Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0845CB62AC2B11F18ABA54F2CE1D38B0.roa
File:                     0845CB62AC2B11F18ABA54F2CE1D38B0.roa (raw, json)
Hash identifier:          UytiYpH5STpulugaS+FMnVkN/C9WgiBesDNP5dUeM8U=
Subject key identifier:   2E:DD:A8:BE:81:F6:0D:7B:0E:87:31:3D:4E:C9:90:28:A8:46:16:72
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D462
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0845CB62AC2B11F18ABA54F2CE1D38B0.roa
Signing time:             Wed 09 Sep 2026 08:47:05 +0000
ROA not before:           Wed 09 Sep 2026 08:47:01 +0000
ROA not after:            Sat 19 Sep 2026 08:47:01 +0000
asID:                     134365
IP address blocks:        45.197.144.0/21 maxlen: 24
                          45.197.144.0/24 maxlen: 24
                          45.197.145.0/24 maxlen: 24
                          45.197.146.0/24 maxlen: 24
                          45.197.147.0/24 maxlen: 24
                          45.197.148.0/24 maxlen: 24
                          45.197.149.0/24 maxlen: 24
                          45.197.150.0/24 maxlen: 24
                          45.197.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119906 (0x1d462)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  9 08:47:01 2026 GMT
            Not After : Sep 19 08:47:01 2026 GMT
        Subject: CN=6aa11d09-cc7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e0:c9:9d:ca:e6:b6:c4:4a:67:55:f8:b7:93:
                    29:7c:fa:b5:07:14:7e:51:09:01:c7:8c:f7:0c:41:
                    48:95:01:9d:e8:9b:56:f2:a7:9c:2f:44:9e:8b:c0:
                    3e:a7:c3:14:d0:ce:8f:3f:20:ae:b6:b6:fe:f4:a5:
                    fe:1f:0d:34:98:f1:26:41:32:74:ee:08:ad:83:35:
                    5d:cf:89:7e:9a:19:e3:31:74:c0:e9:a9:58:1f:28:
                    eb:6d:3f:85:95:61:7c:9d:40:02:46:5b:80:fa:ea:
                    47:a3:26:33:ca:10:cc:0c:95:00:12:36:0c:b3:45:
                    87:f9:83:7c:a1:d1:e6:d3:bc:ed:e8:0d:df:f0:50:
                    40:83:f5:1f:45:0a:5c:2b:89:af:02:96:3f:d8:35:
                    31:d3:f9:0a:b6:b5:62:5f:59:e3:6d:21:a8:0f:45:
                    d7:4b:73:f6:49:25:7c:57:9b:01:f6:6e:51:be:a8:
                    af:71:cb:aa:ff:bf:03:43:b3:d5:83:fa:02:4c:4c:
                    48:de:bd:e6:0c:8d:d4:9e:03:9d:25:35:d0:bf:32:
                    1b:a9:50:dd:38:bd:a2:e8:d1:f7:62:d3:a5:9b:a5:
                    1c:f3:7e:71:d3:89:49:68:83:2d:d1:1a:db:c7:5f:
                    b7:e5:e3:90:1d:3c:37:6d:c5:d9:d3:c5:1b:80:a4:
                    bd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DD:A8:BE:81:F6:0D:7B:0E:87:31:3D:4E:C9:90:28:A8:46:16:72
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0845CB62AC2B11F18ABA54F2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4f:63:d6:e1:44:f0:6d:d3:d9:fd:f1:25:14:f8:72:f0:66:14:
         ce:17:6e:a5:58:1a:97:0f:0c:91:10:74:7d:73:18:6c:85:85:
         c5:53:5e:d1:61:28:3c:3d:0d:2c:67:fb:85:0c:1f:7d:ee:fa:
         f2:d1:cf:4f:f0:89:e5:e1:02:b8:d4:b5:af:fb:b1:0d:2b:8e:
         14:06:48:b0:62:74:e9:4f:bf:b8:02:b8:dd:87:43:06:ca:e6:
         e2:c2:4a:6b:64:31:17:0d:a7:56:3b:8c:44:0a:d4:2b:79:0e:
         cc:e0:57:a8:a5:3f:f5:1a:a6:09:a6:26:16:07:4f:1f:82:d2:
         c3:51:f5:15:f7:61:f9:69:b3:5d:db:17:13:ce:b0:d1:cb:1d:
         c6:54:7e:6d:93:9e:73:0b:cb:7c:85:22:98:09:0f:bd:0c:12:
         c5:b5:01:f9:ba:cf:0a:9d:d7:7f:a6:15:30:87:74:8f:29:86:
         21:08:b9:36:20:6c:e9:07:38:bb:a7:ba:ee:3c:15:f6:43:8b:
         e1:64:43:e8:61:8e:2a:8d:02:86:77:6a:1d:37:0c:68:24:52:
         04:55:4b:52:af:41:31:7e:ad:37:bb:2d:fc:0b:94:d2:bf:c1:
         d2:8e:98:5a:9f:5c:b6:87:f2:9c:06:8c:6c:96:89:8a:80:97:
         b2:e0:65:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----