Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35CF13FEB65811F1B17498A8CE1D38B0.roa
File:                     35CF13FEB65811F1B17498A8CE1D38B0.roa (raw, json)
Hash identifier:          KL2qEOK0ee5sYy3nmu0DNaqb1AYHpl2mBqRUeOX0yYc=
Subject key identifier:   BD:AD:90:19:94:62:DC:58:35:5B:82:F7:BE:0B:EC:A5:E8:0E:6E:FC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D7C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35CF13FEB65811F1B17498A8CE1D38B0.roa
Signing time:             Tue 22 Sep 2026 07:35:40 +0000
ROA not before:           Tue 22 Sep 2026 07:35:36 +0000
ROA not after:            Thu 22 Apr 2027 07:35:36 +0000
asID:                     135331
IP address blocks:        45.204.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120771 (0x1d7c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 07:35:36 2026 GMT
            Not After : Apr 22 07:35:36 2027 GMT
        Subject: CN=6ab22fcc-731a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f0:e9:2a:05:a5:64:f5:cb:7d:c1:4b:49:ea:
                    dd:f1:58:12:e1:5e:ec:9e:dd:af:ca:94:51:87:ce:
                    5f:9f:a1:c8:ac:0b:10:11:27:9f:ce:ab:c8:ed:94:
                    73:91:8b:e3:f8:5a:45:5c:54:b5:ab:da:36:12:58:
                    2d:89:2e:fa:e4:0c:90:26:ee:1e:f5:70:4b:bc:44:
                    04:32:cf:bc:7f:0b:3b:0b:73:aa:00:39:e2:48:d7:
                    5c:50:e0:b4:41:b9:17:20:29:4c:14:5f:68:a1:78:
                    1e:98:b6:79:af:a9:29:d0:b4:b3:fe:ad:dd:47:e4:
                    f1:76:07:fd:f3:15:c3:5b:27:d5:e0:41:1f:52:45:
                    9a:f6:9a:ba:00:6f:59:b8:82:9c:9d:2c:d7:5c:16:
                    ca:39:ea:74:5e:c1:0b:bc:14:e3:65:cd:98:01:18:
                    4e:91:5a:bf:50:89:f0:0c:e7:11:a9:e9:17:20:47:
                    80:6e:79:19:c6:bb:a7:78:ac:10:39:d1:8e:0f:e5:
                    51:f7:9c:56:ba:3f:12:3c:9a:93:d9:69:b4:6f:0f:
                    9d:59:62:6a:e9:f7:02:5a:32:77:48:6a:cf:01:47:
                    a0:ef:f1:9e:df:84:6e:a4:f2:d6:d2:8e:6d:54:45:
                    a6:6d:7d:72:bb:a6:41:c7:21:27:30:7f:ab:bf:3d:
                    60:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AD:90:19:94:62:DC:58:35:5B:82:F7:BE:0B:EC:A5:E8:0E:6E:FC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/35CF13FEB65811F1B17498A8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         52:8b:d0:60:b2:6e:22:bb:03:ca:2c:82:d2:7e:2a:ab:e3:1c:
         fb:73:34:e6:2f:8b:80:cd:c4:1c:23:4a:de:13:0b:a3:48:d9:
         8c:37:19:37:0f:b9:22:96:ff:f2:44:2c:3d:05:18:ea:ea:3f:
         34:0c:f7:c3:a4:67:7d:ab:9e:a2:be:cd:76:c8:0a:9f:18:9c:
         48:bd:78:82:df:ab:36:e8:1a:49:1c:18:d6:32:82:c4:78:f3:
         17:67:96:e4:f7:fe:80:f2:61:f2:92:43:80:5c:6d:70:2c:8d:
         41:5b:08:da:ab:e5:32:c4:04:13:1b:f8:ed:86:d9:eb:4b:c8:
         08:49:8c:3d:6a:a7:39:7c:ba:24:76:61:ea:ae:79:d3:c9:72:
         46:e5:cb:85:5d:83:f6:69:24:bf:81:21:78:80:f0:b4:59:e7:
         12:9b:52:c5:80:6a:b4:d8:d1:df:a7:7a:c9:e5:46:4b:8f:80:
         79:4d:33:5b:b1:d4:05:5c:71:bc:6b:c9:86:c3:af:2e:be:43:
         20:be:a2:26:9e:66:87:d9:c1:b8:fe:ce:36:52:c3:7b:09:35:
         fc:f0:d9:95:77:59:24:95:63:d6:44:a9:bc:69:39:15:f9:1f:
         92:dd:46:0a:fc:ea:97:e7:d5:6a:1f:c9:90:9d:45:15:d3:30:
         9e:8b:fa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----