Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2E8FA9CC25F11F18BA4051ACF1D38B0.roa
File:                     E2E8FA9CC25F11F18BA4051ACF1D38B0.roa (raw, json)
Hash identifier:          trvXKU/AA6rlvhYEyb3CNYIqe1Rx69X5AaTkl3eq7gI=
Subject key identifier:   94:11:9A:09:DD:53:D4:99:71:E7:C3:2F:9A:13:60:26:1C:1A:5C:6E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DBC7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2E8FA9CC25F11F18BA4051ACF1D38B0.roa
Signing time:             Wed 07 Oct 2026 15:00:53 +0000
ROA not before:           Wed 07 Oct 2026 15:00:46 +0000
ROA not after:            Tue 10 Nov 2026 15:00:46 +0000
asID:                     274174
IP address blocks:        45.200.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 09:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121799 (0x1dbc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  7 15:00:46 2026 GMT
            Not After : Nov 10 15:00:46 2026 GMT
        Subject: CN=6ac65ea5-6d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2b:7f:b2:14:1a:03:88:55:48:a1:de:91:7a:
                    90:9c:42:33:b5:01:8c:3c:4c:b0:59:a2:2d:36:a8:
                    3b:ca:93:61:60:09:8d:ec:bb:ad:d7:0e:68:87:80:
                    32:6b:a6:b9:6b:b3:49:4e:72:93:af:2c:35:ac:53:
                    df:1b:08:6e:22:24:2e:49:f3:fd:52:fd:d4:fa:6f:
                    74:df:bc:4a:e2:73:65:36:e0:47:51:9d:d9:ea:29:
                    7d:36:e5:9f:6b:bf:03:d2:47:2e:4f:66:49:ec:d4:
                    8c:9e:73:f8:b7:c1:15:ae:9d:9d:b5:66:ba:44:ac:
                    31:62:19:55:52:08:55:c2:93:a3:64:fe:6a:f3:22:
                    f3:c1:00:d4:16:9f:eb:93:76:1d:42:0c:9e:91:66:
                    44:36:cd:79:2a:9f:a2:0d:3a:0b:39:5c:a7:29:e9:
                    54:75:08:40:b4:7e:39:ec:59:f3:2b:e2:b2:75:56:
                    c7:cf:50:99:9b:c6:1f:f2:3b:88:19:62:85:74:5c:
                    19:79:f5:31:25:f9:78:9a:e8:99:56:13:6d:32:b1:
                    0e:f9:49:ce:7c:77:02:1a:61:bc:31:03:a2:8c:20:
                    d1:f4:8d:20:36:5f:5d:04:eb:39:23:15:6d:1b:e5:
                    b2:86:50:94:c4:b6:13:34:1e:4d:69:1b:43:27:84:
                    39:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:11:9A:09:DD:53:D4:99:71:E7:C3:2F:9A:13:60:26:1C:1A:5C:6E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2E8FA9CC25F11F18BA4051ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:b3:39:6a:8c:11:ae:62:45:1e:6d:0c:58:2c:65:6f:9f:bb:
         6a:ce:20:38:f2:07:cf:5d:ae:2c:ac:65:d3:53:23:85:89:fa:
         84:cf:a2:94:e5:b6:b4:8f:b7:14:25:c3:e2:a6:5d:0e:35:e3:
         7f:c7:ec:ce:bc:cf:b0:ac:ea:fd:36:ff:b1:5d:1f:5a:b0:a2:
         82:a5:47:b9:03:47:42:e6:fe:3b:82:52:1c:34:bd:ef:5d:6c:
         eb:bd:b3:8f:74:31:db:c0:ac:9f:2b:7f:53:87:6b:f2:95:ce:
         ef:d9:3b:64:b6:5a:42:2b:83:2a:62:87:7a:4e:9e:f4:f6:11:
         ce:af:53:e7:90:91:54:ea:aa:8c:99:90:9b:f8:55:a8:40:f0:
         3d:0d:79:d9:94:b5:e8:22:26:71:7d:f8:e1:f6:5c:ce:be:69:
         37:18:a9:a4:66:82:b0:fa:e0:17:4b:55:37:90:7e:17:de:bb:
         3d:96:5e:f9:21:34:8e:70:5f:1f:52:87:fe:90:d5:26:d6:a5:
         f7:75:6b:0b:5b:9d:e2:3d:bd:f1:b7:e8:58:6d:59:f8:ff:dd:
         aa:dd:16:99:9d:6a:4f:27:44:92:3a:1b:df:2c:9d:45:b0:08:
         68:a2:37:34:b6:d7:fd:ea:a0:93:a4:49:02:99:55:59:07:2f:
         b5:1b:ad:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----