Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DB7B53AB3F611F1B70BC205CF1D38B0.roa
File:                     3DB7B53AB3F611F1B70BC205CF1D38B0.roa (raw, json)
Hash identifier:          +1dSq8B+u+jkode8zroqWNVGwXgFY29IsNZAHXZAZfM=
Subject key identifier:   54:64:12:7F:ED:CB:6E:28:D9:0C:C0:3C:18:C1:98:F8:80:A6:23:E9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D6E9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DB7B53AB3F611F1B70BC205CF1D38B0.roa
Signing time:             Sat 19 Sep 2026 06:49:21 +0000
ROA not before:           Sat 19 Sep 2026 06:49:17 +0000
ROA not after:            Sun 25 Oct 2026 06:49:17 +0000
asID:                     200758
IP address blocks:        45.192.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120553 (0x1d6e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 19 06:49:17 2026 GMT
            Not After : Oct 25 06:49:17 2026 GMT
        Subject: CN=6aae3071-2d01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3f:6e:af:f1:b6:2a:63:d3:48:32:23:bd:a0:
                    f5:97:76:84:24:d3:0e:eb:3c:0a:08:d3:63:ea:46:
                    df:3d:ad:19:d7:bf:45:cd:ac:50:85:87:a1:bb:98:
                    16:27:09:7c:83:44:ea:cb:22:a3:3f:44:9f:1f:9c:
                    22:70:69:98:70:28:1e:08:b9:66:41:c1:5f:1c:01:
                    e2:8d:05:b4:2d:96:c1:47:96:49:b4:f0:4b:4d:f0:
                    81:43:8e:69:b6:84:83:36:1b:0e:6d:f6:64:d9:c2:
                    8a:79:39:86:ae:e2:b1:39:d7:f8:b9:79:58:03:54:
                    c0:2a:cb:f0:00:87:5b:2b:50:7d:0b:a9:64:67:00:
                    bb:5d:30:e1:2a:71:62:82:cd:8c:25:fb:8f:25:41:
                    72:86:ec:5b:a1:68:51:f4:47:5e:51:49:ea:49:29:
                    22:79:53:56:f1:3f:3e:be:0e:5f:31:dc:d8:03:91:
                    7c:d6:52:63:29:c4:08:5d:22:45:4c:fb:a4:4b:7a:
                    a3:4c:ea:87:78:92:89:f2:ae:bf:45:3d:ce:8a:36:
                    5a:bf:66:8a:8b:84:5b:02:22:6e:66:53:68:71:90:
                    84:24:47:37:73:f7:40:65:ed:f6:87:37:a5:15:47:
                    3a:95:60:dc:fb:2c:fa:55:7a:42:02:03:02:ed:0a:
                    26:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:64:12:7F:ED:CB:6E:28:D9:0C:C0:3C:18:C1:98:F8:80:A6:23:E9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DB7B53AB3F611F1B70BC205CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:4f:2b:39:d8:24:ef:6c:c0:ff:d5:9e:c7:13:e5:6b:56:b8:
         32:69:c7:56:15:44:d1:d5:43:fc:cb:c5:1f:24:5d:06:43:5f:
         62:c5:63:15:fc:d6:90:bb:1b:08:de:54:9f:2b:85:c3:e2:26:
         bb:6c:b4:00:72:cd:21:84:d3:72:5a:64:fb:6d:03:14:65:93:
         0f:1a:55:46:e0:68:d5:cf:56:71:df:1c:df:3c:d2:c7:a4:3f:
         b4:ca:91:e6:c8:e8:e7:50:ef:d1:97:ee:51:86:d7:1c:36:ad:
         5f:65:2b:96:c3:72:4c:f6:5d:0b:9e:86:14:c0:27:8c:ad:73:
         33:67:b4:8b:a3:33:78:49:ee:e9:49:f5:6b:02:2b:f3:72:d4:
         3f:f3:ab:2a:01:4b:a5:34:e7:2a:3a:b9:2a:fc:5e:07:46:e4:
         61:c1:82:59:a0:30:7f:5b:33:55:46:a9:27:ab:3a:92:5c:b1:
         61:07:aa:ad:70:60:5d:ad:75:74:dd:1e:26:63:ea:84:69:49:
         f0:49:38:55:19:19:23:db:23:64:9f:3b:f9:44:cb:d5:d6:c2:
         6e:2c:4f:f2:7e:29:4d:8a:de:3a:a6:50:21:46:f4:79:87:42:
         db:b0:6b:08:24:42:4a:45:94:bb:f9:e3:9b:37:d9:c8:8b:ff:
         2a:81:82:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----