Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/070D98FC962C11F18262D5E8CE1D38B0.roa
File:                     070D98FC962C11F18262D5E8CE1D38B0.roa (raw, json)
Hash identifier:          bWDGiOhZqx/NMiPxMxs/Nrq5pSKkXNgZIiJUkST4oBY=
Subject key identifier:   22:F4:5D:8B:3E:32:68:28:97:C2:6C:CD:6C:62:2E:6A:2C:63:27:99
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CBDF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/070D98FC962C11F18262D5E8CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 08:58:47 +0000
ROA not before:           Wed 12 Aug 2026 08:58:43 +0000
ROA not after:            Sun 12 Aug 2029 08:58:43 +0000
asID:                     17561
IP address blocks:        45.200.192.0/24 maxlen: 24
                          45.200.193.0/24 maxlen: 24
                          45.200.194.0/24 maxlen: 24
                          45.200.195.0/24 maxlen: 24
                          45.200.196.0/24 maxlen: 24
                          45.200.197.0/24 maxlen: 24
                          45.200.198.0/24 maxlen: 24
                          45.200.199.0/24 maxlen: 24
                          45.200.200.0/24 maxlen: 24
                          45.200.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117727 (0x1cbdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 08:58:43 2026 GMT
            Not After : Aug 12 08:58:43 2029 GMT
        Subject: CN=6a7c35c7-1fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:75:1f:4b:44:3a:3a:67:54:10:25:aa:58:
                    cd:d8:0c:48:15:ea:77:e0:c3:10:eb:1b:77:e4:77:
                    4f:a3:b4:17:f8:43:7f:95:84:ed:5e:e7:b3:fa:0c:
                    74:f2:04:54:d8:6d:49:27:3b:2d:07:87:a8:10:df:
                    f2:7c:18:b2:87:e8:40:14:1b:c3:44:03:0d:d6:95:
                    cb:f6:52:51:bb:fa:36:a9:5b:bb:b4:59:68:e6:62:
                    d0:06:35:a4:1b:14:c8:eb:09:2b:5a:8d:2f:9d:cb:
                    ad:d3:07:97:08:ad:6e:79:e8:c6:95:25:01:9e:f5:
                    d9:53:19:f0:c8:65:d3:28:e8:4c:67:b8:21:ef:5f:
                    a7:b4:ad:b2:82:31:1f:09:c9:84:31:f5:40:2f:89:
                    03:aa:e1:cc:31:75:4e:be:a1:6e:97:a3:3a:d1:18:
                    cb:8e:d4:91:ab:46:46:54:54:06:49:a7:2c:9d:7e:
                    7a:a1:2b:40:58:93:da:a3:a9:bf:ab:77:ca:53:9b:
                    16:e9:cb:b1:cb:81:97:d0:7d:b2:9d:34:dd:85:39:
                    7d:b1:f0:2d:b9:1e:b2:de:62:db:7d:25:71:09:92:
                    d4:52:07:1d:b8:7f:d8:d6:d5:bb:92:5d:58:86:6f:
                    26:cc:e5:5a:02:98:c1:0b:11:98:fb:cc:83:a0:58:
                    ee:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F4:5D:8B:3E:32:68:28:97:C2:6C:CD:6C:62:2E:6A:2C:63:27:99
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/070D98FC962C11F18262D5E8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.192.0-45.200.201.255

    Signature Algorithm: sha256WithRSAEncryption
         87:71:f2:0a:79:a3:e1:65:6e:15:27:04:44:0c:6e:2f:33:b4:
         8b:61:17:4d:2a:d4:f7:fb:52:73:25:06:1a:56:c5:d2:b8:1e:
         5f:c4:d0:fa:74:e5:18:7d:2a:d8:8e:02:50:b6:6f:d3:3c:ba:
         48:2a:2e:ce:71:b0:61:5e:ce:53:d2:d3:31:cc:ca:41:d1:b6:
         5e:49:be:4f:23:19:60:01:fa:9b:0b:28:54:b4:f8:65:04:ab:
         93:23:3d:45:31:84:bf:26:98:f4:25:f1:5c:bf:44:d2:6d:0e:
         4f:be:b3:46:b3:35:aa:9a:44:3f:3d:83:2b:4c:45:ff:76:17:
         e4:fa:c5:3d:c7:1b:7e:71:3e:68:b4:5e:5c:3e:2f:6f:c1:4f:
         67:ac:70:73:5c:74:90:7b:87:63:3d:d2:c5:64:70:7a:bf:63:
         c8:c3:9d:ee:98:d5:ca:6e:f9:44:6a:7e:e7:83:76:3e:02:6b:
         61:27:f8:32:04:76:2e:35:56:9d:aa:fc:1f:c3:31:08:79:87:
         07:7e:17:d3:22:bd:c9:9d:3e:9f:94:7a:e1:1a:63:fd:48:84:
         0e:c9:cf:3e:c7:09:72:74:0b:a4:44:ea:8d:f6:be:69:a5:28:
         52:90:46:dc:95:a1:6e:52:e8:6d:fd:8b:78:25:b2:1d:07:d0:
         35:d1:fe:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----