Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1F24DD6C6E811F194109DD0CE1D38B0.roa
File:                     E1F24DD6C6E811F194109DD0CE1D38B0.roa (raw, json)
Hash identifier:          u9v2NywQQzrK8NHA4VrtG5GuCcgX7tBydeHB+f8P3no=
Subject key identifier:   11:3D:E7:82:C1:BF:7F:D3:AC:41:6C:0D:2E:1F:F8:12:C2:7C:EA:C6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DD23
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1F24DD6C6E811F194109DD0CE1D38B0.roa
Signing time:             Tue 13 Oct 2026 09:31:35 +0000
ROA not before:           Tue 13 Oct 2026 09:31:31 +0000
ROA not after:            Thu 19 Nov 2026 09:31:31 +0000
asID:                     204957
IP address blocks:        45.194.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122147 (0x1dd23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 13 09:31:31 2026 GMT
            Not After : Nov 19 09:31:31 2026 GMT
        Subject: CN=6acdfa77-90f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8c:3f:53:53:f3:16:4f:fe:fe:ff:91:b8:14:
                    ff:30:72:8c:a0:cf:85:c8:24:52:85:18:86:f4:c5:
                    7f:2d:8e:ce:1a:95:a4:4d:ae:9e:06:c5:56:e1:bb:
                    28:71:74:2e:6e:80:bb:14:07:b3:5c:0b:21:04:25:
                    27:75:71:ed:cb:40:91:ad:36:fb:4a:b8:a1:63:02:
                    38:f3:e6:a0:ae:5f:42:18:71:08:6b:83:11:50:ab:
                    bc:f0:f5:66:b5:22:29:b4:99:5d:e6:92:f9:0e:d9:
                    bb:5c:dc:a6:c5:45:df:68:80:cc:1b:f7:03:d2:5d:
                    77:e8:66:ea:f6:0d:33:27:7e:2d:f3:cd:0b:cb:a1:
                    e6:e8:b4:5a:c0:05:ce:f2:df:aa:a0:4c:d6:7c:28:
                    ac:9b:d1:4b:a5:f6:fe:9c:63:a2:77:c0:ee:be:18:
                    b6:a9:12:88:f6:ea:fb:a4:f4:03:82:ad:7c:6d:62:
                    35:fd:3a:0f:97:1b:a1:32:c1:b0:eb:af:ea:38:d0:
                    a8:1b:f9:fd:0e:42:43:49:4c:d2:74:08:f5:6b:62:
                    01:48:56:45:6f:6c:dd:da:c1:ba:51:33:91:6e:8d:
                    23:02:67:bb:10:85:10:70:89:7d:18:ba:0a:0c:56:
                    ee:30:fe:b4:b9:f3:72:ec:29:cc:bd:6a:b0:65:07:
                    8c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:3D:E7:82:C1:BF:7F:D3:AC:41:6C:0D:2E:1F:F8:12:C2:7C:EA:C6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1F24DD6C6E811F194109DD0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:3b:90:64:9a:e5:23:57:57:66:90:ad:a7:25:5b:c5:4f:40:
         2b:9d:b8:7c:31:57:b5:5e:85:e7:10:64:2b:d8:71:01:4f:38:
         02:b0:7e:aa:72:f1:a6:11:10:c7:cb:04:fa:cd:79:29:80:54:
         02:5b:46:46:5b:12:1c:2e:4f:3f:0e:5e:0c:46:28:84:ba:be:
         a5:94:53:01:ae:63:ff:09:a4:32:a2:63:54:db:b3:6e:e9:90:
         5c:ac:63:2f:91:78:00:ae:b6:7f:65:a5:77:14:23:2a:c6:47:
         97:11:c8:14:72:1e:f5:a8:e8:03:0a:00:6b:b3:69:07:00:c6:
         6b:3f:ae:64:e9:70:28:05:c8:a9:c5:c1:97:5d:a0:8c:72:27:
         16:03:45:ae:a0:a8:ea:75:0f:20:eb:f7:20:e5:d4:3a:0d:35:
         d2:bf:5b:39:04:c4:95:5c:31:05:c7:30:68:75:00:88:05:f9:
         aa:53:dd:18:6a:3a:5b:d8:59:8e:32:50:1a:d4:eb:18:dc:db:
         bd:97:77:7b:69:f4:ba:07:b4:a1:dc:3a:66:9e:26:58:96:57:
         9f:67:29:54:14:ad:fb:bf:28:3d:31:60:f7:c4:51:43:2d:17:
         37:3e:1c:ed:94:88:b8:30:15:e2:14:5a:f6:25:33:bb:bd:b0:
         e9:66:09:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----