Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13C4486EBE3811F19D9FD604CF1D38B0.roa
File:                     13C4486EBE3811F19D9FD604CF1D38B0.roa (raw, json)
Hash identifier:          BNiDEBZML6RovXv9eSRpXOiwtphddlNWJEj575yySdA=
Subject key identifier:   7A:09:0A:FF:05:CD:49:BC:E0:80:7B:AC:B3:B3:14:6F:59:52:6F:D2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA10
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13C4486EBE3811F19D9FD604CF1D38B0.roa
Signing time:             Fri 02 Oct 2026 08:05:49 +0000
ROA not before:           Fri 02 Oct 2026 08:05:45 +0000
ROA not after:            Mon 09 Nov 2026 08:05:45 +0000
asID:                     44559
IP address blocks:        45.204.65.0/24 maxlen: 24
                          45.204.73.0/24 maxlen: 24
                          45.204.75.0/24 maxlen: 24
                          45.207.149.0/24 maxlen: 24
                          45.207.150.0/24 maxlen: 24
                          45.207.151.0/24 maxlen: 24
                          45.207.160.0/24 maxlen: 24
                          45.207.161.0/24 maxlen: 24
                          45.207.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121360 (0x1da10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  2 08:05:45 2026 GMT
            Not After : Nov  9 08:05:45 2026 GMT
        Subject: CN=6abf65dd-2a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ac:5a:66:0a:6a:bd:d5:3c:b4:66:f8:eb:c6:
                    8c:59:f1:16:8c:57:0f:dd:6e:ce:ba:84:d8:21:73:
                    5e:4c:4e:43:5f:e5:aa:72:8b:48:58:b6:74:59:d3:
                    4a:0b:99:94:6f:ca:5e:3c:ef:27:99:30:e8:78:be:
                    07:41:12:d6:7c:60:57:ef:77:f1:01:ad:c0:cd:d0:
                    06:a1:60:84:8b:c0:fa:1b:80:2c:be:da:f9:bc:8b:
                    1e:05:05:59:c1:99:f1:8d:bd:b5:d6:89:95:a5:c7:
                    b1:0d:91:e4:4c:e2:43:47:52:74:b7:c9:55:b1:c3:
                    f8:ed:21:f0:18:79:b5:ee:6d:fc:5e:fb:8f:1f:39:
                    9f:f2:c4:c3:3d:50:29:28:a5:e3:f7:68:f7:f2:a5:
                    75:e7:7d:ee:68:32:73:fc:69:10:c0:9b:55:8f:35:
                    c8:2c:b1:53:27:2c:36:68:e8:b3:60:53:66:9b:91:
                    bd:c0:65:db:d3:4e:49:39:00:bb:a9:b8:b0:08:34:
                    e7:5b:76:bb:75:97:c5:16:14:bb:53:38:3b:7d:ac:
                    f2:a3:24:88:46:0b:53:f9:1a:86:49:66:4e:f8:8e:
                    a9:83:ad:5d:f2:df:9e:0b:f8:b8:2c:84:56:ae:7a:
                    31:a7:75:38:75:ff:6f:4e:4c:1e:6e:87:c6:fb:55:
                    cf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:09:0A:FF:05:CD:49:BC:E0:80:7B:AC:B3:B3:14:6F:59:52:6F:D2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13C4486EBE3811F19D9FD604CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.65.0/24
                  45.204.73.0/24
                  45.204.75.0/24
                  45.207.149.0-45.207.151.255
                  45.207.160.0-45.207.162.255

    Signature Algorithm: sha256WithRSAEncryption
         97:d2:98:bf:e9:bf:3a:63:a2:a2:12:22:f0:14:de:a0:2c:f3:
         2d:10:ee:9a:80:54:2e:80:f2:03:5d:9d:0e:dd:9a:5f:15:84:
         27:39:01:fa:73:b1:e7:2a:83:fb:95:dd:4d:96:c6:68:90:7f:
         16:33:b7:61:b7:e6:85:98:59:1f:04:00:bd:ba:99:d2:2e:4f:
         2c:c0:10:3b:03:27:9e:c7:6e:bc:a9:4a:3f:44:a8:08:07:ef:
         d0:eb:42:39:98:4f:29:ff:1c:ff:2b:6e:72:2f:0b:91:b5:bb:
         93:1c:b1:f1:51:3b:5c:3f:08:37:82:f2:22:b5:9c:93:3b:e7:
         af:bd:5c:a3:1e:dc:65:3f:18:08:58:05:64:5c:67:47:88:b9:
         a4:53:7c:0b:9d:d7:3f:62:a3:6e:b7:39:76:83:08:1c:be:92:
         33:22:47:c4:fa:a7:ca:5e:c6:ac:dc:51:9c:13:4b:53:28:d8:
         6e:a7:33:7e:fb:34:92:b0:0f:ef:cf:c6:b8:b8:c1:1b:69:84:
         8c:81:ed:04:dc:cb:df:bb:27:53:22:60:2b:da:cd:fb:73:6b:
         e0:ee:54:a2:ec:42:3c:33:42:fe:94:77:d1:55:3f:e3:42:ed:
         27:35:0c:6f:ee:65:e1:dd:79:cc:31:f6:0e:cf:1e:c8:02:c6:
         7d:4e:de:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----