Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FDA68F8D9DA11F1931BC1B4CE1D38B0.roa
File:                     8FDA68F8D9DA11F1931BC1B4CE1D38B0.roa (raw, json)
Hash identifier:          KBetpmM98c77obAwFDBYfQshgjYp6yqYLcmwzauorQI=
Subject key identifier:   82:02:D9:C9:C7:4E:F1:CB:C7:91:27:E1:C9:32:D5:84:53:E1:8C:28
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01E376
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FDA68F8D9DA11F1931BC1B4CE1D38B0.roa
Signing time:             Fri 06 Nov 2026 12:06:57 +0000
ROA not before:           Fri 06 Nov 2026 12:06:51 +0000
ROA not after:            Sun 13 Dec 2026 12:06:51 +0000
asID:                     155051
IP address blocks:        45.197.192.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123766 (0x1e376)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  6 12:06:51 2026 GMT
            Not After : Dec 13 12:06:51 2026 GMT
        Subject: CN=6aedc2e1-b798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:27:e1:12:95:cd:09:ce:97:a0:1b:58:a0:bb:
                    98:0d:54:c3:b5:98:10:ab:da:3f:b9:84:73:1b:c0:
                    97:8f:f7:b2:c6:27:70:8c:4c:df:04:79:23:dc:2e:
                    44:4b:9d:b8:90:49:91:d7:62:42:5e:cc:f0:0f:17:
                    ff:5e:fd:80:a9:d1:ed:d5:3f:ed:dd:3f:77:33:82:
                    83:b8:a9:ee:35:e7:93:69:72:ee:d7:c2:bf:d0:3c:
                    6c:a4:8d:22:43:34:92:d4:90:a0:ed:3f:67:cc:22:
                    1d:a6:23:5b:5f:55:9a:77:9b:7c:63:da:4a:94:29:
                    67:a4:22:03:ad:d4:46:69:48:61:8c:ac:b5:d8:32:
                    b2:1b:44:44:7d:a7:3a:60:cc:67:38:d2:3b:ec:73:
                    ee:b9:c7:bd:72:76:c9:b4:d7:26:61:09:e4:24:d4:
                    2d:bd:46:94:c5:b9:fb:e9:0d:13:c8:18:d9:f7:f9:
                    29:29:29:7c:c6:d0:47:20:14:85:d1:6c:33:3c:2a:
                    67:34:f5:5e:eb:16:00:27:0f:fa:7c:e3:7a:43:ac:
                    b0:d6:1f:0a:fc:f5:ef:ca:85:e3:7e:c4:9e:95:8f:
                    1c:48:17:e8:48:79:68:3e:63:9e:2e:17:c8:81:53:
                    3f:5e:ea:22:d1:63:6d:e5:7f:13:e2:6d:8c:54:5e:
                    8c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:02:D9:C9:C7:4E:F1:CB:C7:91:27:E1:C9:32:D5:84:53:E1:8C:28
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8FDA68F8D9DA11F1931BC1B4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:99:55:da:73:99:fd:54:02:24:07:31:09:85:a2:de:6d:be:
         59:2d:a6:cd:5d:86:e3:dd:17:da:f1:4b:7b:0c:1b:7c:5a:80:
         95:68:ad:0d:f7:76:31:bf:22:16:fd:7b:bc:25:0c:dd:fb:2a:
         19:35:49:19:06:26:fd:df:bf:e0:65:37:0a:da:fc:18:bc:a5:
         45:a3:62:a9:16:ba:06:a7:a4:ac:e6:7b:97:a8:fd:ff:2c:a8:
         99:06:f6:28:20:d7:49:bc:f2:66:10:da:63:09:67:c9:e0:3f:
         38:3f:28:d3:67:23:12:f8:34:28:a1:ff:57:99:a9:6f:4d:a8:
         4c:e4:ab:2a:d5:b9:3e:e2:76:be:71:39:26:02:8b:e3:af:7e:
         48:82:fc:75:78:f7:90:ba:68:f1:d9:6b:94:00:3a:63:5e:17:
         0c:43:47:1d:13:7d:8e:eb:e1:b9:d2:37:2b:de:f5:7f:95:e8:
         3a:27:81:9e:ad:6f:c2:33:ba:2a:cb:e6:b7:e8:f4:a0:85:ce:
         44:fe:88:91:7f:fc:bb:c2:74:7a:46:11:86:1a:93:94:b6:73:
         35:88:0b:39:50:37:ab:53:4d:b0:13:49:45:c4:a1:b0:47:f4:
         3e:e4:0a:7b:48:ac:1b:ba:36:87:9d:60:67:16:e2:62:42:c3:
         75:77:11:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----