Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBEFC8D2C3B411F1B030E3ECCE1D38B0.roa
File:                     DBEFC8D2C3B411F1B030E3ECCE1D38B0.roa (raw, json)
Hash identifier:          JgN3rlDfEHZU0o/n9FFQien674Fjeh1AkSa4nPJ3HCs=
Subject key identifier:   D8:B1:39:32:54:E7:5B:B4:6D:65:3E:4E:8A:6F:70:D7:62:06:D0:CE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC05
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBEFC8D2C3B411F1B030E3ECCE1D38B0.roa
Signing time:             Fri 09 Oct 2026 07:41:38 +0000
ROA not before:           Fri 09 Oct 2026 07:41:33 +0000
ROA not after:            Mon 19 Oct 2026 07:41:33 +0000
asID:                     395886
IP address blocks:        45.194.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 07:41:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121861 (0x1dc05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  9 07:41:33 2026 GMT
            Not After : Oct 19 07:41:33 2026 GMT
        Subject: CN=6ac89ab2-bc95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3a:4d:c2:3e:20:fc:7b:6f:96:7c:40:dc:9d:
                    d1:19:47:eb:bd:2e:eb:1b:28:33:25:ac:e6:a5:09:
                    b1:29:86:ae:6e:b4:f5:9e:4e:2d:be:4e:2a:2f:ba:
                    89:35:5a:47:98:49:e6:03:a7:9d:4d:3e:81:85:03:
                    a1:5c:b1:54:7c:15:2a:91:36:4c:55:94:f9:bf:a4:
                    25:ae:48:ca:dd:6a:82:f3:bd:a0:47:a8:04:5c:4b:
                    30:6e:cc:4a:63:2c:66:69:e5:26:27:3c:8b:bc:2b:
                    f3:f7:e0:61:37:c3:bc:8f:bc:57:87:08:de:cc:bc:
                    7a:7f:a8:bf:58:02:da:7d:8b:4b:a1:c5:64:26:53:
                    18:a3:8f:ab:e8:bb:eb:58:25:99:1b:1b:7a:ed:1b:
                    6c:97:ce:6b:e5:51:20:c2:17:af:13:14:f4:6f:30:
                    9e:91:33:5f:e6:68:3f:1d:cb:35:65:45:4c:cb:e6:
                    0d:96:82:12:45:de:09:37:56:19:23:4f:f1:ac:19:
                    60:58:03:b9:15:22:8e:d8:5b:d2:c4:8c:ec:ec:9f:
                    b0:f9:9e:1d:8b:c5:3d:41:80:fd:e9:6d:75:8d:a0:
                    e5:47:26:35:91:7d:48:46:87:f0:fc:55:ce:a0:61:
                    19:0f:f3:a7:42:f2:15:06:aa:02:00:60:e7:cd:f9:
                    fb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B1:39:32:54:E7:5B:B4:6D:65:3E:4E:8A:6F:70:D7:62:06:D0:CE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBEFC8D2C3B411F1B030E3ECCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:1c:5a:6f:82:52:97:a2:02:fe:54:c4:a6:f0:7f:87:9a:04:
         ba:c6:0d:f2:e4:69:d1:1a:7a:50:ad:d7:7b:35:4b:40:6d:47:
         71:3c:93:63:67:38:49:b1:a0:8e:f4:3e:34:f2:82:62:f5:81:
         e6:8d:96:d7:2a:ac:33:0a:65:54:63:8d:91:95:f1:c0:52:a1:
         3c:ad:48:b0:11:41:32:e8:b4:c2:7b:86:bd:e0:42:df:d7:2d:
         8c:a0:1b:ff:c4:a9:d5:61:91:f3:ec:96:a8:14:0d:4c:d3:2c:
         81:09:59:df:c3:3f:97:3d:87:54:fe:9c:d9:84:14:85:07:df:
         97:2e:52:a3:3f:75:07:66:d1:15:b2:51:c6:d5:2b:bd:ca:e0:
         09:e0:46:33:5e:5e:ef:7d:4a:f6:9f:4e:55:13:af:6f:05:b3:
         93:50:2f:75:74:6e:7f:9c:f5:64:2f:ed:aa:e6:d0:51:5d:23:
         bb:ff:5e:85:d5:cd:3b:32:e1:f0:f8:e2:e1:0a:17:4c:86:58:
         f3:7d:8f:6b:87:80:3c:80:53:9b:b8:78:e0:e6:9b:ca:e9:48:
         a1:8d:78:c9:9c:24:7d:74:fd:b5:95:5a:2d:c5:67:af:5e:93:
         84:7b:7f:80:39:d4:0b:64:df:c1:fe:3c:b5:00:5c:d3:c4:25:
         b2:a6:d0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----