Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09D8A9CEA06C11F1B2D434D4CE1D38B0.roa
File:                     09D8A9CEA06C11F1B2D434D4CE1D38B0.roa (raw, json)
Hash identifier:          DLut/ylrcVYDBDOwS+crzSopTFp2pukSGMkDLS42T60=
Subject key identifier:   F9:8C:F7:6B:B8:4B:67:B9:C1:0D:38:CC:F2:77:FE:B0:42:A9:4F:4C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D0D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09D8A9CEA06C11F1B2D434D4CE1D38B0.roa
Signing time:             Tue 25 Aug 2026 10:02:11 +0000
ROA not before:           Tue 25 Aug 2026 10:02:07 +0000
ROA not after:            Mon 30 Aug 2027 10:02:07 +0000
asID:                     138995
IP address blocks:        45.192.168.0/24 maxlen: 24
                          45.192.170.0/24 maxlen: 24
                          45.192.171.0/24 maxlen: 24
                          45.192.226.0/24 maxlen: 24
                          45.207.4.0/24 maxlen: 24
                          45.207.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 28 Aug 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118996 (0x1d0d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 25 10:02:07 2026 GMT
            Not After : Aug 30 10:02:07 2027 GMT
        Subject: CN=6a8d6823-5997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:80:ee:32:a3:5c:fe:c5:cf:ba:67:8a:60:64:
                    e3:ff:b9:33:a3:fe:2c:b5:4e:13:20:0d:e7:c7:b5:
                    d3:da:98:5e:b9:b0:4e:8a:ed:00:2f:66:3e:3a:0c:
                    c4:43:9c:3e:71:7d:a7:65:d0:c3:bb:70:0a:c6:92:
                    07:3c:cd:46:fb:b5:62:94:26:9e:a2:c3:33:e0:e4:
                    47:8a:ce:27:51:78:75:58:19:6c:5e:37:12:7e:5a:
                    81:55:6d:b3:e6:f6:f6:e1:ed:28:d3:82:31:c3:70:
                    eb:9f:0f:7c:99:40:4c:fb:b5:10:a3:ac:92:b8:28:
                    5d:5c:eb:80:b8:80:3d:64:b2:ee:82:b6:18:ef:aa:
                    c1:6d:e6:4c:12:da:ff:99:4d:98:7e:4e:59:d4:18:
                    24:b9:47:0d:56:ed:be:09:1d:74:49:bd:82:6d:e8:
                    eb:e1:cd:1e:36:29:f1:38:c2:03:eb:34:45:c0:6b:
                    3d:fd:81:a4:b2:5f:cc:cb:44:15:90:31:1f:2e:ff:
                    08:62:f6:a2:c3:36:06:02:a0:87:52:94:3f:a8:c2:
                    16:e5:73:93:e0:6b:86:1c:25:ec:5f:30:47:b4:36:
                    d4:ba:c7:8f:63:19:55:08:06:89:77:62:87:e7:42:
                    70:8b:d6:80:c5:11:1e:c3:e2:cc:87:34:a3:89:ae:
                    f6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8C:F7:6B:B8:4B:67:B9:C1:0D:38:CC:F2:77:FE:B0:42:A9:4F:4C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09D8A9CEA06C11F1B2D434D4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.168.0/24
                  45.192.170.0/23
                  45.192.226.0/24
                  45.207.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:5e:64:3e:45:c6:6b:bb:f5:d7:74:0c:6e:3c:81:b8:92:8e:
         1c:4a:86:c0:a7:af:5d:0e:8f:7b:09:6f:a9:97:a3:d9:e5:2b:
         00:6d:bb:4a:e4:54:05:26:99:a3:46:ca:fb:5c:64:31:61:54:
         29:0b:74:8b:b8:4a:7a:31:ed:22:7a:9c:3b:d3:5b:92:a9:34:
         ae:1a:28:d6:c3:10:60:d3:94:38:f1:f1:a1:b2:ca:80:f4:0a:
         d4:2b:2e:28:61:c3:af:4f:df:95:91:5c:54:fe:1c:08:d2:0e:
         59:91:36:3f:24:60:5a:0e:49:bf:60:45:06:6a:57:91:40:c5:
         92:d4:6f:12:81:55:35:80:01:7d:58:01:60:5a:e8:fe:f9:b9:
         ad:b3:58:23:bb:7f:1f:27:fc:c0:9e:d7:fe:24:22:f2:56:80:
         31:97:13:ff:af:f4:03:1f:36:22:82:3d:0d:64:0a:2d:f7:93:
         f9:cf:4a:5a:a0:53:d5:72:de:87:46:68:78:2c:a2:8d:21:c4:
         d3:d2:6b:e0:3e:a0:2f:1c:3f:29:74:f6:d8:30:d9:16:b4:8b:
         9c:4d:3e:3e:4f:e2:47:9d:1f:8b:f1:b4:98:71:9d:5a:21:b6:
         ac:00:f7:7f:24:0c:1c:ee:d0:fb:92:86:0d:f5:e2:38:8d:f6:
         5f:bd:1d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----