Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9222224B5A411F1A0E11012CF1D38B0.roa
File:                     F9222224B5A411F1A0E11012CF1D38B0.roa (raw, json)
Hash identifier:          m6x1WswyCg53IbhqMEKbOi3YYJQ5wWXWdoTdLQMVh58=
Subject key identifier:   82:C4:31:A8:DC:57:AC:46:CA:2D:02:4E:7F:5B:5B:64:C9:62:B6:DD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D79E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9222224B5A411F1A0E11012CF1D38B0.roa
Signing time:             Mon 21 Sep 2026 10:12:39 +0000
ROA not before:           Mon 21 Sep 2026 10:12:35 +0000
ROA not after:            Sat 10 Oct 2026 10:12:35 +0000
asID:                     216211
IP address blocks:        45.192.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 00:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120734 (0x1d79e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 21 10:12:35 2026 GMT
            Not After : Oct 10 10:12:35 2026 GMT
        Subject: CN=6ab10317-948b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8b:d9:10:be:04:d1:25:f2:6d:e9:23:62:73:
                    2e:7c:6d:97:5f:ed:38:be:bf:31:54:9f:82:5c:18:
                    fb:17:19:fe:5d:f6:2a:cc:9c:a4:9a:ed:86:e4:55:
                    1d:3d:37:c2:db:35:91:ee:ed:63:b9:f8:64:34:7b:
                    60:ea:c4:4b:eb:ef:7f:38:6b:f0:90:37:31:1d:c5:
                    19:d3:b1:66:9f:4e:63:99:e7:cc:de:db:b5:01:43:
                    a2:af:84:2c:ad:04:5c:b3:35:fe:bd:82:66:4e:0b:
                    be:c2:14:f0:72:1e:44:7e:bc:63:b2:2c:f2:87:ea:
                    11:16:94:37:14:b3:ec:b3:09:53:ad:b8:43:10:bb:
                    af:6b:72:bd:4b:cb:36:f8:b3:0d:4d:e1:b0:92:32:
                    c2:e6:dc:05:c0:c5:ce:9b:06:1f:82:14:a3:cc:af:
                    55:1c:7a:0f:ea:ff:a7:33:a6:40:e2:65:5e:07:08:
                    68:16:fe:d7:0e:be:05:db:2a:6e:96:84:f9:0f:29:
                    e6:33:61:a0:06:10:96:45:7f:9c:b1:d9:48:ba:e4:
                    27:4d:be:33:ba:3d:76:67:cf:0b:12:3c:f7:f2:2a:
                    a0:89:a0:39:cc:1e:83:20:c2:3e:88:ce:2b:d0:19:
                    a9:33:90:c2:31:ed:9b:84:20:c9:1a:85:06:c6:fb:
                    80:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C4:31:A8:DC:57:AC:46:CA:2D:02:4E:7F:5B:5B:64:C9:62:B6:DD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9222224B5A411F1A0E11012CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:72:48:3b:5e:f2:eb:63:e5:8b:3e:4a:db:39:89:6b:86:d8:
         07:90:38:34:c0:f4:66:ae:8a:dd:2e:92:bd:cd:2e:c6:b5:e3:
         8c:7e:6f:14:ff:85:0e:60:c2:40:34:59:c2:8a:af:19:4a:f8:
         45:87:8b:2c:e4:b4:35:c1:f0:d9:8e:cf:2e:da:97:8a:c8:7c:
         4c:62:ab:d4:c7:a9:73:a0:cb:f4:0f:82:93:0e:0d:7d:3c:06:
         4d:a9:c0:cf:43:a4:ab:81:8d:19:f4:d4:92:67:49:e6:eb:d4:
         5f:00:b8:00:78:ca:1b:72:05:a5:26:0b:c6:14:72:ea:79:53:
         34:8b:cb:51:89:ee:72:88:cb:a1:e5:7b:ee:1f:5a:84:42:27:
         28:18:5c:09:a2:c3:ca:67:31:45:b0:dd:cf:c7:96:21:1a:df:
         fe:bd:6f:a1:0b:38:55:79:85:e3:c0:d3:ee:96:7d:c4:cc:f9:
         72:d1:e0:53:5c:85:f7:82:43:0c:ce:a5:c3:d5:6b:6d:5d:78:
         83:99:58:37:f7:1d:a7:60:02:28:24:fa:05:9e:f3:d2:1a:d6:
         61:2b:b2:6d:73:d8:7f:8a:d5:71:d4:7b:d8:9b:d5:4c:56:eb:
         97:10:8b:d1:36:5d:94:4d:3d:68:6b:34:dd:ed:6b:98:fd:32:
         94:f3:89:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----