Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC3DFA82BE3411F1930005F1CE1D38B0.roa
File:                     DC3DFA82BE3411F1930005F1CE1D38B0.roa (raw, json)
Hash identifier:          bW0Vlf7fJZhkKzkAu0ym2AI575TGxw81s6j9ebpwEeA=
Subject key identifier:   45:41:B4:AF:F4:97:89:72:40:D4:24:A0:0B:C4:9C:1A:D5:6C:BB:7F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D9FF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC3DFA82BE3411F1930005F1CE1D38B0.roa
Signing time:             Fri 02 Oct 2026 07:42:47 +0000
ROA not before:           Fri 02 Oct 2026 07:42:43 +0000
ROA not after:            Tue 10 Nov 2026 07:42:43 +0000
asID:                     274273
IP address blocks:        45.194.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121343 (0x1d9ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  2 07:42:43 2026 GMT
            Not After : Nov 10 07:42:43 2026 GMT
        Subject: CN=6abf6077-7e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c8:08:7c:bb:11:3f:83:1e:21:d1:ed:f6:e4:
                    ba:4f:f9:f7:f0:c3:78:64:75:69:70:36:fe:56:ad:
                    05:f5:73:f0:85:6a:8b:f4:a2:13:38:a4:b6:a3:a8:
                    47:30:b8:36:63:06:ce:27:dd:02:47:d6:c2:d1:7e:
                    a0:3a:03:5d:3b:4a:26:9c:ad:ae:b5:c6:dc:d6:87:
                    42:b6:f0:d7:d0:1a:a9:46:49:66:04:b8:be:05:bd:
                    98:0f:1c:d4:0e:94:95:c7:c2:5a:1e:47:73:5b:2e:
                    96:9f:72:5c:ed:c5:d5:e2:eb:3b:e6:8a:79:17:a0:
                    3a:08:92:ad:98:4d:a5:27:95:6e:e2:48:da:81:a2:
                    55:bc:11:17:81:8a:3c:e9:b3:c6:98:9c:92:85:ff:
                    0c:4e:73:b0:2b:7f:d9:97:ce:0d:59:1a:59:7a:33:
                    25:4c:80:b7:e2:73:d5:b5:89:e8:92:73:26:2b:37:
                    f3:3f:02:c7:67:b8:e7:0a:39:e3:8d:6c:08:38:69:
                    0d:4f:e8:41:22:6e:28:52:50:ba:89:0b:11:a4:3d:
                    44:fe:3a:5c:2d:7a:0e:f2:bd:a3:f9:ab:1f:a5:55:
                    59:04:61:59:d8:5c:bf:e0:aa:f0:d6:e9:5b:74:68:
                    aa:db:8e:7e:93:ad:33:c9:ed:90:3b:bc:46:99:78:
                    ac:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:41:B4:AF:F4:97:89:72:40:D4:24:A0:0B:C4:9C:1A:D5:6C:BB:7F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC3DFA82BE3411F1930005F1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:fb:2c:18:73:65:f4:65:ff:87:26:2a:ca:ab:9d:95:1e:20:
         43:e6:03:2b:56:58:c8:74:df:d2:07:dd:89:89:22:c9:32:aa:
         01:1a:68:9c:eb:ab:f2:b5:3c:34:69:99:fd:c3:2b:35:d3:67:
         52:51:ea:71:f5:f8:b5:32:6e:36:75:3d:ae:f0:d9:9d:a4:f5:
         f2:2d:89:e6:16:c1:55:3f:a0:e0:2e:2e:48:74:10:55:9e:c9:
         67:a8:7d:fc:3f:36:6d:23:f0:41:6f:4f:f5:9f:c2:00:5b:32:
         de:2d:9e:46:67:ad:65:c7:6e:98:3e:8f:74:4a:e1:3c:7b:24:
         a7:27:31:23:fc:c0:d3:6f:76:c7:98:9b:96:c0:d9:56:b5:af:
         21:55:79:0a:26:1d:fc:e8:ff:2b:3f:32:ed:e1:ce:ca:fd:9a:
         09:59:10:f6:d3:da:15:a5:92:26:76:f7:43:ff:b8:05:3a:f2:
         74:1c:42:8e:19:f9:7e:2a:10:91:75:79:dd:46:a2:57:a0:c5:
         ca:d5:59:21:e0:32:7f:63:77:6f:07:bf:fe:21:95:ca:b5:66:
         d2:f5:6f:90:5f:f6:d8:74:b1:c4:b1:66:e3:6e:68:b0:21:24:
         2a:0b:72:29:69:2f:bd:41:91:02:b2:ef:dc:24:e5:5d:64:a0:
         7d:7f:8b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----