Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFF3CCB89C6B11F1BF7D19D4CE1D38B0.roa
File:                     EFF3CCB89C6B11F1BF7D19D4CE1D38B0.roa (raw, json)
Hash identifier:          mGFEmAoM6C/jhH0dOYBnYF+AGwN2h6SJtkMjr1mSw9E=
Subject key identifier:   C9:1E:00:64:60:D3:EA:FF:F8:CB:18:09:9F:86:CC:6A:EE:B3:EB:D6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE86
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFF3CCB89C6B11F1BF7D19D4CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 07:51:23 +0000
ROA not before:           Thu 20 Aug 2026 07:51:19 +0000
ROA not after:            Sun 27 Sep 2026 07:51:19 +0000
asID:                     198566
IP address blocks:        45.203.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118406 (0x1ce86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 07:51:19 2026 GMT
            Not After : Sep 27 07:51:19 2026 GMT
        Subject: CN=6a86b1fb-a02d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f9:7f:ee:91:b3:78:cc:69:9b:15:e8:10:65:
                    8a:ab:05:68:d1:4a:60:8a:ac:14:8d:0a:36:6e:88:
                    de:1d:3b:a2:61:24:78:5b:7b:de:23:7e:94:ea:19:
                    3b:d2:91:6e:d9:d7:57:53:ba:85:9e:a4:4f:ad:73:
                    8c:4b:7d:49:0d:7b:81:da:37:3b:d8:44:df:21:4f:
                    9b:46:12:86:1b:c0:97:53:bd:63:89:aa:78:7b:36:
                    27:79:a6:6b:4a:26:87:17:0e:1d:a5:ba:b6:7a:68:
                    1a:d8:01:00:b5:c7:b6:25:5a:33:0f:e9:b5:ee:73:
                    ad:31:d7:43:fd:ff:40:d8:2a:e7:44:fc:8b:15:74:
                    11:1a:1a:ff:48:ba:0c:72:69:f0:d2:c1:88:39:d6:
                    99:b9:5d:5c:d6:be:54:b0:22:39:9a:15:78:a8:ee:
                    96:27:38:9a:b0:93:4d:0d:7a:0f:d0:40:fb:c2:52:
                    d4:4a:e9:21:a8:77:43:fc:8c:a1:a0:aa:0c:ef:c2:
                    cc:07:d6:65:00:72:c3:b4:99:6e:4e:64:99:7f:6b:
                    4b:dc:ee:3f:e4:70:04:c1:04:3f:48:66:63:d5:55:
                    70:aa:4b:0b:5c:34:79:e5:2f:65:5e:b9:d0:8f:78:
                    a2:b1:30:10:46:5f:f3:91:38:43:06:ce:f6:a3:c4:
                    8a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1E:00:64:60:D3:EA:FF:F8:CB:18:09:9F:86:CC:6A:EE:B3:EB:D6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFF3CCB89C6B11F1BF7D19D4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.203.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:b2:80:15:18:82:81:23:83:bb:bc:a3:1b:cf:8f:0f:fc:73:
         8b:66:73:bb:ed:4e:f4:eb:45:03:37:11:78:4f:98:e6:8e:c1:
         b3:2a:43:b7:36:fa:33:27:5c:47:d5:ab:6b:c4:ce:d7:c0:23:
         8d:1c:ef:f8:97:7a:6c:98:3d:17:e4:f5:0e:57:b4:96:6b:b6:
         30:4a:d4:c8:aa:48:31:60:fe:96:f4:08:50:29:f2:9b:d3:9d:
         b2:0a:d2:df:74:8c:65:4e:56:ce:27:b8:72:d5:35:90:bf:88:
         b9:dc:66:9b:0b:f9:92:ba:6f:d5:0e:0e:f5:d6:df:76:58:aa:
         2d:84:ea:82:1d:97:06:8d:b6:cc:54:b2:a7:96:72:f1:e9:18:
         15:c1:61:17:46:f2:df:d7:db:e7:12:51:82:6b:d0:fa:bb:9a:
         08:63:e9:ca:a9:da:1b:1c:b5:1b:7a:c9:3e:a2:b7:63:f4:97:
         bc:8c:2d:29:94:e3:f0:95:9a:f6:89:74:04:7e:df:a3:05:49:
         be:2d:ed:0a:36:78:e7:8f:70:52:9e:b4:d7:38:4a:d3:fe:db:
         62:d9:4b:a7:16:1f:8e:78:14:9e:74:d2:ce:1f:6a:c5:ee:99:
         be:4e:68:6f:d5:46:d4:62:82:28:9e:12:0e:ad:5f:be:e0:08:
         15:05:cf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----