Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D42F054A83D11F1A62BD3ABCE1D38B0.roa
File:                     6D42F054A83D11F1A62BD3ABCE1D38B0.roa (raw, json)
Hash identifier:          RJoG2gmPXfCLGkTdIq1FPvg73DiYqdvS6wMRsGvxMw0=
Subject key identifier:   60:4A:44:A3:F6:56:C0:9B:14:FE:65:62:EF:DD:DF:C0:1E:50:AC:A2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D342
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D42F054A83D11F1A62BD3ABCE1D38B0.roa
Signing time:             Fri 04 Sep 2026 08:48:41 +0000
ROA not before:           Fri 04 Sep 2026 08:48:37 +0000
ROA not after:            Sat 10 Oct 2026 08:48:37 +0000
asID:                     3257
IP address blocks:        45.199.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119618 (0x1d342)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  4 08:48:37 2026 GMT
            Not After : Oct 10 08:48:37 2026 GMT
        Subject: CN=6a9a85e9-a4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:82:a2:4c:62:5f:36:87:88:80:b6:b6:9f:36:
                    a2:25:43:eb:56:5c:4f:2a:95:6e:2c:fd:e7:b4:cb:
                    4a:ee:f0:0f:ca:69:51:aa:4b:b3:3e:ed:07:0d:e7:
                    11:92:0e:52:f7:68:87:8e:37:b2:71:75:07:3e:da:
                    28:84:5d:96:c7:e3:23:ce:6c:c1:2f:6c:9d:27:ad:
                    62:24:6b:72:73:04:31:6d:d1:91:ad:07:d5:2e:13:
                    a7:4c:0c:71:6e:2b:4b:dd:c1:23:32:ac:92:d9:35:
                    36:20:b4:d9:e0:74:af:2c:a5:a5:80:68:20:a4:c1:
                    0d:1d:cc:bc:b3:b3:6d:60:7e:5d:d9:39:eb:8e:8c:
                    42:f5:00:db:89:ac:a1:81:66:80:9b:e3:ce:17:ae:
                    86:6b:1c:68:e7:57:58:05:c4:d4:a0:8a:ab:36:59:
                    ba:3b:02:84:6b:10:1b:5a:35:15:88:63:28:24:11:
                    ab:3e:68:a3:73:f3:02:bb:81:04:84:e7:99:36:bd:
                    32:b7:3f:3d:cb:60:60:f0:e9:fb:24:d8:0c:38:12:
                    d2:6e:af:46:34:a7:46:f2:23:8e:05:8a:b5:4e:77:
                    8d:f9:01:7c:52:d4:07:78:e0:a3:33:c9:ef:9a:b3:
                    3d:38:4f:77:f0:5c:ac:68:5a:f7:30:78:b0:34:10:
                    3e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4A:44:A3:F6:56:C0:9B:14:FE:65:62:EF:DD:DF:C0:1E:50:AC:A2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D42F054A83D11F1A62BD3ABCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:66:f4:1e:63:b0:e6:44:7b:e8:0a:a7:fc:a1:bf:f2:a3:d3:
         e6:50:df:28:ef:5b:e9:3e:96:90:fd:62:45:35:6a:0f:ac:52:
         94:c0:9f:96:a5:37:9d:bd:fb:83:8a:37:a3:01:63:1d:a2:4c:
         18:de:ca:c2:7b:75:5c:97:7c:0f:ca:7e:e4:8e:c1:33:2b:18:
         76:f2:3f:1c:16:91:f8:e0:d1:00:8d:55:77:61:e5:87:d4:d1:
         16:7a:83:86:f7:e5:49:2a:5a:4f:26:07:55:13:78:27:86:c7:
         41:3b:c5:cc:e0:ea:50:d7:2b:bb:39:07:98:df:8d:c7:7e:bf:
         9f:b9:8b:c1:9a:bc:dc:0a:47:9a:0c:ee:09:ea:96:14:1b:2d:
         32:0e:7f:b5:b4:3e:20:0d:c9:66:aa:ce:2e:21:7c:05:d7:a2:
         4f:a2:70:6c:7e:3a:08:4d:1b:fd:a0:ca:10:ac:aa:a7:8d:de:
         a1:b6:f0:4c:51:73:44:7a:0b:da:8f:46:79:92:e6:bc:19:bd:
         48:f4:db:34:2b:6e:47:bf:83:97:95:d3:37:2a:9e:18:e8:ed:
         79:c5:e8:67:a8:51:9c:66:73:5e:de:bd:b3:06:a0:8e:4f:35:
         06:d8:1e:fe:bd:ef:5c:7b:94:5a:ad:f9:36:34:9f:e6:00:b4:
         d0:4b:d4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----