Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F77A20F2B8AB11F1901B1FD7CE1D38B0.roa
File:                     F77A20F2B8AB11F1901B1FD7CE1D38B0.roa (raw, json)
Hash identifier:          YcOaav+6KCjAKGBDghZALKNvWqPuJ7hOmpNjjkJYwrc=
Subject key identifier:   2D:A8:CA:D8:89:50:8F:2D:69:D4:7B:04:A1:15:7C:CB:7D:7F:E3:30
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D89E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F77A20F2B8AB11F1901B1FD7CE1D38B0.roa
Signing time:             Fri 25 Sep 2026 06:40:16 +0000
ROA not before:           Fri 25 Sep 2026 06:40:11 +0000
ROA not after:            Tue 27 Oct 2026 06:40:11 +0000
asID:                     138456
IP address blocks:        45.202.194.0/23 maxlen: 24
                          45.202.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120990 (0x1d89e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 25 06:40:11 2026 GMT
            Not After : Oct 27 06:40:11 2026 GMT
        Subject: CN=6ab61750-2ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:5d:0e:62:fa:59:66:6e:e4:a1:55:9f:a3:
                    15:ee:5b:26:6d:1b:64:9b:d9:35:fb:65:d2:ee:cb:
                    8b:92:49:e1:0a:54:87:27:3e:0d:54:a8:4f:ee:2f:
                    f6:ae:3b:f4:e4:ef:76:d7:a3:23:9b:4f:e8:61:72:
                    25:b5:24:d5:38:f2:12:7e:03:00:36:1d:07:f4:ff:
                    bf:6d:16:9f:a2:5d:ae:a1:28:9c:25:0b:b7:2b:c2:
                    6c:3c:6d:fd:27:7d:da:b3:0b:f8:31:21:19:af:54:
                    9f:68:36:fa:cf:96:52:53:68:74:1a:5d:3b:49:66:
                    df:31:08:a0:73:34:21:0c:04:c5:d7:01:a5:51:ce:
                    d8:b1:fc:e2:66:00:d1:8a:d2:c3:fe:64:b7:ef:74:
                    e6:1d:d0:3f:e6:c9:c1:d3:d7:18:d7:5c:55:ca:e4:
                    ce:7b:03:76:46:7e:fd:af:ee:2d:83:eb:9b:c5:38:
                    c1:47:15:36:6e:d8:3c:90:53:cb:fc:9a:d7:4c:5a:
                    1e:03:7b:c8:66:4c:52:dc:17:39:13:c9:a8:70:cb:
                    f0:64:50:4a:0d:79:f2:13:46:c2:f4:a7:74:0a:86:
                    cf:df:00:b4:2b:c5:19:33:8e:5d:a0:32:e7:23:1c:
                    f6:96:f3:11:b5:24:07:d1:b2:cd:76:55:86:1f:c9:
                    96:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A8:CA:D8:89:50:8F:2D:69:D4:7B:04:A1:15:7C:CB:7D:7F:E3:30
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F77A20F2B8AB11F1901B1FD7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.194.0-45.202.196.255

    Signature Algorithm: sha256WithRSAEncryption
         02:fe:75:12:cc:59:08:87:b3:a2:25:1e:97:32:85:c2:bf:19:
         48:32:c1:a3:fc:a2:1c:b8:a2:e7:a1:88:06:22:43:c5:06:66:
         de:9e:79:57:cb:0d:05:b7:e7:2a:d2:37:00:96:a7:6d:1a:6a:
         94:79:ad:fe:8a:ca:c3:69:4e:4c:aa:66:c9:59:19:37:f7:ee:
         db:6a:c3:36:c0:48:9e:16:16:1c:89:37:97:c1:e8:11:a3:f2:
         e2:50:4a:f2:4b:41:4b:0e:53:4d:45:e3:07:68:ab:db:4a:2b:
         12:e2:5d:f0:f6:22:6a:1b:9c:8f:2a:75:59:14:83:6c:25:e6:
         c0:1e:22:6f:a8:97:e9:03:d4:92:ce:3a:14:3b:52:f3:09:c0:
         51:9d:96:a9:eb:0f:01:57:d5:29:9a:ee:e9:60:fa:7d:52:99:
         d3:47:7d:f3:01:d0:0f:e1:15:82:8e:50:b5:e1:80:05:80:90:
         65:0b:1f:04:82:77:5d:9a:50:c0:20:3b:69:38:a5:ff:10:5a:
         98:50:45:da:6a:0a:f1:de:c5:b5:22:59:f5:62:96:fc:f4:a3:
         f3:bb:2a:eb:21:78:3e:21:e5:09:ae:d3:be:10:d3:f9:37:3e:
         fe:84:63:5d:8b:28:62:d3:77:92:2d:32:ee:58:19:e5:a9:82:
         47:a7:fc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----