Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEE256ECB51211F1BAFFA7CECE1D38B0.roa
File:                     CEE256ECB51211F1BAFFA7CECE1D38B0.roa (raw, json)
Hash identifier:          iatqzhC2mkgCHSnc3GkSERq47I6iCxVoFh9+UwbLBwg=
Subject key identifier:   CB:B2:F3:9E:58:5A:13:0A:5F:F0:F2:16:F1:D1:1F:EF:AF:6C:D1:70
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D740
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEE256ECB51211F1BAFFA7CECE1D38B0.roa
Signing time:             Sun 20 Sep 2026 16:46:21 +0000
ROA not before:           Sun 20 Sep 2026 16:46:17 +0000
ROA not after:            Wed 19 Sep 2029 16:46:17 +0000
asID:                     17561
IP address blocks:        45.204.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120640 (0x1d740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 20 16:46:17 2026 GMT
            Not After : Sep 19 16:46:17 2029 GMT
        Subject: CN=6ab00ddd-a45d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c2:83:17:99:95:5b:e2:78:1f:80:6b:81:62:
                    1d:85:81:a0:e6:58:9a:0d:3e:e7:b2:31:08:dd:e2:
                    b6:ec:3f:6c:55:c4:71:ff:cd:27:d1:06:7f:06:62:
                    9e:6a:ca:0a:38:be:bc:0e:8a:d0:f3:31:d4:47:12:
                    b9:d7:28:a0:46:bf:70:9c:70:d2:b4:64:6f:c6:38:
                    1f:91:d4:65:d7:e6:5e:4e:a7:ca:72:9a:5e:03:fb:
                    7a:03:05:ce:1f:ba:17:ba:4d:15:7b:c1:d4:08:c5:
                    8c:b0:00:a5:e1:fb:cb:96:ae:b8:38:f7:b8:3a:4c:
                    3d:9e:8f:0f:98:02:e4:7c:98:bb:e7:17:80:43:d3:
                    93:b3:5c:aa:22:e0:0e:b7:d6:5c:49:3d:3a:54:ba:
                    26:c7:cb:ef:1d:a5:b7:ef:c9:66:f3:d8:a3:93:ea:
                    16:4f:cb:ae:e3:bd:bc:a8:61:d7:66:8b:33:7b:42:
                    be:54:7b:96:f7:78:23:d7:90:be:6c:82:60:b0:c1:
                    dc:5e:5a:08:5e:c1:1b:62:51:8f:6c:93:fa:b4:43:
                    91:0f:21:57:76:e2:6c:bf:f0:94:1c:78:99:a9:d2:
                    e3:25:b2:10:65:ca:b8:6b:a4:5d:3c:a5:5e:97:f2:
                    20:ee:f8:f0:70:e6:22:ec:d2:1f:6a:eb:bd:5c:96:
                    7e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B2:F3:9E:58:5A:13:0A:5F:F0:F2:16:F1:D1:1F:EF:AF:6C:D1:70
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEE256ECB51211F1BAFFA7CECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:95:3f:37:36:92:4f:c5:90:3f:58:59:e7:be:f3:28:c2:b9:
         24:46:aa:08:ee:3b:79:8d:39:de:ab:c6:f1:40:02:02:b8:a5:
         17:a7:59:a0:4f:20:97:1d:de:45:b9:98:9f:20:ba:c6:5c:f1:
         d7:3c:f3:51:90:89:a3:36:03:78:d0:3f:57:64:2e:c1:a3:9b:
         20:7e:19:d3:36:fe:3b:46:41:d7:9c:b6:7a:32:ae:54:00:ff:
         b2:6f:9c:26:30:da:48:e8:d2:3b:99:90:c8:66:4a:60:ad:61:
         ce:e3:df:75:80:cf:a0:d2:df:38:66:88:82:d2:7f:a6:3e:a9:
         45:81:da:86:83:29:cd:f6:ed:49:a5:71:ce:1d:f6:26:99:0f:
         4e:af:f9:68:dd:86:4a:05:fc:80:f6:44:b3:32:6c:cb:86:ea:
         71:4a:c8:4a:2d:f3:0a:3f:b1:1a:60:20:27:4c:8f:39:f5:de:
         62:26:40:10:1a:03:56:fe:b4:20:90:2d:0e:13:50:88:8b:6a:
         c8:22:b2:90:64:0e:0d:13:14:bc:d1:38:fa:4c:94:dd:06:e4:
         f3:c4:91:51:5b:c9:d4:fd:6f:3a:e7:69:2c:99:0f:60:ff:2a:
         3c:31:40:54:52:d5:cb:8b:5a:50:9e:b9:9d:01:5c:8c:81:a5:
         e6:08:f3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----