Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D79001CAA8A11F1BFD43318CF1D38B0.roa
File:                     3D79001CAA8A11F1BFD43318CF1D38B0.roa (raw, json)
Hash identifier:          rNyJ0sqSX22Rc7P/9wvBanjIBfx3avHFqsG/xQ51SMM=
Subject key identifier:   F1:DF:57:AF:0B:4E:90:BD:02:CB:5C:CF:55:C0:1C:2C:46:E3:DD:28
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D3B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D79001CAA8A11F1BFD43318CF1D38B0.roa
Signing time:             Mon 07 Sep 2026 07:03:34 +0000
ROA not before:           Mon 07 Sep 2026 07:03:30 +0000
ROA not after:            Tue 13 Oct 2026 07:03:30 +0000
asID:                     154383
IP address blocks:        45.197.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119732 (0x1d3b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  7 07:03:30 2026 GMT
            Not After : Oct 13 07:03:30 2026 GMT
        Subject: CN=6a9e61c6-8213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8a:d0:f7:76:d5:81:ff:45:2c:de:46:db:d8:
                    4b:97:a0:43:d7:cb:b5:5f:58:5a:2e:3a:14:a7:42:
                    b1:b0:6e:16:5c:af:8d:bc:aa:b5:c3:07:36:69:a9:
                    ca:c6:46:66:df:25:b7:e1:a5:8b:a6:f4:01:f9:0c:
                    50:1f:4f:dc:4e:3d:58:b8:14:e6:68:06:72:d6:65:
                    5b:a3:72:e5:c4:4c:4d:c7:99:2a:bd:c9:00:61:a5:
                    08:cb:aa:6d:63:9e:7a:16:8f:ea:ed:e4:56:b2:f1:
                    7d:f6:71:c6:06:70:63:8e:78:ca:fb:e2:8a:4e:76:
                    d9:97:35:4e:ed:0c:8e:cc:51:87:41:e0:65:19:fd:
                    fa:26:5e:29:7c:c3:a2:73:2d:08:e9:c1:19:c9:60:
                    8e:33:48:da:7d:de:e5:0d:ed:e9:89:0e:40:72:84:
                    ea:08:18:19:0e:df:fa:2b:ac:91:81:95:98:70:c3:
                    f5:46:f0:ec:65:24:fc:cd:27:48:98:84:46:77:aa:
                    c8:e3:05:cf:73:c8:aa:44:08:5e:4b:5c:c9:37:90:
                    fd:1e:13:3b:93:f3:79:d5:cc:e6:72:c4:fe:27:8c:
                    ca:f3:1c:08:dc:48:bd:ee:31:75:88:84:bd:c4:a2:
                    22:49:e4:40:3e:fc:bd:a0:be:13:7f:ff:a9:0e:23:
                    40:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DF:57:AF:0B:4E:90:BD:02:CB:5C:CF:55:C0:1C:2C:46:E3:DD:28
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3D79001CAA8A11F1BFD43318CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:01:9e:6c:1c:60:79:b7:81:17:7f:85:ee:0c:67:dd:31:ff:
         61:d4:31:1a:0b:0d:bd:31:3b:06:29:8f:3a:ce:2f:62:c8:6c:
         fd:d8:4d:3d:ad:52:6f:87:f1:e2:6f:7f:78:8a:93:89:96:ef:
         07:93:bb:39:65:56:ef:00:3d:a2:44:f0:18:47:37:32:f7:a6:
         b0:79:c8:b8:5b:6b:81:e7:7a:6b:49:c5:59:1f:91:06:9b:62:
         c1:4d:5b:2c:c0:ed:09:f0:75:88:f5:78:8e:10:81:16:3a:2c:
         d7:11:8b:e9:7f:9e:63:31:9f:fd:f6:79:39:f5:53:80:7d:0e:
         36:d3:6d:24:df:e0:3c:c8:8d:1e:79:93:f6:3c:4f:a5:7e:f1:
         5b:5f:37:a8:93:e6:67:ec:8c:73:61:12:13:45:01:57:7f:5f:
         b8:21:b0:78:1e:73:1f:72:22:68:74:3a:9e:84:09:cb:54:7f:
         e6:5d:b1:99:01:27:7b:77:aa:2a:6b:68:4a:29:8b:71:43:94:
         9f:80:ff:9d:b8:b2:6d:1c:74:25:db:e3:dd:3e:58:ea:f8:b1:
         60:9d:72:a3:ca:1d:c7:22:90:57:43:7a:b7:a7:9a:ea:be:f1:
         2e:bc:3e:94:bc:42:18:c5:5c:65:b6:d0:9d:4d:63:2b:d4:f4:
         62:cd:fb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----