Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/273580F2C47311F1A82823C7CE1D38B0.roa
File:                     273580F2C47311F1A82823C7CE1D38B0.roa (raw, json)
Hash identifier:          ei028LqnmvUHp6ZxpDTW6mc4rfphZMuLSWvK5BAtISo=
Subject key identifier:   03:66:54:DB:15:D6:AF:57:15:9D:25:63:D8:5E:6B:DC:69:F0:01:25
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC46
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/273580F2C47311F1A82823C7CE1D38B0.roa
Signing time:             Sat 10 Oct 2026 06:23:49 +0000
ROA not before:           Sat 10 Oct 2026 06:23:44 +0000
ROA not after:            Mon 16 Nov 2026 06:23:44 +0000
asID:                     401615
IP address blocks:        45.192.196.0/22 maxlen: 24
                          45.192.200.0/22 maxlen: 24
                          45.192.240.0/24 maxlen: 24
                          45.192.241.0/24 maxlen: 24
                          45.192.242.0/23 maxlen: 24
                          45.196.218.0/23 maxlen: 24
                          45.196.234.0/23 maxlen: 24
                          45.196.234.0/24 maxlen: 24
                          45.196.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121926 (0x1dc46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 10 06:23:44 2026 GMT
            Not After : Nov 16 06:23:44 2026 GMT
        Subject: CN=6ac9d9f4-7c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2d:8a:e1:bb:78:11:ad:37:10:83:0d:8c:c7:
                    79:ec:ee:0a:c6:22:24:f6:2d:71:37:be:84:dd:d2:
                    3c:ef:6c:2f:a7:50:14:c5:42:49:fc:0d:2d:2c:7a:
                    e9:d2:40:75:c3:1e:69:32:79:aa:95:09:f2:9f:e7:
                    4f:2a:ab:51:63:fa:b6:54:fe:10:0f:62:fe:7c:e2:
                    4f:39:13:bf:3d:8f:86:30:de:bd:c1:ec:b0:a3:e4:
                    e8:f1:97:8f:1d:f6:42:9b:58:f9:cd:f3:b8:dc:e1:
                    0e:f3:66:e8:8f:f6:fa:38:e3:84:81:34:c3:d0:e5:
                    33:db:40:c2:1c:de:0d:68:85:2b:c5:3a:ea:17:a1:
                    a3:af:8d:69:c4:67:10:fc:4d:ec:0d:27:65:9a:31:
                    fc:a0:0d:12:7c:c1:11:27:54:53:d7:3f:c5:65:75:
                    51:cd:8f:32:7e:cc:56:45:7c:f2:86:71:02:d2:75:
                    15:21:27:14:fa:01:2b:2f:7d:4e:7b:b1:73:30:d9:
                    e9:30:10:b9:d7:e1:43:b2:dc:25:62:86:fe:33:c6:
                    04:78:94:9f:03:0d:d6:0e:c6:1c:f1:88:77:20:34:
                    2c:e4:7f:80:3c:85:ed:77:2d:e6:e7:37:02:44:fa:
                    05:d3:83:c9:d4:ec:fb:9d:96:d1:f1:5a:d3:8e:e9:
                    80:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:66:54:DB:15:D6:AF:57:15:9D:25:63:D8:5E:6B:DC:69:F0:01:25
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/273580F2C47311F1A82823C7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.196.0-45.192.203.255
                  45.192.240.0/22
                  45.196.218.0/23
                  45.196.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ac:29:8c:42:7d:e7:e8:df:49:2e:a6:8c:41:a3:be:f7:a9:37:
         cc:c5:60:50:51:27:33:a0:51:d0:c6:71:80:c4:68:c1:37:e9:
         e3:70:0c:3f:8a:83:18:02:c4:2f:68:01:09:98:84:b5:89:0e:
         0f:0c:89:e3:1c:c6:c3:44:cd:f0:85:4d:b1:e8:61:86:ad:b1:
         cb:af:ef:97:31:f1:83:c7:3b:ff:57:e4:73:9a:9c:c5:a2:5f:
         02:2c:6d:6b:5b:94:98:8a:f8:58:2e:fe:1f:58:68:1b:8f:fc:
         e9:78:05:35:c5:2f:b3:29:c1:b5:c0:a6:19:8d:e7:99:3a:23:
         a7:89:4d:06:75:34:66:4f:82:7d:9a:fa:0d:cf:59:1b:0f:7e:
         84:22:3c:ee:68:92:48:ff:2f:79:48:e0:95:a8:20:3c:34:eb:
         23:d2:77:14:1c:b2:52:84:d4:c8:b1:f3:63:35:7b:55:3b:89:
         f1:c9:12:7c:d2:47:8d:b7:92:7b:9f:93:f6:eb:c0:c6:73:45:
         6b:13:35:96:06:c6:99:1c:2e:36:df:7a:88:a0:91:e7:ae:da:
         dc:0c:b3:a0:28:59:6c:93:cc:b9:37:a4:e4:a4:be:8a:97:3f:
         9d:cf:aa:40:c5:48:89:9d:a6:7c:a5:41:7c:8c:14:14:e9:ac:
         47:b1:6e:15
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----