Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A219CC7EADC111F1981C4713CF1D38B0.roa
File:                     A219CC7EADC111F1981C4713CF1D38B0.roa (raw, json)
Hash identifier:          6gYmGQiQI/Hm3HwL+2KU/hgV5p0LwuHdRnKqMWCXhYQ=
Subject key identifier:   8C:2B:60:79:72:23:A7:C2:5A:78:E9:71:E8:4E:99:AB:7D:DC:6F:AF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D549
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A219CC7EADC111F1981C4713CF1D38B0.roa
Signing time:             Fri 11 Sep 2026 09:17:39 +0000
ROA not before:           Fri 11 Sep 2026 09:17:35 +0000
ROA not after:            Sun 18 Oct 2026 09:17:35 +0000
asID:                     16509
IP address blocks:        45.204.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120137 (0x1d549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 11 09:17:35 2026 GMT
            Not After : Oct 18 09:17:35 2026 GMT
        Subject: CN=6aa3c733-ebc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e1:0e:72:39:62:90:b5:71:cb:52:7b:08:24:
                    08:6e:78:fc:db:0b:a9:9d:33:cc:c3:f0:ef:ce:b0:
                    d9:b7:93:86:b7:4c:f1:a9:67:59:e0:63:c0:01:9a:
                    7c:b6:de:f8:7b:30:9b:bb:da:3c:bf:db:f5:63:cf:
                    40:c0:fd:de:aa:7b:48:53:c2:b1:21:d1:1d:a0:2c:
                    e3:d9:35:5c:ed:a9:f6:62:5e:89:53:3b:e4:1e:ac:
                    4f:c5:68:43:c4:01:a5:6d:fa:ce:4a:15:be:e5:ed:
                    2d:55:71:95:b3:49:b2:b7:b4:53:43:4a:d7:7b:09:
                    dd:d1:10:11:30:c1:e1:eb:6c:a7:ab:f5:ff:3b:5b:
                    96:19:65:ac:89:0f:63:fe:1e:c1:3f:1d:54:9b:c8:
                    9b:de:2f:d4:d6:13:f3:97:26:67:e3:26:9b:13:0f:
                    01:70:43:d0:2e:e4:ea:8d:e3:4a:46:a8:01:75:d3:
                    7c:3c:72:53:7d:7e:8f:2a:81:29:40:58:88:f8:9e:
                    67:4a:03:69:0c:02:fd:ec:b6:5e:78:64:9e:6a:e6:
                    70:fd:dc:e8:d0:03:fe:c1:b1:9f:83:02:88:11:bd:
                    fe:69:e0:53:74:14:41:1f:d7:a1:77:9e:82:d6:88:
                    bf:95:b2:5f:ac:b6:d8:8f:80:43:4b:8f:b2:81:1a:
                    94:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2B:60:79:72:23:A7:C2:5A:78:E9:71:E8:4E:99:AB:7D:DC:6F:AF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A219CC7EADC111F1981C4713CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:0f:9d:23:55:69:1d:e3:6d:e2:19:97:f4:61:6e:bc:0c:c0:
         3d:39:33:e2:a6:e9:51:5a:56:a4:61:b9:1e:8f:0e:3c:88:c7:
         1a:ab:e8:ad:3e:70:d3:6c:d9:7a:0c:1c:d1:d5:cb:68:c5:da:
         9c:9c:7d:c0:da:1b:be:7f:fe:8b:80:91:82:51:d8:d9:27:87:
         34:b0:b9:90:31:55:96:2a:d0:8f:a0:9a:fa:91:c0:7f:36:de:
         80:ec:7b:86:52:f2:b3:7e:b6:2d:49:b5:f5:77:0d:32:3b:87:
         4c:5f:9b:77:a6:40:1c:14:d4:11:cc:75:a5:77:05:c2:c8:c6:
         ae:d9:9c:9a:b6:ec:80:8f:93:41:51:0e:4d:e4:25:32:bd:f2:
         42:47:05:74:5e:8d:a1:55:0b:3d:f5:0c:0a:14:4e:fa:d4:02:
         fc:bd:2a:5a:99:c1:ba:f6:47:ab:2a:9a:00:2d:95:04:46:e6:
         ae:f0:a0:a7:39:67:2f:d5:63:43:ce:df:da:2c:2f:ea:c8:46:
         5e:61:fc:e4:68:41:34:2a:b7:2b:be:89:6d:e2:70:05:29:07:
         f3:51:44:a1:90:7d:4a:2e:98:b8:53:6f:ca:b5:b5:26:c3:f4:
         ac:64:67:8a:23:48:e9:c0:8a:70:71:32:0a:97:55:26:2c:36:
         e9:63:25:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----