Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23AC9366A69C11F19B7003D0CE1D38B0.roa
File:                     23AC9366A69C11F19B7003D0CE1D38B0.roa (raw, json)
Hash identifier:          1TE9q8SWqyHum/RarQVunhAODSq213Kh68roFDlAhp0=
Subject key identifier:   39:1F:22:A1:B5:24:A7:D0:4B:01:53:6C:23:C7:C4:81:FD:AE:55:2B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D244
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23AC9366A69C11F19B7003D0CE1D38B0.roa
Signing time:             Wed 02 Sep 2026 07:01:37 +0000
ROA not before:           Wed 02 Sep 2026 07:01:33 +0000
ROA not after:            Fri 02 Oct 2026 07:01:33 +0000
asID:                     17561
IP address blocks:        45.198.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119364 (0x1d244)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  2 07:01:33 2026 GMT
            Not After : Oct  2 07:01:33 2026 GMT
        Subject: CN=6a97c9d1-dbbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c6:8d:76:15:73:d4:07:ab:57:e4:66:8c:8a:
                    84:42:14:31:32:4a:13:a1:9f:83:96:c8:c6:91:91:
                    e8:03:d7:2c:ae:9a:a9:78:7b:62:66:b0:0c:81:d6:
                    34:55:ba:36:27:2b:98:33:41:c6:bc:a8:00:8d:c2:
                    8c:d6:a8:2e:60:27:ef:ed:47:37:da:e6:10:4f:6a:
                    ff:6e:1e:57:62:2c:23:c0:d3:0a:dc:af:8b:6e:f2:
                    06:1e:b3:73:fc:e6:d9:fe:99:20:e7:75:09:9a:2f:
                    d2:cb:de:fe:08:fa:86:d2:3d:27:ff:81:ba:5c:84:
                    01:47:32:49:4a:74:b1:90:ef:9a:6f:26:25:64:40:
                    d4:8e:16:a3:d0:a4:2a:af:c0:50:68:9e:d9:fa:3a:
                    dd:a9:85:c7:b1:6a:e3:fd:67:1b:3f:67:42:7a:34:
                    56:d7:8c:3c:ea:03:36:4e:a6:8b:26:10:9f:2b:2d:
                    10:71:ed:6a:b5:af:cb:29:36:33:55:16:b1:c3:97:
                    67:81:29:d5:6d:38:d0:1c:ab:11:42:e4:51:1c:84:
                    bd:30:f6:89:cf:cd:d6:06:31:ac:47:a5:ec:85:d6:
                    7f:34:e1:c7:49:09:9d:3d:f3:aa:1f:ef:99:69:cc:
                    c8:34:5c:f4:33:43:7f:48:c0:1a:b8:12:31:3e:cd:
                    94:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1F:22:A1:B5:24:A7:D0:4B:01:53:6C:23:C7:C4:81:FD:AE:55:2B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23AC9366A69C11F19B7003D0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:7a:00:98:41:b6:0f:e8:fa:d8:91:c5:87:ad:97:91:a4:4d:
         3a:4a:3c:2f:dc:3b:51:23:27:6b:ca:bd:6c:84:a9:90:82:9e:
         3d:7b:01:46:a8:77:32:7f:37:02:97:f8:eb:7d:67:3e:c5:ca:
         c6:39:36:3f:72:cb:43:b7:3c:96:1d:04:67:c3:e3:5f:bf:2a:
         39:04:c0:b3:85:40:11:52:c0:2f:15:56:e6:24:ac:f3:8c:d7:
         d0:bc:53:cb:8d:a8:7e:a6:1c:c6:b9:2f:34:f2:21:e2:61:cd:
         e4:80:51:1c:f5:e5:3a:12:63:dd:87:46:f4:02:50:1c:c7:57:
         58:e7:ba:c5:61:d4:78:c2:f9:2d:b7:16:4a:07:09:02:c7:f5:
         bc:8d:2d:48:b1:fb:fc:10:25:11:de:73:21:f8:3a:4a:ad:e2:
         5d:e8:d1:3d:28:44:0d:a0:a0:8c:07:90:f4:22:32:24:f0:7d:
         a4:96:a7:3b:a5:ab:cd:8d:ce:45:be:16:df:15:98:ee:e5:ae:
         aa:8e:17:54:e2:94:d7:34:87:20:35:99:8a:21:5c:09:2b:1c:
         16:65:0c:50:07:1d:41:83:b5:97:98:18:27:0e:8a:ff:75:bb:
         c8:11:6f:14:bc:6c:c9:ea:74:72:e4:19:0a:05:96:f9:2b:38:
         23:16:67:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----