Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/292C7B2CB0F511F18FBFFDF3CE1D38B0.roa
File:                     292C7B2CB0F511F18FBFFDF3CE1D38B0.roa (raw, json)
Hash identifier:          Tb5fzIAcGeyUykW7juKwTmCHwGyYZorB/c3sspj3Zt4=
Subject key identifier:   7F:B0:CA:90:BB:DE:36:EA:12:9A:BD:5E:A2:52:92:12:88:6B:08:83
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D667
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/292C7B2CB0F511F18FBFFDF3CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 11:04:03 +0000
ROA not before:           Tue 15 Sep 2026 11:03:59 +0000
ROA not after:            Sat 17 Oct 2026 11:03:59 +0000
asID:                     273908
IP address blocks:        45.194.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120423 (0x1d667)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 11:03:59 2026 GMT
            Not After : Oct 17 11:03:59 2026 GMT
        Subject: CN=6aa92623-e6bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:b5:2d:a8:87:9b:ff:c4:9d:2a:db:0a:4f:
                    4c:15:7f:b5:3c:d3:52:4b:45:14:31:25:01:8f:e1:
                    14:f2:49:f0:c7:fa:ef:b0:e2:36:5a:2e:5a:8a:36:
                    81:b1:20:6d:fe:fb:9f:b1:ee:95:62:73:c5:f7:8a:
                    6c:db:fd:61:b2:3c:7e:f3:39:bc:6d:06:17:ee:96:
                    75:1a:78:9b:59:17:ec:ed:1f:02:6f:78:0b:20:eb:
                    be:40:c3:1e:01:e2:78:d8:02:64:65:62:9d:23:65:
                    96:2a:04:97:b3:71:83:bc:79:8f:73:6e:99:5d:9f:
                    b2:2b:85:71:d0:90:09:fd:86:35:17:2a:90:3a:1b:
                    27:61:42:4b:76:f5:f2:57:67:74:6a:26:f2:26:b5:
                    7e:f0:f2:8a:a8:b8:ef:a4:0c:cc:c4:84:d7:d6:1e:
                    1d:6f:9c:39:60:b6:e2:61:3b:e9:20:00:0c:36:25:
                    a8:86:1a:90:3b:87:2c:61:b9:0e:b9:3f:90:d9:7d:
                    4a:bc:d9:27:03:df:83:a8:79:38:c6:9a:0b:bc:51:
                    dd:b0:97:bd:28:b0:ee:d8:2b:f5:7b:83:ec:fb:31:
                    23:bb:05:00:e9:86:a8:a4:6a:f6:d0:a6:09:15:d9:
                    61:f9:34:db:fc:8a:54:8f:6c:6f:97:7a:c7:fe:25:
                    09:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B0:CA:90:BB:DE:36:EA:12:9A:BD:5E:A2:52:92:12:88:6B:08:83
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/292C7B2CB0F511F18FBFFDF3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:78:25:a0:08:29:5a:29:7f:e1:9f:5e:47:6f:8c:73:6f:d9:
         29:ad:ee:33:b2:77:3a:75:ef:bf:2e:76:3c:8b:a9:3f:d4:e2:
         3f:5f:b1:eb:5f:b2:bd:4f:c4:0d:dd:20:a8:46:48:b0:9b:d2:
         39:81:9b:86:65:8a:89:da:21:f9:32:b6:a6:3d:c6:09:18:d2:
         94:04:95:21:6f:ee:e8:d3:53:e2:e2:a5:67:a1:93:b2:dd:d8:
         7b:6c:a6:4c:03:3d:51:ce:a4:41:8d:5c:ea:67:76:a0:b9:31:
         33:11:d1:48:92:7e:68:87:e1:86:ae:13:34:da:f1:91:a6:e3:
         d6:e1:bb:0d:5e:ce:78:7c:9e:cd:5a:68:95:29:82:ae:e3:34:
         20:66:4c:c4:03:3c:9d:be:90:1c:87:4b:f5:5e:45:8a:82:5a:
         8e:56:43:07:79:28:da:2d:7e:77:fd:62:63:dd:66:02:5d:ae:
         47:ed:79:1f:86:6b:d5:a5:20:ba:88:85:68:4c:05:92:27:f1:
         33:bd:96:15:85:bc:43:0e:4e:ab:a0:dd:14:f7:67:b3:db:72:
         88:3c:72:e4:01:cc:0a:7f:8a:d8:c7:90:a5:5c:5f:a6:f2:56:
         f1:11:78:74:cf:80:59:08:87:47:18:1e:6b:5f:4f:db:23:2a:
         4f:8d:a3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----