Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/E3D9DE9CB72611F1AED694EACE1D38B0.roa
File:                     E3D9DE9CB72611F1AED694EACE1D38B0.roa (raw, json)
Hash identifier:          +Q8CceJsrdJsbQuhKhglLI6UGk9fOwb8itMoOZgZzYY=
Subject key identifier:   7F:D6:61:3B:E6:13:D8:AE:EB:6C:5D:60:07:D0:CF:BD:7F:E5:EF:88
Certificate issuer:       /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial:       07F4
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/E3D9DE9CB72611F1AED694EACE1D38B0.roa
Signing time:             Wed 23 Sep 2026 08:15:09 +0000
ROA not before:           Wed 23 Sep 2026 08:15:05 +0000
ROA not after:            Thu 30 Sep 2027 08:15:05 +0000
asID:                     211422
IP address blocks:        45.221.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
                          rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2036 (0x7f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
        Validity
            Not Before: Sep 23 08:15:05 2026 GMT
            Not After : Sep 30 08:15:05 2027 GMT
        Subject: CN=6ab38a8d-ba17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d3:ee:63:28:a9:49:4e:86:59:ef:5e:f9:54:
                    31:0b:52:be:5c:6f:d4:64:6d:4e:4d:2b:30:62:28:
                    a2:4e:e1:4e:ee:ad:c2:03:b4:2e:e5:5e:84:5b:a0:
                    f9:d5:ed:8e:63:82:a2:8e:2d:65:fe:17:32:de:b1:
                    77:9a:ca:46:75:d9:e9:18:21:ae:35:44:10:c3:d4:
                    2a:53:6f:93:73:5e:d0:06:9b:2b:87:41:b0:9c:91:
                    84:a2:86:1f:2b:7a:f4:f8:56:c8:64:8d:64:f5:ed:
                    6e:2b:ed:a4:5b:a4:c0:11:4b:c4:dc:8b:44:76:91:
                    ce:2e:3c:95:70:46:ff:47:b8:f6:22:a0:66:24:95:
                    84:26:4c:b5:b1:65:47:b7:69:5c:cd:57:d6:58:99:
                    89:ee:e8:92:10:a6:67:eb:b0:46:fa:f6:9f:25:43:
                    24:9f:03:55:09:0b:bf:fb:60:b9:24:d3:a0:32:6b:
                    ef:8c:e5:01:91:ba:27:04:76:5a:2a:f2:4c:d1:4c:
                    d4:55:07:bd:ef:de:8c:91:46:3d:0d:c4:5c:dc:e3:
                    9e:e0:83:17:e9:2a:b4:49:65:31:73:97:f4:8d:bf:
                    cf:69:ad:23:45:6b:c1:f5:93:9e:66:a5:d6:5b:5d:
                    ea:e2:65:0a:8b:75:ba:bd:19:67:1f:87:31:88:78:
                    e4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D6:61:3B:E6:13:D8:AE:EB:6C:5D:60:07:D0:CF:BD:7F:E5:EF:88
            X509v3 Authority Key Identifier:
                keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/E3D9DE9CB72611F1AED694EACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:35:ef:da:e3:04:52:ce:aa:c6:f4:33:f9:d7:1f:d3:1c:6c:
         c7:08:84:76:18:a9:66:33:76:f7:11:62:54:48:ff:43:96:75:
         07:9a:fb:57:38:f6:b5:b0:89:35:2e:5b:22:be:64:13:a7:fe:
         26:a9:f1:24:20:32:63:96:3b:01:ee:48:ad:e7:fb:08:bb:f0:
         1d:88:97:3e:49:77:fd:09:97:e3:79:3a:e6:70:3a:07:1f:85:
         1c:3f:05:df:1a:b0:1f:73:bc:13:69:80:e3:60:d5:3e:a7:b0:
         fd:1b:15:f2:e3:d3:ba:ed:a2:ac:af:4b:7f:96:2c:93:09:05:
         9f:1d:58:3a:63:69:7b:de:05:7c:c3:4c:11:d2:da:c9:ce:ba:
         3e:11:67:90:b1:67:86:c3:16:b5:b3:34:c8:60:c2:be:76:7b:
         e4:f0:03:be:6e:86:50:f7:9d:d3:d7:da:b5:63:58:2b:32:eb:
         71:f3:80:a1:70:58:e7:a3:7d:e2:18:1e:06:93:5d:41:04:3a:
         b9:8c:86:af:c2:d5:77:3d:e1:0e:7a:9f:85:3a:03:ca:42:25:
         c3:ed:be:3b:0e:4c:ba:34:c1:a5:5b:ea:4e:1d:02:d5:7e:23:
         07:4f:1f:ff:f0:1a:26:bb:b3:a2:0d:69:c5:63:0b:56:c0:54:
         50:54:b5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----