Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC47A94E923511F1976626EFCE1D38B0.roa
File:                     EC47A94E923511F1976626EFCE1D38B0.roa (raw, json)
Hash identifier:          cjsoSJkK71pQuhdH+AXb5uQm7VTO/DLQtlN8unY62Ao=
Subject key identifier:   00:9A:62:0E:11:16:CC:7E:0C:2F:93:1B:E9:82:46:63:FA:DC:7C:B6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CA31
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC47A94E923511F1976626EFCE1D38B0.roa
Signing time:             Fri 07 Aug 2026 07:59:32 +0000
ROA not before:           Fri 07 Aug 2026 07:59:28 +0000
ROA not after:            Sun 04 Oct 2026 07:59:28 +0000
asID:                     8796
IP address blocks:        45.194.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117297 (0x1ca31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  7 07:59:28 2026 GMT
            Not After : Oct  4 07:59:28 2026 GMT
        Subject: CN=6a759064-2618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b2:76:4a:e5:ce:46:eb:ec:7f:cf:39:c6:a2:
                    0c:a3:e2:03:b1:4d:91:26:b3:b3:34:3e:54:79:4a:
                    8b:98:9e:e4:f1:b0:07:4d:88:c1:2c:d5:da:4f:5a:
                    77:aa:8b:e8:13:f7:51:42:3b:2a:57:95:b9:08:cd:
                    83:2c:2d:4a:a8:e7:e2:b5:9b:84:5e:14:6a:0a:dd:
                    a0:86:c2:49:2a:d4:a1:50:d5:25:11:85:7f:d7:46:
                    a3:25:68:bc:6b:18:48:57:dd:74:1d:b5:6c:c8:d9:
                    db:bb:4b:f7:6b:d0:6d:dd:af:ec:1d:cc:a1:60:f4:
                    1b:b0:e5:e0:81:85:a2:f0:c6:b2:19:66:f4:84:47:
                    68:7c:92:4f:6f:d6:b3:85:b5:8f:f4:35:29:79:45:
                    74:33:49:ac:a6:de:c1:a8:57:8b:91:7f:de:0b:15:
                    ee:0f:51:73:d0:3d:d0:d9:e9:14:a9:47:a2:a4:e8:
                    d9:84:9b:2b:57:62:56:4a:54:ed:13:e2:41:c6:43:
                    49:1d:c8:50:e6:ea:a0:d0:45:8f:de:22:37:1c:71:
                    61:91:ce:be:1c:23:64:d7:45:75:32:9b:18:b6:12:
                    64:c9:63:dd:36:4e:ca:13:ed:41:83:05:63:00:08:
                    3d:86:14:12:51:03:7b:d6:f8:e9:12:56:5a:8e:29:
                    2e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9A:62:0E:11:16:CC:7E:0C:2F:93:1B:E9:82:46:63:FA:DC:7C:B6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC47A94E923511F1976626EFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:da:51:db:a7:08:ff:4a:8c:6f:bb:ac:b4:35:3e:39:4f:c1:
         6d:2e:db:d5:cb:c1:e0:c5:76:bc:cd:60:c9:39:a2:04:b8:c6:
         8f:0a:c6:68:77:45:4e:d7:5a:8f:0a:82:b7:22:7a:93:5e:fd:
         d4:d8:3e:4e:9c:35:09:8d:8d:2b:36:64:82:f2:46:be:61:90:
         49:43:fe:55:8e:11:f4:36:16:33:82:4e:8b:bd:76:54:85:38:
         1f:b3:84:02:4d:43:54:20:9e:6d:83:12:95:07:a3:65:a5:06:
         aa:00:b9:f8:c7:73:64:eb:1c:b2:cb:71:58:40:e9:1f:95:01:
         51:e7:78:65:86:72:3c:f3:57:71:c2:fc:be:d9:db:27:0d:38:
         91:9c:57:85:30:5e:97:99:5d:1b:5e:61:05:45:19:62:bc:aa:
         98:73:8c:fc:7d:c1:5d:35:c9:64:23:65:67:cc:e3:ed:d5:6f:
         4c:9e:8e:eb:d1:9c:e2:b5:5a:af:23:a4:ee:46:42:4b:37:a2:
         73:58:7a:22:d0:1d:ee:3b:bd:d0:20:42:8b:bd:62:d6:fd:ee:
         8c:52:b8:17:ce:05:1e:ef:7c:80:6b:08:22:d4:ae:34:1b:3a:
         a4:f3:4a:54:61:69:3f:61:8c:1c:57:a8:ef:8d:ca:7b:17:41:
         64:59:fb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----