Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50CBC6A6AA9211F1953597C8CE1D38B0.roa
File:                     50CBC6A6AA9211F1953597C8CE1D38B0.roa (raw, json)
Hash identifier:          Y8IjwWumvsxfGZ9JYIQZt9kNGas8Zf55/SMPKjJRogk=
Subject key identifier:   2B:7F:AE:70:01:49:94:25:B7:B0:81:4F:72:83:4A:F7:34:A1:3A:DF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D3B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50CBC6A6AA9211F1953597C8CE1D38B0.roa
Signing time:             Mon 07 Sep 2026 08:01:22 +0000
ROA not before:           Mon 07 Sep 2026 08:01:18 +0000
ROA not after:            Thu 15 Oct 2026 08:01:18 +0000
asID:                     134824
IP address blocks:        45.192.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119736 (0x1d3b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  7 08:01:18 2026 GMT
            Not After : Oct 15 08:01:18 2026 GMT
        Subject: CN=6a9e6f52-e4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:09:2c:9b:5c:e1:c2:24:63:50:38:6e:c1:06:
                    cf:68:54:df:f1:23:57:e6:3c:92:3c:b2:d7:83:b0:
                    3c:05:46:0a:fd:72:30:1a:57:97:07:29:56:7d:dd:
                    c4:98:86:e2:53:48:d4:09:a1:c7:a7:81:c2:45:84:
                    80:0f:e1:57:31:53:54:56:c3:1c:d3:17:80:03:35:
                    eb:b2:92:fe:50:8a:4d:88:ab:dd:12:61:d2:d7:c8:
                    0e:4f:cb:8a:05:c1:59:5f:ae:ba:83:ca:f2:c7:af:
                    50:6e:65:4a:3e:16:4c:fb:62:17:e5:28:56:cc:64:
                    df:5f:76:17:4a:7d:32:ce:ed:1c:70:6b:25:06:20:
                    f3:04:d5:58:24:7e:e7:e1:ae:df:75:73:11:99:c7:
                    30:35:57:3d:75:66:94:c4:81:65:24:8f:7f:b9:90:
                    8b:f5:10:6a:d6:c7:34:82:87:e5:bb:d9:c2:6f:2a:
                    e2:e3:c1:70:22:64:b2:b7:8d:34:22:7a:f0:ec:4b:
                    83:e8:63:b4:39:78:4a:cc:0a:02:26:ed:91:67:81:
                    d3:bc:a4:ab:57:b1:57:08:5b:ff:75:3e:5f:01:a2:
                    28:b1:80:c2:58:fb:df:fa:14:7a:6f:82:60:47:ec:
                    ac:22:bc:5b:6f:b7:3a:04:0b:14:42:a9:c6:13:ce:
                    3c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7F:AE:70:01:49:94:25:B7:B0:81:4F:72:83:4A:F7:34:A1:3A:DF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50CBC6A6AA9211F1953597C8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:15:ca:89:50:f5:27:95:bb:24:21:cf:1d:97:08:fa:e5:21:
         fa:44:e2:56:3e:0b:5c:ef:6b:86:bf:df:2e:b5:0d:65:eb:d6:
         6c:a2:66:f0:b2:15:25:16:5c:17:a9:49:dc:3d:d5:f5:7a:89:
         39:ce:1f:7f:2c:2d:6e:0a:6e:7b:dc:f3:c1:06:10:79:df:fe:
         97:5b:80:b4:e3:67:ff:9b:56:56:b4:43:11:0b:77:66:e1:0f:
         8f:41:a5:5d:06:97:cf:cd:ad:ba:90:8e:d6:e1:f4:47:71:fe:
         c6:87:60:6b:f8:0c:e4:8d:3e:01:6b:a9:66:4d:a7:6b:68:7f:
         55:0b:90:f5:5b:a5:c8:74:07:46:ed:8b:ce:07:ff:42:3b:e5:
         4d:ea:c5:b7:bd:2f:00:1c:05:0f:13:c0:16:7c:b9:0e:ed:22:
         63:1c:c7:3b:e8:46:77:0a:24:6e:9d:fc:12:ae:62:4d:5c:57:
         1c:80:42:83:61:e8:bb:36:0a:0f:01:c4:87:41:b5:c9:07:8a:
         4f:6f:b1:be:b9:9e:1f:c5:38:ae:b2:fc:00:1c:7e:58:e5:28:
         bb:bd:6f:07:d5:4d:8b:be:9a:a2:89:5f:60:f7:21:ff:67:a9:
         7d:4d:e9:66:61:0e:77:87:05:cf:44:24:9f:24:cb:42:75:e4:
         31:20:58:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----