:57 2026 GMT
        Subject: CN=6a70ce39-8a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:77:52:cb:1a:41:12:95:27:e7:fe:85:9a:
                    0b:28:e9:7d:4e:eb:d4:dc:19:ec:4f:b0:14:4b:f5:
                    cf:8c:c2:b7:40:99:36:90:7a:9b:65:4e:dc:70:f6:
                    37:a3:0f:9d:55:40:78:74:d4:4a:01:6c:d4:50:61:
                    00:8a:95:1f:c2:ec:09:65:4a:60:09:36:fa:9b:a2:
                    36:31:45:aa:9d:d7:84:f3:3e:ea:0e:7f:e4:dd:de:
                    0f:86:24:e7:12:90:73:4d:a1:b0:fa:21:b9:93:60:
                    b8:1f:92:5e:10:07:d2:ee:d8:60:b4:09:33:ed:77:
                    96:c8:18:4b:a9:8c:a5:04:ce:cc:aa:5b:8c:91:66:
                    63:a7:2b:a3:27:66:6e:63:5a:c5:9a:d2:aa:32:ad:
                    67:b1:dc:91:71:00:97:23:fe:1e:e0:51:59:bb:40:
                    63:24:4f:de:9e:ba:27:b9:f7:92:88:d1:79:f2:4a:
                    86:6a:85:73:15:26:9c:1c:38:4b:c3:9e:e3:08:ef:
                    29:46:03:b8:e1:14:95:85:79:ba:d0:ff:a2:25:d8:
                    3a:f1:47:32:74:c4:53:60:a6:bc:88:eb:b0:4d:eb:
                    9e:a9:1c:e3:ff:0b:73:ed:3d:29:53:7d:ca:0c:63:
                    63:ba:58:51:25:c3:37:e7:6d:de:ae:eb:65:81:c1:
                    83:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D5:BD:DB:FC:7F:2F:D2:FC:0A:8D:3B:54:E5:D7:21:D5:B9:51:F3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D66376048F5F11F195501EB4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         57:ab:4b:ac:5d:f9:da:0a:26:98:6d:da:1e:86:e1:1a:fb:11:
         4e:4d:fa:91:78:20:f0:66:63:85:6b:b5:11:60:e9:cf:7a:41:
         9f:78:d1:45:f4:5a:c5:6b:a4:cf:80:dc:93:10:8c:39:65:69:
         b0:c2:26:68:73:72:56:9a:b4:16:fa:79:35:66:c5:e0:53:77:
         09:49:1c:d1:f9:f5:45:8c:21:8e:47:a0:65:1b:54:da:a8:7a:
         96:0a:b9:84:d7:c9:95:bd:e3:59:0f:7a:80:a4:bf:1e:25:ea:
         45:84:7f:92:0b:36:89:0d:c6:91:b0:54:38:3e:d2:43:dc:9a:
         81:3f:8a:73:3d:fc:80:0d:03:1c:61:34:19:4b:10:6f:9e:cb:
         47:d8:42:d1:77:da:54:27:ea:02:91:41:c4:34:8c:fa:47:ce:
         ad:da:77:77:be:96:d3:b9:7b:6e:94:bb:28:ed:4f:a4:31:5f:
         fa:5c:a9:f8:cb:52:21:67:3e:2e:93:f4:11:f0:d9:21:ba:59:
         75:9e:ee:68:33:57:8a:11:9f:ce:97:b2:90:74:c2:fd:ab:83:
         b5:87:4e:b4:47:97:bc:9f:d4:a5:3e:55:23:58:80:4a:9f:5b:
         d0:50:b1:52:4c:6f:b6:a2:85:24:cd:51:f7:8c:ea:bd:50:5e:
         16:c0:da:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----