Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BBBFDFCB59411F1AA68DFA7CE1D38B0.roa
File:                     6BBBFDFCB59411F1AA68DFA7CE1D38B0.roa (raw, json)
Hash identifier:          gMFMbSML4OePKlM6vUHpAR3WHpNIvyX0GKwXUWQrJHM=
Subject key identifier:   40:56:14:3E:A0:6C:B3:9E:9E:CF:95:B6:15:5E:9A:BB:8F:B5:AA:E2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D77C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BBBFDFCB59411F1AA68DFA7CE1D38B0.roa
Signing time:             Mon 21 Sep 2026 08:14:09 +0000
ROA not before:           Mon 21 Sep 2026 08:14:05 +0000
ROA not after:            Wed 15 Sep 2027 08:14:05 +0000
asID:                     18233
IP address blocks:        45.199.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120700 (0x1d77c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 21 08:14:05 2026 GMT
            Not After : Sep 15 08:14:05 2027 GMT
        Subject: CN=6ab0e751-4fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:57:85:d8:58:a4:d3:62:99:f4:76:e6:cd:3f:
                    b9:64:f2:ae:f2:3e:0e:e1:72:a5:ef:e8:d1:43:16:
                    72:29:df:7c:15:18:1a:47:05:4e:a1:db:5b:e7:ae:
                    05:2b:95:f3:84:cb:ab:c7:60:50:be:42:54:13:e0:
                    53:df:07:5e:8c:33:a5:06:be:ef:06:35:09:1f:4a:
                    2f:53:98:28:6a:c0:33:35:3d:81:3c:3e:23:e5:07:
                    49:3f:bb:e9:5a:21:58:ab:25:b8:c9:ff:d0:8c:f4:
                    2c:70:53:f4:a5:fd:7d:4d:f7:5e:0d:29:ab:56:c2:
                    72:63:49:93:47:e7:3c:76:ae:8d:93:ca:83:7c:c5:
                    1a:65:4d:fb:1c:32:25:38:dd:24:c9:ea:3e:a9:55:
                    1c:9a:c1:74:41:92:cd:3f:37:af:6f:bf:c4:15:77:
                    d6:8b:3c:7c:60:50:ef:a3:93:25:4e:33:07:2b:81:
                    6c:5b:81:a5:bc:fa:e8:d8:49:76:62:cb:f5:97:fc:
                    cc:d0:2f:23:6b:13:a1:77:be:30:6d:90:9b:9f:a2:
                    73:e8:0f:ca:5e:a1:35:1a:ad:3a:36:63:a6:d7:be:
                    2b:0e:46:c1:07:84:b9:5c:2f:2a:e7:41:08:86:4f:
                    20:22:29:65:75:14:18:65:88:63:d7:02:d1:cb:45:
                    1c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:56:14:3E:A0:6C:B3:9E:9E:CF:95:B6:15:5E:9A:BB:8F:B5:AA:E2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BBBFDFCB59411F1AA68DFA7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:be:d8:7c:09:1e:77:fb:6d:85:47:fc:29:13:75:48:67:b9:
         7e:e0:8f:c9:ca:3d:10:ac:43:e2:02:e1:c5:d4:25:bf:aa:14:
         77:e6:f6:fa:98:a5:7b:a7:74:75:37:8d:54:aa:50:a9:ff:9a:
         ec:bf:b4:bc:98:57:6b:b2:a0:da:3c:ff:4b:15:64:cd:c5:5d:
         21:9a:dd:d1:ff:a7:94:dd:71:1b:9e:71:da:fd:c3:44:5c:99:
         8d:60:dc:68:69:22:a1:20:ca:05:f6:6c:c3:70:dc:75:32:ec:
         8b:1f:6b:e9:f9:b0:e1:d4:94:3c:89:49:e0:eb:19:25:51:a3:
         f7:a7:8b:08:6e:ea:5d:6f:f4:df:5a:13:47:65:4b:57:d4:71:
         e9:84:74:f9:d3:f6:39:59:3a:4c:74:ae:2a:49:37:0a:8f:4a:
         68:4d:28:9e:9b:a8:42:25:47:9e:51:f9:13:1c:5a:36:49:e8:
         d8:82:e8:e4:24:2f:43:3a:ff:57:03:d4:18:04:b2:89:66:26:
         79:8c:99:83:79:f1:f3:45:23:b2:7a:13:fa:23:8e:f5:44:e7:
         85:f5:95:20:e5:02:0e:36:c4:c2:5c:76:42:3f:01:c5:c5:5d:
         77:d0:04:c6:4f:4a:1f:0d:e8:2a:2f:50:c9:29:1f:4e:67:6b:
         de:77:60:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----