Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4C642F8993711F1B51AE1F1CE1D38B0.roa
File:                     E4C642F8993711F1B51AE1F1CE1D38B0.roa (raw, json)
Hash identifier:          ifWuGBaV9F7xeIyHcJXPk2W5VuPCudDUG3GXkx9bdi8=
Subject key identifier:   4F:D5:D5:B6:93:20:1D:86:F5:19:85:92:F4:C6:C5:D1:D5:7D:FB:84
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CCF7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4C642F8993711F1B51AE1F1CE1D38B0.roa
Signing time:             Sun 16 Aug 2026 06:01:17 +0000
ROA not before:           Sun 16 Aug 2026 06:01:13 +0000
ROA not after:            Fri 18 Sep 2026 06:01:13 +0000
asID:                     20473
IP address blocks:        45.196.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118007 (0x1ccf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 16 06:01:13 2026 GMT
            Not After : Sep 18 06:01:13 2026 GMT
        Subject: CN=6a81522d-df7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d1:0b:eb:2e:b9:c5:7e:ff:7a:b9:0b:e1:f3:
                    cd:cc:03:2b:e7:4c:57:3c:4b:2c:8b:ea:93:50:bb:
                    70:e7:d3:e0:0b:fb:74:f6:c0:f5:82:d7:22:ab:c4:
                    dd:78:52:d0:c7:f4:bc:98:f3:71:be:85:7c:bc:b5:
                    f6:89:d2:98:10:2e:94:a9:b8:b7:5f:f5:9f:17:3f:
                    9c:ab:15:d2:d8:f3:7f:12:a0:cf:d9:32:7b:d7:d6:
                    1b:6b:4f:1b:b8:82:61:ba:31:55:21:6d:22:81:d1:
                    d4:33:2c:76:f6:67:02:fb:79:ed:1b:31:cc:cd:db:
                    23:b4:f4:63:50:72:e0:86:bb:dc:07:b0:4d:c2:bc:
                    d5:91:1f:2a:4b:bc:3c:7c:07:af:be:be:a9:1d:9f:
                    05:87:c3:e5:11:a5:8d:a9:07:99:1e:b9:62:78:14:
                    58:83:1b:4e:8d:1b:1b:fc:d2:96:ae:32:88:f9:9a:
                    71:dd:17:fd:26:4a:9f:f1:2f:dc:34:c5:8a:ae:45:
                    a9:fa:d6:fa:24:38:dc:39:d1:0b:32:52:84:a8:81:
                    cc:a9:ee:15:ae:1f:b3:b8:c0:3d:bf:65:c1:56:d5:
                    4a:94:86:32:ca:ed:1d:c1:f3:00:09:2a:bc:6d:6b:
                    0a:e5:1e:49:a7:4f:2f:1b:91:3b:ff:66:66:e6:92:
                    d0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D5:D5:B6:93:20:1D:86:F5:19:85:92:F4:C6:C5:D1:D5:7D:FB:84
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4C642F8993711F1B51AE1F1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:e1:a6:ed:10:dd:97:e6:61:4d:00:a2:6e:2a:f9:f9:42:75:
         6d:b0:ba:83:3c:1c:4b:cb:6b:a4:d8:91:58:fc:34:98:a5:5c:
         58:b2:d0:e5:fb:37:14:39:a1:7b:96:13:3c:79:a0:67:c2:77:
         f6:9d:82:71:8b:fa:20:da:4d:e7:bc:5c:b6:01:01:0c:c8:5f:
         c3:24:92:21:e6:82:26:48:38:2a:6b:25:a2:f4:fe:00:25:3d:
         55:16:6a:c1:9d:38:da:13:58:d7:9c:1a:71:72:98:a4:21:ec:
         93:69:83:82:a2:14:fa:a0:38:0c:21:12:12:11:e7:16:66:1c:
         cf:03:e5:8e:f4:c4:af:9a:5e:59:e3:bf:25:d6:78:bb:3c:72:
         66:71:5b:61:de:75:a5:fc:2d:ed:df:1d:22:5b:f5:48:e8:f6:
         20:0e:c6:1f:63:b5:cb:5c:1f:ee:65:5b:b5:c9:cb:58:19:20:
         1a:69:55:67:e6:72:8e:99:0a:7f:b8:8e:a3:79:18:cd:0c:ea:
         85:8f:39:b2:0d:1a:83:04:82:c5:61:79:62:dd:f5:1e:65:7f:
         eb:74:e6:a1:8d:d3:06:77:b9:41:eb:ab:60:1f:0e:d7:23:c4:
         ad:78:3a:2b:85:15:ee:35:23:3d:30:c0:c2:8d:d7:9a:f5:3f:
         c3:1f:1b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----