Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4706C0ED10811F1BBB7D31DCF1D38B0.roa
File:                     D4706C0ED10811F1BBB7D31DCF1D38B0.roa (raw, json)
Hash identifier:          OkpAaSIBFqL/ihWIgrFcoT1uJ6DeAOC6LXnXe4wH+M8=
Subject key identifier:   A4:BE:D3:1E:95:B4:AA:7A:6E:BC:14:96:65:3F:9E:44:6F:CF:88:5E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01E04B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4706C0ED10811F1BBB7D31DCF1D38B0.roa
Signing time:             Mon 26 Oct 2026 06:45:28 +0000
ROA not before:           Mon 26 Oct 2026 06:45:24 +0000
ROA not after:            Mon 30 Nov 2026 06:45:24 +0000
asID:                     51346
IP address blocks:        45.195.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122955 (0x1e04b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 26 06:45:24 2026 GMT
            Not After : Nov 30 06:45:24 2026 GMT
        Subject: CN=6adef708-a95f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:20:d4:6d:ca:3e:d4:34:13:50:fe:2e:5e:63:
                    31:71:08:7a:1f:95:c1:c9:dc:37:a8:5f:87:b8:55:
                    12:17:aa:a3:ef:68:b0:c9:d9:b2:23:39:7f:f7:60:
                    4f:58:a2:91:58:aa:d5:f7:82:7c:94:d1:c3:07:ad:
                    85:b5:3a:a5:cd:06:41:5a:c7:1f:6a:fa:e9:98:f4:
                    3c:b1:13:2e:3a:29:72:89:87:5d:29:b3:3f:dd:2e:
                    8a:8a:a5:4c:7c:fa:2d:8a:64:64:00:43:42:1c:db:
                    69:2d:7f:a3:98:2d:83:07:1e:fc:8b:d8:b8:6a:de:
                    40:d5:8c:12:37:a0:45:9a:e1:b3:37:de:d4:fa:f8:
                    f5:85:5e:e5:6c:6e:6d:ae:73:c0:21:70:46:98:dc:
                    98:35:3c:4c:b2:b3:29:0e:b5:27:39:de:45:42:b6:
                    f1:6a:b2:f2:55:3c:36:fb:3d:90:e9:6e:c5:5a:f9:
                    36:ea:ee:3e:1a:73:3a:85:57:15:fd:78:02:d3:17:
                    28:7c:91:7f:1b:7b:e9:f2:58:77:f9:c5:10:c3:83:
                    98:23:d5:81:11:48:a5:30:73:30:27:8b:30:5d:16:
                    ca:f0:4f:8c:29:5b:2f:56:0d:01:d3:31:19:14:fa:
                    32:12:7d:8c:8e:d1:74:54:f8:3e:ee:6b:8f:0e:b5:
                    18:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BE:D3:1E:95:B4:AA:7A:6E:BC:14:96:65:3F:9E:44:6F:CF:88:5E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D4706C0ED10811F1BBB7D31DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:b6:41:47:b4:1e:6e:8e:82:29:08:d7:ca:f0:5a:ef:07:f0:
         7e:55:df:a7:25:eb:2d:1c:28:c4:5b:cb:73:2c:c1:b1:ff:da:
         aa:ad:5b:33:9f:1f:1b:d7:a7:64:0a:2e:d2:c9:fd:76:82:93:
         f0:c8:0f:33:67:55:3a:d9:46:ba:58:27:3a:e4:29:34:04:c6:
         ea:2d:a4:2c:fd:2a:b2:77:f2:70:73:12:d0:3b:f7:81:32:35:
         35:4f:f4:52:5c:90:23:58:27:69:a8:ea:9c:ad:71:8f:aa:84:
         68:09:e8:2f:c5:9d:18:29:32:21:c9:37:52:8f:4c:a1:cc:fb:
         65:27:0b:35:08:a7:c5:f6:69:82:fa:dd:6f:b0:1e:d4:4d:2d:
         37:a4:8f:5a:f9:13:dd:89:64:21:25:a9:fd:0d:53:fe:be:fe:
         9c:05:d7:7e:d4:b8:a7:05:d2:32:7f:d5:2f:b7:81:ac:5b:bc:
         be:43:a5:d7:16:fc:ea:7d:a0:1a:d3:b4:eb:36:cd:06:82:20:
         6b:cb:30:53:a9:32:e1:2c:69:46:e8:2f:0f:52:94:e4:62:c8:
         0a:b6:b8:36:82:bb:1c:cc:e7:b8:6e:95:46:47:71:e1:e9:82:
         4b:fa:96:38:a8:62:a1:13:e1:c9:5a:a6:b4:e0:4d:57:fa:82:
         0e:43:9b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----