Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/CDF354A2AC2A11F18CD16CF0CE1D38B0.roa
File:                     CDF354A2AC2A11F18CD16CF0CE1D38B0.roa (raw, json)
Hash identifier:          sknKm+iCUkffE/37S3al1b5OJSTfz4T+h17OUeQxUQw=
Subject key identifier:   53:01:13:53:3E:AD:31:D2:74:D6:DC:92:66:D9:69:0E:43:19:0F:87
Certificate issuer:       /CN=F367FC4FAR/serialNumber=E3112FEFB70618C2566B1CA096EC8D1BB5F3B9CB
Certificate serial:       0E87
Authority key identifier: E3:11:2F:EF:B7:06:18:C2:56:6B:1C:A0:96:EC:8D:1B:B5:F3:B9:CB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/4xEv77cGGMJWaxygluyNG7Xzucs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/CDF354A2AC2A11F18CD16CF0CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 08:45:27 +0000
ROA not before:           Wed 09 Sep 2026 08:45:23 +0000
ROA not after:            Tue 09 Sep 2036 08:45:23 +0000
asID:                     328039
IP address blocks:        45.222.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.mft
                          rsync://rpki.afrinic.net/repository/arin/4xEv77cGGMJWaxygluyNG7Xzucs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3719 (0xe87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC4FAR, serialNumber=E3112FEFB70618C2566B1CA096EC8D1BB5F3B9CB
        Validity
            Not Before: Sep  9 08:45:23 2026 GMT
            Not After : Sep  9 08:45:23 2036 GMT
        Subject: CN=6aa11ca7-0186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:96:67:13:49:f1:cb:42:bc:2d:d3:a6:51:bb:
                    84:6c:87:8f:ed:0c:61:2f:fc:14:07:a4:2e:d7:f8:
                    48:a7:77:b0:3b:19:9d:b3:80:48:72:26:1a:86:39:
                    6d:05:e0:f0:3a:88:59:06:b7:a2:38:b4:39:f8:4e:
                    6f:2d:14:4f:45:aa:e9:2a:13:3a:75:79:32:3a:6c:
                    36:9c:92:b8:a1:53:de:0c:92:61:a4:72:eb:07:f9:
                    59:64:d1:83:7a:2f:b3:cb:6c:0f:23:47:d6:91:e9:
                    2e:48:2c:20:bd:a1:ec:bb:0e:7a:d1:40:c8:ee:e0:
                    8d:01:76:2c:da:92:a7:38:5a:7f:b6:dc:22:f3:24:
                    a2:3b:9a:b7:7e:6f:be:2d:66:4d:f4:ce:c5:4e:0c:
                    96:40:5d:dd:ed:1e:d3:5f:81:1e:75:c8:ab:2a:84:
                    c2:91:c3:91:eb:78:8c:dd:cf:ee:70:7d:a7:1f:38:
                    cf:13:35:27:6d:6a:25:ff:a9:4d:01:7a:1b:30:ac:
                    e0:4b:34:42:65:44:3a:23:78:a1:1e:25:5d:fa:6c:
                    ec:fc:ed:6b:d9:34:27:42:19:05:2f:16:b2:30:f6:
                    55:06:31:ea:2d:66:78:5a:b4:64:33:f9:44:f4:c0:
                    f7:a2:73:70:50:56:45:9b:95:20:98:a1:d3:56:ea:
                    8d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:01:13:53:3E:AD:31:D2:74:D6:DC:92:66:D9:69:0E:43:19:0F:87
            X509v3 Authority Key Identifier:
                keyid:E3:11:2F:EF:B7:06:18:C2:56:6B:1C:A0:96:EC:8D:1B:B5:F3:B9:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4xEv77cGGMJWaxygluyNG7Xzucs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/CDF354A2AC2A11F18CD16CF0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.222.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b7:8b:dd:50:fa:73:5f:85:95:31:21:91:e1:d6:bf:95:84:57:
         4d:4a:46:46:13:a9:df:4f:fe:8c:aa:4b:ed:79:0c:61:7b:57:
         84:d7:e9:96:e6:45:87:37:08:47:bf:20:d5:56:c5:77:6d:03:
         ea:aa:86:db:2b:a8:a6:54:f6:1b:ec:43:d9:49:6b:3a:73:b6:
         1d:1a:f6:14:9e:2f:0a:f0:4c:51:c9:18:7b:cd:de:67:c0:d5:
         90:cf:de:f1:42:2b:52:f5:5c:f4:8e:8a:bc:8d:ac:99:e3:32:
         68:e1:f6:fc:e0:62:4c:50:01:05:eb:32:4d:b9:8c:c5:42:fc:
         08:99:56:95:67:45:1c:de:46:67:36:1f:b8:f4:70:9f:3c:81:
         8d:6e:ce:6e:14:36:07:a2:e0:5b:aa:e0:f7:79:67:e3:18:37:
         05:be:6d:ca:78:3c:33:3b:51:5b:2a:c8:3c:e5:b4:bf:b9:32:
         57:98:b4:a5:2e:83:0c:bd:d8:3f:aa:7f:77:f3:1b:95:03:4f:
         00:95:f4:8d:3b:4e:fc:cf:af:ed:3d:34:75:ed:98:81:5b:40:
         42:f4:d5:ec:00:e6:ae:23:23:ef:2b:44:4e:64:24:65:7d:a4:
         89:c2:22:8a:94:84:eb:6b:dd:77:51:54:dd:4a:55:18:da:5f:
         a9:da:40:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----