Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/808CAF26AC1E11F1913C3BABCE1D38B0.roa
File:                     808CAF26AC1E11F1913C3BABCE1D38B0.roa (raw, json)
Hash identifier:          ZTZTu7BbaFH7B0R+WxJxCyHymWBUJorwpoUbuDBEtQ8=
Subject key identifier:   DE:44:C4:20:20:05:3B:3F:40:15:13:BA:64:DC:BD:06:62:BF:18:F1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D443
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/808CAF26AC1E11F1913C3BABCE1D38B0.roa
Signing time:             Wed 09 Sep 2026 07:17:23 +0000
ROA not before:           Wed 09 Sep 2026 07:17:19 +0000
ROA not after:            Tue 13 Oct 2026 07:17:19 +0000
asID:                     273980
IP address blocks:        45.192.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119875 (0x1d443)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  9 07:17:19 2026 GMT
            Not After : Oct 13 07:17:19 2026 GMT
        Subject: CN=6aa10803-acb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:09:5c:85:bf:8d:5e:ce:d8:8b:41:3a:9d:ed:
                    e9:3e:52:53:5c:b4:fd:27:6f:ee:ba:32:9a:6d:f1:
                    83:a6:77:2e:d8:f8:3a:40:72:16:0d:36:01:9b:c1:
                    1a:0a:3a:dd:26:ce:dd:e8:f1:8e:10:c0:bc:18:94:
                    8e:88:91:32:75:18:cc:57:96:3b:35:f0:25:e0:d1:
                    e4:34:22:55:4a:2f:d0:4e:c7:f9:37:7d:0f:1f:37:
                    08:0e:a2:16:c6:e3:7a:94:48:ee:b6:cf:b7:55:20:
                    a3:9d:1b:8a:87:c5:50:80:91:cb:f9:0d:2e:89:91:
                    a5:c4:a5:f5:a8:c6:6f:9d:dd:e8:73:7f:86:32:c6:
                    6d:64:06:cb:dd:5e:9b:ae:15:36:04:a9:b5:53:68:
                    30:7e:07:71:d7:a1:93:8b:48:cb:07:98:42:45:6f:
                    bc:02:8d:29:88:08:2b:01:3c:8f:91:28:c4:6e:d3:
                    2e:06:ab:3f:f5:8c:fb:59:28:b5:26:49:a8:2a:72:
                    85:ef:6e:73:83:21:24:e4:c4:1d:54:ff:42:45:d1:
                    ea:0e:bc:3c:20:a8:eb:09:6f:c8:b0:91:37:0f:a9:
                    d2:d6:da:d4:fe:cb:1c:4f:03:16:8d:be:77:1a:02:
                    41:1d:4b:45:a3:9c:4c:1e:4a:a0:a1:f7:6c:e3:25:
                    8a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:44:C4:20:20:05:3B:3F:40:15:13:BA:64:DC:BD:06:62:BF:18:F1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/808CAF26AC1E11F1913C3BABCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:97:03:53:ab:91:9f:49:5c:f5:b3:f7:37:dc:e5:ef:a2:f4:
         4f:23:58:1c:91:c7:82:17:75:7d:84:8c:fa:a5:6a:51:1f:56:
         c3:9f:88:46:87:36:5a:7d:32:a4:99:e6:a7:07:4b:91:75:30:
         bf:a4:b1:bd:bf:8a:db:f0:59:94:f8:c2:34:8a:1f:29:d1:31:
         9f:fc:68:b7:4b:6e:ea:ad:d0:01:99:9f:38:1f:b7:54:53:33:
         6c:dc:be:66:e0:8e:06:99:8b:f0:e9:64:80:9e:15:46:be:4a:
         07:64:57:4a:84:81:6a:14:dc:a5:d1:f0:b9:0c:fe:23:74:3d:
         b9:d6:ad:b7:5d:c9:f5:b2:0b:40:58:ff:67:8b:c4:69:53:d4:
         d8:22:18:d1:dd:cf:4c:48:8e:eb:1b:1e:5c:0d:23:18:f0:76:
         1a:21:bd:c3:82:75:8c:94:c8:b7:57:65:0e:15:d8:1b:83:b7:
         89:58:27:2d:58:4a:43:1a:e4:cd:7f:5d:73:e1:db:b4:12:e9:
         f2:fa:10:27:bc:e3:1e:d0:0a:bf:a1:13:b9:7a:5e:3e:ae:98:
         f0:46:22:fb:ce:f0:66:d2:03:89:af:54:05:7e:ff:6f:8e:4c:
         f3:a9:9a:58:48:ab:ff:8b:9f:10:00:bc:b1:23:90:f1:dc:2a:
         f3:99:05:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----