Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BF8648EA5D811F196457DAECE1D38B0.roa
File:                     6BF8648EA5D811F196457DAECE1D38B0.roa (raw, json)
Hash identifier:          sRPEbo/QFp2JDv0M1VpJIqbYkEX+36ARCotWfNyPBII=
Subject key identifier:   85:58:A9:7F:44:FE:81:D4:21:F1:1E:EE:3D:E9:93:E9:E9:9A:2F:FC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D225
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BF8648EA5D811F196457DAECE1D38B0.roa
Signing time:             Tue 01 Sep 2026 07:40:37 +0000
ROA not before:           Tue 01 Sep 2026 07:40:33 +0000
ROA not after:            Wed 14 Oct 2026 07:40:33 +0000
asID:                     137643
IP address blocks:        45.196.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119333 (0x1d225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  1 07:40:33 2026 GMT
            Not After : Oct 14 07:40:33 2026 GMT
        Subject: CN=6a968175-ec5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:34:e0:55:0d:aa:8f:a0:86:03:66:b7:90:85:
                    0a:be:f0:aa:1c:75:d0:3c:a0:a1:dc:70:5e:fc:5f:
                    8e:d6:a9:75:f4:6b:03:95:01:32:00:d4:ac:5c:9b:
                    c7:c8:3f:7c:6a:9a:01:f3:51:04:a9:62:73:c3:76:
                    0d:ed:e2:c0:1e:ed:3f:bb:3f:08:44:1f:40:c1:7a:
                    1b:27:e8:dc:9a:57:ee:60:ad:b2:50:72:bf:23:1a:
                    fe:99:6d:b6:35:6e:52:63:8e:07:62:f1:3b:01:cc:
                    5c:42:dd:a5:ce:3f:d3:9f:f5:2c:c9:45:ae:6e:1a:
                    78:17:e4:3c:40:a7:c1:a3:d2:7f:c1:71:07:37:6e:
                    e2:dd:5d:90:e5:39:b4:7e:0a:34:f7:27:3f:50:82:
                    59:ff:bd:49:56:49:c8:89:f2:0d:71:64:73:af:fe:
                    4d:d3:aa:6f:2d:71:2f:0f:66:16:64:51:04:d1:3d:
                    35:34:86:ab:b9:02:c8:7e:9b:b2:3e:0e:b6:f8:b1:
                    6b:ee:70:e3:d9:70:8a:5b:be:db:28:7f:6a:aa:44:
                    f3:38:1c:df:a3:70:d0:a4:ee:8d:bd:0e:02:e7:9a:
                    97:10:5a:71:1d:be:eb:20:58:f8:24:b8:fb:c8:f1:
                    f3:84:dd:3d:cb:15:68:79:46:22:f0:f2:8c:88:58:
                    13:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:58:A9:7F:44:FE:81:D4:21:F1:1E:EE:3D:E9:93:E9:E9:9A:2F:FC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BF8648EA5D811F196457DAECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:99:02:9c:f9:63:de:28:48:8f:68:a0:0d:1f:da:7e:e0:1c:
         5f:80:6b:c5:71:47:b3:68:83:07:21:77:e3:db:17:24:9e:2f:
         e6:b3:71:b1:91:a2:d5:48:11:1a:c6:d5:e1:b2:9f:c5:65:15:
         1d:e5:c3:92:0e:2f:67:1d:1c:ca:68:fa:75:9f:ce:87:28:08:
         b5:21:62:27:b2:7a:4e:7c:bd:23:96:b1:ad:e5:4d:d4:d5:42:
         2a:11:bf:75:22:5d:5c:c0:dd:2a:d5:e5:ed:c6:e2:9b:b2:81:
         75:0a:f7:a0:ab:a0:56:d7:ff:3e:98:e4:b5:26:70:6a:bc:25:
         ab:af:1f:74:43:33:cf:c2:4c:ed:70:3d:c6:8d:44:59:92:56:
         23:27:98:3b:d3:80:aa:1f:18:34:17:83:6e:84:63:e5:09:9b:
         1b:26:34:12:ec:2d:f5:c3:b3:fc:23:b7:12:d2:a7:cb:e2:54:
         e0:12:df:bb:09:d4:4c:6f:9d:65:7e:b7:80:f9:2e:73:1d:ba:
         55:8e:42:16:e9:6d:e2:5b:a5:dc:6b:59:9d:9b:cb:2c:54:32:
         01:3d:ff:ca:85:2d:53:28:ff:46:3e:ee:38:b1:f8:5b:ee:00:
         c9:a1:8c:29:93:8c:68:c1:e9:9c:60:33:09:99:3f:ca:bd:cd:
         16:29:ec:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----