Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9FBD56EB5A311F1B6A81409CF1D38B0.roa
File:                     B9FBD56EB5A311F1B6A81409CF1D38B0.roa (raw, json)
Hash identifier:          qFg5V3nwTA34PCeBER73xi2usP9ngCzZuJIy+CGFfKU=
Subject key identifier:   95:17:80:A1:F9:F6:0C:13:6C:B1:2D:1E:13:7D:2B:07:DC:7B:32:83
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D796
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9FBD56EB5A311F1B6A81409CF1D38B0.roa
Signing time:             Mon 21 Sep 2026 10:03:43 +0000
ROA not before:           Mon 21 Sep 2026 10:03:39 +0000
ROA not after:            Fri 16 Oct 2026 10:03:39 +0000
asID:                     216211
IP address blocks:        45.192.196.0/22 maxlen: 24
                          45.192.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120726 (0x1d796)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 21 10:03:39 2026 GMT
            Not After : Oct 16 10:03:39 2026 GMT
        Subject: CN=6ab100ff-0718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3f:3e:15:22:e4:55:2f:f8:f0:fc:43:87:89:
                    7f:3d:cc:53:c1:9d:5a:1d:94:38:35:4e:31:40:67:
                    ff:cf:83:ab:2f:ec:38:eb:00:43:ba:e1:20:50:94:
                    bd:55:3a:02:5a:84:f4:36:8d:bf:24:31:df:c5:5d:
                    b0:25:37:10:60:86:d0:ae:e6:f7:2d:2d:b0:56:b0:
                    c7:88:80:df:53:bb:58:d6:36:26:d0:b9:01:a1:32:
                    4d:96:d8:7a:ef:df:94:56:65:39:73:5e:16:bc:75:
                    a1:48:bc:67:b5:49:5d:59:20:3c:aa:7d:d0:b0:2d:
                    76:33:63:d6:1d:5e:f0:b4:18:79:14:8a:00:39:dd:
                    9f:59:89:60:52:fe:72:36:4b:61:91:9b:74:d9:0f:
                    b4:46:83:d9:67:c3:99:c8:57:7b:73:87:54:ea:ac:
                    fb:c0:8a:de:54:e9:c2:0a:3d:a5:8c:44:09:63:73:
                    54:37:60:c9:69:fb:de:8f:20:14:dd:81:7c:be:3b:
                    49:dd:7a:4b:fe:de:32:47:a8:a3:4a:76:59:4c:0a:
                    f0:7f:a3:74:43:7c:27:15:c4:50:e9:38:c6:13:c7:
                    73:cd:42:33:fa:d1:82:ae:79:aa:26:d6:33:a2:e5:
                    90:80:d1:32:28:a8:a0:ca:eb:0e:36:4b:e6:49:a4:
                    53:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:17:80:A1:F9:F6:0C:13:6C:B1:2D:1E:13:7D:2B:07:DC:7B:32:83
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9FBD56EB5A311F1B6A81409CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.196.0-45.192.203.255

    Signature Algorithm: sha256WithRSAEncryption
         6d:99:db:39:bb:2b:a3:9c:c6:c7:a0:79:4f:d3:79:a6:08:1e:
         63:64:53:ce:cb:06:43:1b:1c:6c:ac:9b:a9:27:1c:fd:54:cd:
         a9:1b:1c:79:15:46:c2:9b:f8:19:8e:8d:0d:65:b9:97:7f:27:
         5e:7a:16:f6:2f:47:3f:46:3b:71:c2:dd:cd:97:89:fa:33:dd:
         08:b1:09:a7:55:b1:50:3e:20:da:21:d0:40:3c:e0:15:3e:99:
         04:bd:76:b7:5b:bb:77:9c:e9:9a:7b:95:d3:4d:b7:85:01:34:
         a7:91:2e:eb:d3:07:2f:e2:53:5b:2f:73:7c:fb:79:95:3d:33:
         49:be:e9:3d:59:79:1d:69:1f:b7:13:40:12:ea:17:7d:5c:a8:
         54:9e:b5:d9:f0:e1:e6:c5:39:a5:55:d1:ba:2d:26:87:64:c8:
         20:89:a1:c7:0f:dc:0b:6c:0f:46:ea:81:00:64:10:eb:7c:80:
         1f:a5:a0:63:e9:04:b5:98:50:7e:ab:7c:a5:5d:37:b8:17:ca:
         6a:68:84:60:8c:98:23:69:14:f4:80:c9:c7:a4:86:f8:77:62:
         54:19:cb:eb:5e:ee:c7:1e:b0:e2:64:32:a1:bc:5b:5b:e7:fa:
         74:ef:77:9f:25:4a:f5:ad:d3:32:e6:55:db:f7:a8:59:20:08:
         61:5d:da:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----