Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30D069D2B27711F1AA32F715CF1D38B0.roa
File:                     30D069D2B27711F1AA32F715CF1D38B0.roa (raw, json)
Hash identifier:          4oRKe+Ofk9JSIKB8lAZlSonh0mOUFFipxoGy56qmkCY=
Subject key identifier:   20:CA:5C:22:A7:28:97:3C:38:8A:0C:F2:18:63:03:54:10:53:5A:12
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D6C4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30D069D2B27711F1AA32F715CF1D38B0.roa
Signing time:             Thu 17 Sep 2026 09:07:22 +0000
ROA not before:           Thu 17 Sep 2026 09:07:18 +0000
ROA not after:            Fri 23 Oct 2026 09:07:18 +0000
asID:                     149940
IP address blocks:        45.198.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120516 (0x1d6c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 17 09:07:18 2026 GMT
            Not After : Oct 23 09:07:18 2026 GMT
        Subject: CN=6aabadca-99d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:44:07:39:cf:77:c0:f3:9b:74:45:ed:94:2e:
                    1e:c1:2c:26:52:a0:fb:48:04:30:d1:b1:88:09:fe:
                    af:09:f3:0f:b2:80:18:03:8f:7d:91:9b:97:77:c4:
                    7c:e8:3f:ff:b8:ea:2a:1e:3a:52:71:8e:cc:8e:f3:
                    47:d5:fa:27:f5:a9:77:af:a0:0e:0c:2e:97:d6:e5:
                    50:8a:52:88:a7:e7:d1:62:cb:40:d3:ad:f8:71:5d:
                    0b:d3:1f:da:2c:9f:3b:de:4b:70:74:8b:ac:37:bf:
                    ca:b4:b9:d7:f0:0e:38:88:ac:13:f7:43:fe:3e:bd:
                    bd:9a:f1:04:b8:e2:e7:8d:77:a1:c1:7e:12:59:c6:
                    01:75:a6:8e:ce:a4:71:14:d9:1e:c5:8f:11:90:05:
                    02:53:c4:6a:e7:31:c6:3c:39:b5:13:c1:1b:eb:f6:
                    83:88:a1:45:f8:a9:5d:74:5b:36:66:22:fd:bc:2d:
                    5e:64:08:cc:4a:03:9e:fb:03:4a:65:4f:74:8f:05:
                    df:63:7f:ec:11:a8:1b:89:6c:f8:f1:e3:39:e2:5b:
                    ad:3b:42:1b:d5:43:08:f9:98:b7:90:fa:47:28:28:
                    2d:05:69:65:af:02:ac:1b:39:5a:f7:e6:6a:40:3b:
                    05:b0:89:d5:19:41:fe:3f:58:0d:38:9c:1d:61:ae:
                    0f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CA:5C:22:A7:28:97:3C:38:8A:0C:F2:18:63:03:54:10:53:5A:12
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30D069D2B27711F1AA32F715CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:68:ef:7e:65:90:a2:36:fc:1a:87:86:d4:b5:92:1d:4c:25:
         6f:43:35:f0:77:62:51:93:8f:ac:a1:ac:f0:76:2f:58:31:24:
         be:0a:6c:32:26:24:54:e1:fe:df:05:2f:f6:b4:ed:83:59:70:
         e8:50:e1:f4:88:f4:55:18:7c:77:8d:40:30:dc:c8:68:05:8e:
         60:9a:ba:63:e3:d7:e3:16:fd:43:e2:1f:15:e9:61:08:f0:7f:
         c8:a1:94:30:a2:33:b6:15:49:b2:7c:23:6a:b4:a7:b4:48:28:
         ef:23:c4:52:c1:6b:4b:15:6d:4b:97:f7:a4:b1:5e:90:3d:29:
         9b:0d:77:fc:28:85:5f:5f:8c:77:14:57:29:cf:b3:38:bf:39:
         8c:11:dc:0f:1b:3d:cb:81:65:1f:82:e8:51:70:8e:4f:e4:e4:
         99:ec:63:20:f2:cd:5e:4a:cf:b3:0f:b6:f1:e8:fb:f0:cb:22:
         e2:7e:87:a2:8b:63:3e:ff:36:8f:cd:4e:98:cb:d6:1a:cf:f0:
         3d:d5:a7:8f:c6:01:7b:07:6f:3f:f3:60:09:62:f1:76:51:c4:
         20:d5:c5:2f:13:36:1b:b4:45:af:d6:ff:0d:b4:35:40:96:de:
         1d:9d:9f:8d:91:a3:ea:fd:72:9b:67:8e:f5:30:e4:44:88:87:
         33:1f:c4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----