Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/005DDF529BA011F189084D01CF1D38B0.roa
File:                     005DDF529BA011F189084D01CF1D38B0.roa (raw, json)
Hash identifier:          IMsCUfFVbYzvlzsY1UjS/22czkn5RegbYze1rV2b6dM=
Subject key identifier:   6B:5B:4D:4E:B9:6F:BA:B5:83:F9:71:B5:7B:38:C2:B0:20:6C:A6:86
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE24
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/005DDF529BA011F189084D01CF1D38B0.roa
Signing time:             Wed 19 Aug 2026 07:31:33 +0000
ROA not before:           Wed 19 Aug 2026 07:31:28 +0000
ROA not after:            Sun 08 Nov 2026 07:31:28 +0000
asID:                     149014
IP address blocks:        45.192.160.0/22 maxlen: 24
                          45.192.160.0/24 maxlen: 24
                          45.192.172.0/22 maxlen: 24
                          45.192.176.0/24 maxlen: 24
                          45.192.177.0/24 maxlen: 24
                          45.192.178.0/23 maxlen: 24
                          45.192.180.0/22 maxlen: 24
                          45.192.184.0/22 maxlen: 24
                          45.192.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118308 (0x1ce24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 19 07:31:28 2026 GMT
            Not After : Nov  8 07:31:28 2026 GMT
        Subject: CN=6a855bd5-1430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:04:68:e4:42:bf:c3:15:69:43:47:d6:e2:25:
                    9d:48:53:70:19:16:eb:4e:13:cb:b7:f3:8e:f5:e8:
                    d0:78:98:ba:d4:95:22:b1:c2:5a:11:df:a8:41:e2:
                    12:02:0f:12:6d:32:fe:61:b0:b9:c6:d9:27:82:01:
                    a3:1f:ae:62:16:3d:d5:93:21:e4:16:61:93:db:cc:
                    a2:f7:6b:af:61:7f:2b:3a:b1:f3:98:46:dd:3b:b6:
                    f7:01:d9:e9:75:1c:71:62:39:7e:6f:06:6d:96:f1:
                    07:49:f4:20:2e:60:c8:ff:71:72:f9:d9:c7:23:f0:
                    50:3c:c2:35:18:44:c8:70:be:02:3d:e2:3d:9d:82:
                    dd:35:6e:96:5d:ba:67:13:05:9b:ee:8c:65:b3:cd:
                    fa:c8:b6:65:52:53:36:9c:28:9d:c5:95:f8:e2:0d:
                    21:1f:09:b9:90:7c:f0:bf:3a:df:83:15:6b:8f:f7:
                    2c:0e:8f:b9:19:bd:a3:fc:0b:ad:bd:9b:ff:96:c0:
                    f2:22:08:b3:00:c2:40:0c:e0:4c:b5:b3:27:2d:4c:
                    d8:c2:69:91:99:25:36:66:a6:89:1d:24:a0:69:45:
                    e0:91:37:53:0e:8b:6a:d0:cb:cb:76:77:7b:e2:35:
                    38:f0:3d:74:94:b0:14:07:92:cc:29:2a:9f:d9:c3:
                    7e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5B:4D:4E:B9:6F:BA:B5:83:F9:71:B5:7B:38:C2:B0:20:6C:A6:86
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/005DDF529BA011F189084D01CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.160.0/22
                  45.192.172.0-45.192.191.255

    Signature Algorithm: sha256WithRSAEncryption
         28:79:35:bc:4e:76:bf:70:b2:f6:ee:f3:6b:78:b5:50:fc:d9:
         f8:ae:57:c1:00:d0:69:90:b8:74:7b:7b:9c:00:0c:2a:8f:12:
         a1:ce:82:1e:7f:39:37:93:b2:bd:60:11:d3:f4:a7:bd:e8:46:
         6a:7a:64:a5:1e:41:71:05:c8:6c:7b:a2:35:49:db:85:bd:00:
         e5:34:34:af:54:b0:09:d2:3d:e8:9a:58:dc:0a:b5:12:91:4e:
         8a:29:50:7c:f4:24:7c:19:7c:11:53:01:00:21:bb:04:0d:5c:
         c3:59:bb:71:6d:42:50:29:57:f4:a4:07:d2:eb:43:73:b1:f5:
         58:af:ce:24:c6:2d:c3:6e:ce:ad:b8:bd:85:7f:25:ab:db:cd:
         85:0c:e4:50:d5:19:29:60:58:5a:22:99:4a:ad:81:94:02:cf:
         39:9c:b9:9d:9b:7b:8f:2c:42:71:88:ad:28:61:f3:5a:21:45:
         0b:d0:30:33:17:fe:2a:a1:15:92:a7:30:17:2d:0a:b3:45:37:
         04:bb:f4:52:9c:73:43:13:05:08:a5:85:12:3a:28:a8:f9:57:
         0c:f2:dc:1d:5e:a5:15:66:b5:19:69:f4:74:dc:4c:59:69:96:
         82:08:03:a0:d1:5d:e6:20:58:aa:16:2d:38:73:1f:b6:41:e6:
         fa:7c:00:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----