Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/239A8F82C57711F1B0DE4BDDCE1D38B0.roa
File:                     239A8F82C57711F1B0DE4BDDCE1D38B0.roa (raw, json)
Hash identifier:          ZgERxMbpS6l2zmQ7k9EMwWwuRz6pyMUnXrvmZiP6gGA=
Subject key identifier:   46:C2:1D:F8:D1:65:F8:33:34:17:F9:CE:E4:89:C6:B5:40:BD:F5:F4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DCCB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/239A8F82C57711F1B0DE4BDDCE1D38B0.roa
Signing time:             Sun 11 Oct 2026 13:24:52 +0000
ROA not before:           Sun 11 Oct 2026 13:24:47 +0000
ROA not after:            Wed 18 Nov 2026 13:24:47 +0000
asID:                     22773
IP address blocks:        45.192.4.0/22 maxlen: 24
                          45.192.24.0/21 maxlen: 24
                          45.194.72.0/23 maxlen: 24
                          45.194.76.0/23 maxlen: 24
                          45.194.78.0/24 maxlen: 24
                          45.194.82.0/24 maxlen: 24
                          45.194.84.0/24 maxlen: 24
                          45.194.121.0/24 maxlen: 24
                          45.196.116.0/22 maxlen: 24
                          45.197.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122059 (0x1dccb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 11 13:24:47 2026 GMT
            Not After : Nov 18 13:24:47 2026 GMT
        Subject: CN=6acb8e24-e4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:cd:5d:0e:1c:3c:1e:07:3a:b2:85:96:5c:f2:
                    99:2d:4d:d2:37:4b:b8:8b:ff:e7:2a:32:28:76:ad:
                    57:0e:f0:53:5a:ad:81:5e:d3:eb:dc:82:99:13:b2:
                    5a:13:04:87:6b:8e:9e:51:68:9e:6f:28:85:e2:87:
                    84:42:2e:1a:52:e5:15:dd:3f:a6:b1:23:96:96:f4:
                    a5:f3:87:ad:f4:46:a9:ef:23:6d:eb:c6:0a:3b:ee:
                    91:53:e2:fd:0f:e0:61:02:c9:04:89:18:0e:6b:f9:
                    b9:41:0a:3d:c4:94:de:42:27:8e:d1:dc:56:6d:bf:
                    ce:90:12:6e:e5:2b:f7:d9:eb:d1:a0:53:84:56:00:
                    2d:43:03:eb:cc:4f:5e:78:f4:c7:56:50:26:32:93:
                    54:a2:a9:52:a6:8c:a1:d2:5e:e9:e2:c5:49:32:f8:
                    ef:46:0c:b0:14:e6:5d:d3:dd:4c:8c:68:a0:56:3b:
                    48:c8:a0:29:f7:c1:65:55:d3:ed:b8:f6:10:d6:47:
                    f9:67:73:11:6b:c5:8d:4b:7e:6e:55:17:84:20:fd:
                    c0:c2:7d:f5:19:f0:d5:5b:5e:c2:01:e9:4b:69:26:
                    21:94:1d:a3:27:df:8c:5b:9c:e6:dc:8a:2e:8e:15:
                    e0:70:ac:8a:ad:34:8e:57:af:c8:65:59:1c:03:50:
                    cf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C2:1D:F8:D1:65:F8:33:34:17:F9:CE:E4:89:C6:B5:40:BD:F5:F4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/239A8F82C57711F1B0DE4BDDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.4.0/22
                  45.192.24.0/21
                  45.194.72.0/23
                  45.194.76.0-45.194.78.255
                  45.194.82.0/24
                  45.194.84.0/24
                  45.194.121.0/24
                  45.196.116.0/22
                  45.197.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:15:00:ab:cc:78:04:ee:07:48:e4:19:41:5c:ff:c3:47:ee:
         2d:46:47:b6:5c:aa:46:ee:f4:55:ba:38:62:80:ae:76:0d:3c:
         23:d8:c8:e5:ad:04:02:4f:85:ff:9f:af:25:5a:e7:fa:31:58:
         fc:1d:2a:97:63:91:81:58:6c:09:c8:8c:86:95:fe:40:e2:b7:
         65:7d:e0:e1:ca:34:97:ba:9b:18:5b:76:59:74:f9:16:eb:4c:
         e1:65:c6:af:52:6e:69:ac:5b:2e:79:90:6c:24:32:3e:11:e7:
         67:3e:72:f0:b1:e2:02:cf:de:e5:71:d7:22:bb:28:34:24:b2:
         3d:ea:2d:03:d6:ca:d9:89:0e:43:aa:8d:1a:86:0d:bd:26:0c:
         02:7b:ec:52:9e:69:c4:64:52:24:60:a3:95:45:db:69:79:36:
         83:b3:46:0a:2a:92:37:39:1d:ce:5f:fe:fd:5e:1f:b7:17:64:
         b1:08:b1:27:13:80:a2:b7:2e:ab:4a:49:33:2b:eb:ad:0c:0a:
         b1:cb:66:64:a6:b9:ea:ca:2f:4f:19:e0:06:4b:21:24:a7:36:
         79:5c:b6:e3:13:88:7d:8e:30:44:6b:5c:03:ff:3b:ea:87:52:
         f0:ba:db:3e:3e:ee:07:cd:31:ff:09:54:45:4b:7d:cb:b9:bd:
         a9:d5:f2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----