Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19F02FA0A06A11F1A9B405C8CE1D38B0.roa
File:                     19F02FA0A06A11F1A9B405C8CE1D38B0.roa (raw, json)
Hash identifier:          HXhn5LJIcNAUNyLTfDHceE7CUk46GMTUayxoUEPbTXw=
Subject key identifier:   FB:C5:CA:9D:D4:FB:0F:B9:11:B8:50:FE:10:74:22:23:87:D0:D3:17
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D0D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19F02FA0A06A11F1A9B405C8CE1D38B0.roa
Signing time:             Tue 25 Aug 2026 09:48:19 +0000
ROA not before:           Tue 25 Aug 2026 09:48:15 +0000
ROA not after:            Mon 30 Aug 2027 09:48:15 +0000
asID:                     4907
IP address blocks:        45.197.232.0/24 maxlen: 24
                          45.197.233.0/24 maxlen: 24
                          45.197.234.0/24 maxlen: 24
                          45.197.235.0/24 maxlen: 24
                          45.197.236.0/24 maxlen: 24
                          45.197.237.0/24 maxlen: 24
                          45.197.238.0/24 maxlen: 24
                          45.197.239.0/24 maxlen: 24
                          45.202.0.0/24 maxlen: 24
                          45.202.1.0/24 maxlen: 24
                          45.202.2.0/24 maxlen: 24
                          45.202.3.0/24 maxlen: 24
                          45.202.4.0/24 maxlen: 24
                          45.202.5.0/24 maxlen: 24
                          45.202.6.0/24 maxlen: 24
                          45.202.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118992 (0x1d0d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 25 09:48:15 2026 GMT
            Not After : Aug 30 09:48:15 2027 GMT
        Subject: CN=6a8d64e3-6ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a1:34:11:1f:ae:b6:41:c7:86:fb:7e:71:a6:
                    43:c7:a9:03:2d:8f:dd:59:a6:f3:1c:f8:98:24:8f:
                    30:c8:b5:14:32:dd:16:8b:37:24:65:ad:1f:a6:59:
                    14:7b:9b:d5:cb:ed:46:0f:ed:db:7a:f9:07:60:d6:
                    76:ad:ad:a8:87:57:be:f6:26:4b:aa:39:e7:a4:69:
                    ce:ca:29:f1:49:be:bc:07:6f:d4:73:d2:57:8e:c8:
                    8f:ea:6a:6a:f7:b8:2e:92:e0:ce:b0:3b:32:d7:bd:
                    ab:97:a0:12:fa:96:40:02:39:e1:46:36:9c:ea:c4:
                    80:9e:0a:22:14:28:90:16:d8:11:28:94:b8:22:9c:
                    a9:d5:6a:8d:95:5b:a4:49:d6:40:e8:fe:64:83:f1:
                    c2:47:b2:fe:da:3a:55:ca:f6:25:69:6f:79:5c:89:
                    53:44:04:0a:89:3b:b9:19:a9:4d:17:bd:f2:a1:c0:
                    47:fb:ea:a2:5d:f5:c9:26:91:7f:75:c7:64:18:ab:
                    6d:c3:f9:af:63:97:02:16:ef:c6:79:21:42:e2:1a:
                    6e:c4:8e:d3:10:a4:67:f2:03:0d:14:3a:db:71:cc:
                    33:69:41:07:ea:c9:b9:84:5e:56:49:3d:6b:2b:65:
                    06:ae:c9:dc:db:23:d8:84:fa:15:32:bd:04:5c:bb:
                    df:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C5:CA:9D:D4:FB:0F:B9:11:B8:50:FE:10:74:22:23:87:D0:D3:17
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19F02FA0A06A11F1A9B405C8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.232.0/21
                  45.202.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         03:9b:41:54:d5:3c:73:bb:03:64:22:c7:3b:9e:db:48:14:5c:
         de:17:9d:0d:5a:5d:0d:e9:45:c1:5e:16:39:b7:49:a8:eb:46:
         3a:21:75:9a:68:1e:f5:49:3c:5f:ff:50:59:cc:79:79:76:ca:
         cb:3c:e4:fc:76:f1:d5:dd:fc:36:66:91:cd:79:39:85:9f:5a:
         aa:18:5d:0a:cf:84:96:b7:ee:ca:d3:4b:1d:c4:f5:dd:b8:c4:
         5f:5d:39:c7:ee:38:48:ce:19:71:bf:e8:a1:44:6e:b4:da:c0:
         80:0c:30:80:f0:74:78:d8:c1:5b:40:e9:df:9c:2e:92:b6:50:
         a3:36:b4:94:96:dd:19:da:56:97:94:5d:d3:24:ed:19:d6:3a:
         75:23:fa:48:cc:e6:ef:8c:29:5c:b5:c7:55:ed:b8:24:a5:70:
         55:d7:bd:d2:c3:5c:6a:36:07:08:08:21:d0:82:e5:7b:5f:a1:
         3d:2f:07:3d:21:c7:9b:2f:cd:63:42:22:b7:70:cc:4b:e1:d8:
         bc:67:22:a9:7c:06:be:0e:4b:03:05:97:28:1d:2d:3e:a5:42:
         fc:de:9f:c2:da:6b:cb:52:e9:86:5c:9d:03:fc:92:ef:e5:3d:
         9d:4b:06:15:ac:1c:0d:80:cc:55:c1:cd:bc:02:5c:07:e1:a9:
         27:ff:1a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----