Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F86C7D2CB0ED11F1B60CB2C8CE1D38B0.roa
File:                     F86C7D2CB0ED11F1B60CB2C8CE1D38B0.roa (raw, json)
Hash identifier:          2dA2ebDNA7gCugdhww8snIQoLyvSS+bu/dJ0yb0DBEw=
Subject key identifier:   12:2E:B0:7A:5D:EF:DD:C7:12:A6:18:69:46:7E:8F:DB:C9:50:42:4C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D657
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F86C7D2CB0ED11F1B60CB2C8CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 10:12:35 +0000
ROA not before:           Tue 15 Sep 2026 10:12:31 +0000
ROA not after:            Thu 15 Oct 2026 10:12:31 +0000
asID:                     147176
IP address blocks:        45.201.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120407 (0x1d657)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 10:12:31 2026 GMT
            Not After : Oct 15 10:12:31 2026 GMT
        Subject: CN=6aa91a13-f921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:53:8e:16:c5:1a:c5:3f:1f:bd:43:b1:ff:70:
                    b8:eb:a0:7f:c4:2a:cd:62:49:f2:89:7c:45:9a:e6:
                    8f:59:03:09:5b:5d:0e:5a:94:36:cd:5c:67:29:e8:
                    f8:9b:d0:1f:bb:e1:c6:65:98:32:1c:a4:2d:d8:d6:
                    f5:60:86:b2:02:80:bc:65:c5:ba:1c:2f:32:e4:64:
                    cd:eb:b6:6e:28:cf:16:16:1b:a4:fb:76:92:43:1f:
                    fb:b3:20:9d:6b:5c:77:66:73:ae:5c:cc:50:fb:81:
                    8f:40:c4:e8:22:f1:ed:4f:aa:86:1f:32:54:65:1b:
                    a3:f5:bc:18:82:ab:03:e4:7f:55:44:cf:56:78:49:
                    d3:ea:29:54:85:a3:86:af:1f:75:e8:e4:1b:a1:df:
                    25:5d:b2:0e:7c:69:f6:87:b2:8e:68:14:98:23:fb:
                    78:4c:b9:48:02:d9:cc:5b:69:f1:dd:db:34:dd:9b:
                    6b:df:36:41:07:2c:03:d2:f0:99:23:c7:f8:b8:12:
                    76:8a:4a:59:3e:6d:ac:75:82:ad:76:d4:dd:d0:6e:
                    a7:b9:82:a6:60:95:7a:47:c9:c3:16:2f:66:fa:82:
                    fd:d1:55:9d:36:73:d3:74:7e:58:4f:28:f2:03:b3:
                    a1:b9:22:f9:f0:34:fd:55:5f:2c:61:02:67:f4:1e:
                    de:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2E:B0:7A:5D:EF:DD:C7:12:A6:18:69:46:7E:8F:DB:C9:50:42:4C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F86C7D2CB0ED11F1B60CB2C8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:d6:3a:46:7d:4f:58:7e:49:e1:f8:60:8a:b5:a4:b0:52:9c:
         eb:37:be:be:db:a0:aa:b4:1a:d6:cf:33:9f:a4:ad:69:89:2f:
         ed:a9:46:a6:a8:5c:bc:b2:96:4d:50:cc:4d:06:79:32:ad:57:
         c0:6c:c4:eb:8f:f0:b2:fd:89:8d:58:a0:aa:df:44:d7:a3:29:
         26:a6:bb:91:38:3a:5d:3f:d6:3c:2a:8d:45:04:05:16:51:3d:
         e5:ed:b3:58:71:89:d9:f9:ed:d4:ab:6d:9a:0c:a9:69:cb:48:
         cb:09:68:3e:9f:18:a8:83:a0:90:f1:8e:b1:18:1e:59:b1:3d:
         a7:42:2a:75:c4:96:90:f0:c6:db:35:43:cc:47:49:8f:00:a0:
         1d:d2:7f:e1:44:01:16:5a:7b:1e:8a:27:fc:92:1d:8b:12:a7:
         66:e9:d1:b2:4a:2d:44:ed:39:c8:21:82:98:61:9e:c1:db:cc:
         1b:1d:39:3a:56:d9:09:a5:78:5d:03:86:5d:94:87:2c:98:16:
         d4:74:d6:46:78:c3:f8:e5:44:ab:55:73:7d:10:76:d5:da:d6:
         45:82:f4:27:e5:f5:64:df:ab:db:31:61:8d:35:d4:7a:c2:9e:
         45:33:b3:ff:c9:84:67:49:60:f3:c5:6c:6f:7a:34:64:b4:fd:
         71:49:6b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----