Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F36627C6A15011F1B715ABBBCE1D38B0.roa
File:                     F36627C6A15011F1B715ABBBCE1D38B0.roa (raw, json)
Hash identifier:          zYznM5NolWYiLpy8DzPzxS8hGJEcn6zNGhy5IZV2VXc=
Subject key identifier:   B6:ED:C7:7B:8A:03:D3:1B:5B:48:C1:16:38:B7:42:84:CF:3D:AC:B0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D15D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F36627C6A15011F1B715ABBBCE1D38B0.roa
Signing time:             Wed 26 Aug 2026 13:20:48 +0000
ROA not before:           Wed 26 Aug 2026 13:20:44 +0000
ROA not after:            Sat 25 Aug 2029 13:20:44 +0000
asID:                     17561
IP address blocks:        45.203.124.0/24 maxlen: 24
                          45.203.125.0/24 maxlen: 24
                          45.203.126.0/24 maxlen: 24
                          45.203.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119133 (0x1d15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 13:20:44 2026 GMT
            Not After : Aug 25 13:20:44 2029 GMT
        Subject: CN=6a8ee830-cc4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c5:c8:88:fc:a5:eb:c7:63:90:3a:d6:22:10:
                    62:04:fc:36:19:6d:6d:cc:6f:7c:5a:9a:42:2c:50:
                    0c:ad:a3:14:4a:10:89:90:7c:98:15:20:db:39:aa:
                    de:aa:71:85:2b:d5:5b:35:28:0f:c6:e0:bc:35:87:
                    c2:2e:7e:07:7a:67:d9:f8:de:99:2f:dd:19:9d:8e:
                    4b:d9:cf:9e:42:5d:3a:bf:ee:ac:32:7e:97:60:77:
                    f2:e4:cd:66:74:e6:0c:21:41:f0:95:6f:94:f9:f3:
                    ba:6d:66:04:a0:ad:77:69:ad:f8:7c:f2:ad:b7:2f:
                    f5:05:a6:e3:27:73:1c:cf:cb:8a:e1:ed:a8:d4:00:
                    ab:8a:f6:05:9e:68:a1:e9:e5:b0:13:68:af:6c:64:
                    e1:db:66:f5:bb:9e:d9:cf:3f:bb:ca:7b:f1:22:2d:
                    6d:6c:5f:9d:f7:d0:dd:74:0f:93:71:26:ad:d8:b6:
                    4c:f3:b9:d7:6e:4b:1f:67:9b:fa:1e:ce:90:bc:d2:
                    68:c1:1d:19:db:64:99:61:22:a3:e2:a8:86:bd:1f:
                    12:d2:f2:f7:68:14:e5:f5:28:69:fe:99:a8:92:b8:
                    57:22:a9:d9:46:7d:c6:e6:71:9a:5f:1a:ce:e8:79:
                    94:d9:ba:21:58:8a:2a:30:b2:3b:c6:0b:8d:fe:7a:
                    9c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:ED:C7:7B:8A:03:D3:1B:5B:48:C1:16:38:B7:42:84:CF:3D:AC:B0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F36627C6A15011F1B715ABBBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.203.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:fe:3d:f2:29:2d:0b:b9:bf:ce:c4:4e:86:88:fe:89:5c:a7:
         e3:c5:7c:1a:69:eb:e9:69:94:db:6c:46:5c:1b:14:7c:04:24:
         d1:c6:d2:d7:83:22:c2:ff:b9:c1:77:4d:8d:80:fd:eb:48:25:
         22:29:35:de:ae:7b:49:63:f9:d0:a8:11:49:87:51:b2:98:18:
         43:2b:f1:89:cb:c1:48:93:69:8e:6e:d6:52:14:a2:36:85:da:
         be:f9:05:cb:95:49:a8:d6:20:e2:69:b1:d7:c6:41:d3:82:cc:
         8a:c7:22:0a:c5:1f:f0:9a:f2:66:6d:37:fb:fb:ed:40:60:8f:
         23:f0:7b:ac:22:3d:c1:03:ad:58:a3:ea:4b:d1:d2:40:1a:9a:
         77:f9:07:c7:94:b0:02:5b:ab:dd:2c:6b:80:4a:ac:aa:97:d1:
         ac:02:a1:5e:06:cb:f6:12:ba:9a:5d:c4:69:84:d3:11:70:d7:
         63:b2:9f:99:a2:49:96:c6:8d:42:f9:8a:8b:3e:68:45:c0:f5:
         2b:c9:97:01:ef:4d:89:b6:62:e3:d7:40:3a:64:f1:f1:52:30:
         6f:75:06:56:b7:41:38:30:9b:80:c0:d5:fc:f7:05:f3:07:a5:
         82:d7:19:f5:3b:f7:af:48:3c:2e:66:ab:7e:ed:91:0d:fd:46:
         4b:31:4b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----