Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2D2BF16A12A11F1A7D912DBCE1D38B0.roa
File:                     F2D2BF16A12A11F1A7D912DBCE1D38B0.roa (raw, json)
Hash identifier:          SW+nXteq8wrVEISTbDv+mNZlvmLWoh8qjdwCBHL2o+A=
Subject key identifier:   4E:DE:AB:61:16:05:2C:38:A8:5D:67:5F:59:61:D9:AA:A9:58:B3:9D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D10D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2D2BF16A12A11F1A7D912DBCE1D38B0.roa
Signing time:             Wed 26 Aug 2026 08:48:46 +0000
ROA not before:           Wed 26 Aug 2026 08:48:42 +0000
ROA not after:            Fri 02 Oct 2026 08:48:42 +0000
asID:                     215925
IP address blocks:        45.198.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119053 (0x1d10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 08:48:42 2026 GMT
            Not After : Oct  2 08:48:42 2026 GMT
        Subject: CN=6a8ea86e-f75a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e4:b9:b8:14:cb:40:e7:61:f6:e9:75:9f:69:
                    2a:82:25:72:e8:19:5d:0a:60:42:32:f2:e8:33:f7:
                    a0:2f:f8:b5:ff:f0:c9:ee:3d:af:9c:2e:5e:d5:2c:
                    9b:ec:f2:d9:f0:a3:b9:96:26:d2:55:83:82:67:45:
                    ee:c8:fb:3e:96:bd:70:b4:b5:2b:23:f7:43:cd:9e:
                    35:5f:17:ef:fd:a4:f8:3b:01:2f:18:c3:37:e5:74:
                    00:b9:2c:2c:62:66:d5:c6:64:0b:84:ce:cf:a7:20:
                    e8:58:fc:56:ff:14:a3:7a:21:0d:69:5d:83:72:cd:
                    a7:ad:61:11:78:3d:33:0d:3f:bd:bd:1f:bf:9d:c0:
                    ba:b6:d0:3e:0e:6a:8d:b7:d6:32:68:ad:e0:47:fe:
                    e8:26:f9:09:6a:de:f4:1f:b9:c5:bc:10:d3:e8:60:
                    09:7c:37:1e:ff:c7:99:79:d4:32:74:c3:6e:e3:35:
                    10:47:4c:9f:3d:2e:ca:8f:52:bd:74:f6:1c:c1:4e:
                    b6:a6:24:e2:61:9e:bc:07:42:62:f7:97:b8:f9:4c:
                    85:c0:08:99:b5:e7:97:22:36:15:a8:28:b5:81:2f:
                    08:fa:ac:5d:d2:68:8e:64:9c:0c:4c:99:1b:0f:37:
                    d3:2f:f0:18:31:99:2b:7f:e6:66:ab:14:2d:8f:b1:
                    db:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DE:AB:61:16:05:2C:38:A8:5D:67:5F:59:61:D9:AA:A9:58:B3:9D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2D2BF16A12A11F1A7D912DBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:6a:76:14:c2:9b:a9:09:1e:2d:b7:b1:b7:c3:5f:9a:23:55:
         23:72:38:18:6d:8e:cb:51:9c:4e:9f:31:85:fd:fb:53:3a:f5:
         d2:63:f0:b3:7c:77:9e:8f:3f:74:43:3d:bb:0d:4c:71:60:c0:
         77:25:8f:a6:c4:94:93:79:f5:4e:c6:33:63:7f:0c:a1:6b:78:
         7f:9a:5c:69:56:14:c0:0a:07:50:e2:aa:73:18:9e:3e:bd:15:
         87:c5:ae:63:e7:75:e0:99:28:c0:5c:c1:37:8d:57:75:d1:29:
         8a:6b:12:fb:cf:89:eb:8d:9a:93:4f:26:00:e2:a4:f6:1a:d1:
         db:12:12:3e:f1:d2:18:9c:bf:de:1c:e4:0b:5c:03:ac:71:ad:
         e1:76:be:c7:52:d0:cd:95:c1:db:eb:1a:90:6e:01:7c:54:66:
         34:c5:7d:31:e3:bc:87:a3:5c:93:c2:0c:8f:f7:75:b6:38:c0:
         bd:b4:49:ed:8b:d4:1e:c3:e9:ef:39:8e:84:3a:bd:84:54:96:
         32:c9:a6:cb:a4:8c:36:fe:c7:4e:d1:51:a0:6b:26:dd:d2:65:
         27:18:d7:8f:f7:4b:2a:bc:c4:1c:3e:39:b9:94:9b:ed:38:31:
         58:d8:f4:18:10:e4:19:f4:5e:8a:af:d3:10:69:8f:ae:e3:d6:
         47:55:60:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----