Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B6E9544AB6311F1B81504B6CE1D38B0.roa
File:                     0B6E9544AB6311F1B81504B6CE1D38B0.roa (raw, json)
Hash identifier:          Q+yRHQ68vPCqXdDySqChTcQktWlOqKSfxOhMq+7Hlhk=
Subject key identifier:   B4:9E:8C:F1:1A:65:E7:FF:AF:53:D2:3E:E0:6A:DB:53:AF:D9:06:24
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D3DF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B6E9544AB6311F1B81504B6CE1D38B0.roa
Signing time:             Tue 08 Sep 2026 08:55:31 +0000
ROA not before:           Tue 08 Sep 2026 08:55:27 +0000
ROA not after:            Mon 19 Oct 2026 08:55:27 +0000
asID:                     199037
IP address blocks:        45.196.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119775 (0x1d3df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  8 08:55:27 2026 GMT
            Not After : Oct 19 08:55:27 2026 GMT
        Subject: CN=6a9fcd83-d2a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9c:65:a6:de:7a:99:c3:d7:e8:c0:53:84:49:
                    1a:63:37:a4:9c:40:0b:2a:35:cc:91:e7:9e:39:17:
                    66:15:73:ed:6b:cc:cf:02:fd:2b:bf:73:42:0f:f3:
                    23:8d:ad:10:7b:c7:e1:35:e8:c9:61:0e:1f:97:da:
                    4d:55:a0:05:b2:ea:49:f3:92:86:13:7b:04:9f:bb:
                    a6:e4:d9:8c:f8:88:3c:ed:5f:ea:8a:87:98:69:a6:
                    2d:36:e2:17:70:90:1b:9c:e4:96:4e:b1:74:2e:57:
                    62:c3:af:c9:9d:93:ec:13:d1:d4:fc:b9:4c:d8:ff:
                    6d:30:e5:84:cd:aa:95:71:c8:66:6e:cd:7d:8e:5e:
                    3c:1c:79:c7:d5:70:54:a6:66:d2:77:47:fa:ea:59:
                    31:e6:83:3a:d8:0e:a9:54:9f:6e:79:32:f1:6c:9f:
                    61:62:77:e5:e4:40:65:3a:ec:95:44:56:32:65:ea:
                    1d:57:01:da:63:cd:51:a9:50:71:3a:9a:c5:8e:db:
                    4c:a0:a1:29:04:ec:04:f1:b7:79:12:f9:c5:c6:54:
                    e7:a5:0c:ff:a9:cd:fb:ed:f9:24:f7:86:99:77:72:
                    c4:9f:f0:64:3f:e6:ec:cd:24:c8:18:ab:cc:7c:7c:
                    19:16:d8:2b:e8:ed:3a:9e:cc:a6:44:89:db:74:ef:
                    7d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9E:8C:F1:1A:65:E7:FF:AF:53:D2:3E:E0:6A:DB:53:AF:D9:06:24
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B6E9544AB6311F1B81504B6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:15:ca:cc:0b:58:9b:43:77:0f:fe:b9:ed:66:c1:a3:a9:98:
         36:53:9f:83:d3:75:ce:b4:1b:72:b3:d0:48:11:e7:b3:5c:78:
         b7:98:55:9a:d7:6d:64:c5:98:82:45:e4:c8:a7:52:ec:ea:70:
         33:28:03:75:a2:9d:1d:b5:21:cb:ff:23:99:1c:44:c6:d8:fa:
         df:1e:55:d0:9b:ef:7b:66:47:3e:69:20:e5:2f:f1:88:92:b0:
         07:e1:62:fa:eb:b7:60:13:30:dc:a4:8a:27:f5:0d:cd:e7:90:
         98:a4:9c:34:d7:b2:b6:99:b8:d6:73:54:51:9c:2f:23:a1:e6:
         b7:a0:e3:23:36:cf:e2:36:77:43:be:e5:61:84:4c:33:ce:ac:
         77:73:4d:50:be:b9:a2:54:e1:5d:af:53:91:9e:b9:b8:ac:70:
         d0:c7:6c:7f:54:d0:bb:61:8c:1b:9a:5c:c7:d0:a6:3d:08:ab:
         44:29:2f:22:fa:04:ec:98:6a:ce:a8:c8:73:36:ad:39:40:7b:
         a2:22:d0:6b:51:f8:9d:05:2a:d1:01:15:c4:c7:f1:bf:be:ef:
         ae:07:47:40:d9:3c:f3:47:11:10:2b:49:61:97:7f:91:e3:ba:
         73:40:f9:a1:e3:1f:df:5e:ec:ef:7a:b5:81:e9:7d:bd:07:49:
         ff:5c:38:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----