Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D9F8802AC2111F188BA70BBCE1D38B0.roa
File:                     8D9F8802AC2111F188BA70BBCE1D38B0.roa (raw, json)
Hash identifier:          VhtFBqyxtu4x4k/rusu6zBs9GlGLfYE2gabxdF86K9U=
Subject key identifier:   02:8E:11:0C:B0:CF:DE:5D:24:35:5D:B1:F0:68:71:80:1C:A9:71:51
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D449
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D9F8802AC2111F188BA70BBCE1D38B0.roa
Signing time:             Wed 09 Sep 2026 07:39:14 +0000
ROA not before:           Wed 09 Sep 2026 07:39:10 +0000
ROA not after:            Wed 16 Dec 2026 07:39:10 +0000
asID:                     142002
IP address blocks:        45.197.12.0/24 maxlen: 24
                          45.197.13.0/24 maxlen: 24
                          45.197.14.0/24 maxlen: 24
                          45.197.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119881 (0x1d449)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  9 07:39:10 2026 GMT
            Not After : Dec 16 07:39:10 2026 GMT
        Subject: CN=6aa10d22-1f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a1:d3:d7:fe:5c:fd:1a:23:e6:2d:af:f4:89:
                    47:ee:82:ba:9b:3a:85:7e:9b:01:86:8c:8e:bb:30:
                    ec:93:1b:5b:20:c2:f1:0c:fe:fa:a4:d6:ea:ad:72:
                    ba:f0:64:07:5d:d7:a5:0d:75:3a:2a:35:12:78:6f:
                    40:d6:09:29:a6:98:6c:3d:ea:9d:7e:20:0f:1f:79:
                    27:3f:1c:fd:25:49:23:73:60:d2:56:63:dc:ca:d1:
                    ab:8c:90:eb:b2:f3:cd:c2:50:d0:ef:d6:7c:0a:5e:
                    f9:ae:56:d2:5e:8f:2c:88:64:d2:54:45:17:34:57:
                    5b:bf:f1:87:c1:ea:ac:1e:4d:3e:93:dd:7f:8b:b8:
                    84:3e:56:e3:b5:bd:50:04:d8:d9:53:a1:eb:43:8d:
                    d8:cb:95:fc:63:a5:1d:57:a4:66:4a:f4:93:50:c2:
                    12:86:b7:4d:f0:ad:19:69:b4:ce:30:1d:55:4f:54:
                    17:18:d3:39:fd:83:bc:fd:af:07:2f:e9:cf:49:e0:
                    82:66:0b:90:5a:6f:26:6a:40:81:9e:3e:d4:54:2b:
                    98:ee:6e:36:b0:09:c1:94:1d:d7:d9:9f:8d:b5:ef:
                    d0:22:6f:2f:67:ac:91:e9:53:88:c0:ea:f5:17:3b:
                    45:48:8e:45:f4:9f:de:fa:5e:3c:18:1a:66:05:25:
                    57:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8E:11:0C:B0:CF:DE:5D:24:35:5D:B1:F0:68:71:80:1C:A9:71:51
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D9F8802AC2111F188BA70BBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:d4:14:76:b0:af:99:20:c9:95:be:08:67:91:91:89:04:34:
         a7:52:e4:bf:32:b1:10:b3:47:87:ce:1f:58:e9:0d:7c:a7:0e:
         b5:7f:5e:1d:8f:9b:0b:58:fc:93:a6:03:de:7d:70:2b:b2:05:
         4d:10:39:ff:8b:dd:7a:70:2d:40:15:a6:f6:c1:94:22:f8:77:
         57:79:f1:78:2c:64:48:52:32:77:bf:ab:f9:f2:35:bd:6e:06:
         fe:be:b2:f4:fa:ca:73:fc:c2:11:d7:9f:f5:52:40:26:94:38:
         af:36:58:59:04:1a:55:db:c3:04:c6:bf:f3:db:56:6b:92:c0:
         c1:bd:37:f6:a7:13:84:86:86:3a:04:ab:e6:f9:76:3b:0e:9c:
         2f:86:33:4b:e1:63:ff:2f:34:23:31:a3:66:85:6c:cf:22:96:
         4f:29:76:ed:3b:1b:f5:32:54:6d:cc:0e:68:1a:74:15:42:62:
         7b:1d:d8:d6:01:8d:de:fa:99:e4:4c:05:a2:72:b7:64:c8:87:
         2f:e1:59:b0:bc:16:0f:a9:99:ab:13:25:3b:ac:f8:4b:73:c6:
         73:e4:b0:ae:a9:f2:82:8b:52:8b:c3:fd:35:ac:40:79:ed:c1:
         5d:cd:f1:5f:82:8e:98:15:bc:f4:f7:54:1e:b7:5a:38:74:0e:
         67:12:31:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----