Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33F9019A994B11F192A07BE7CE1D38B0.roa
File:                     33F9019A994B11F192A07BE7CE1D38B0.roa (raw, json)
Hash identifier:          OgoloA/aiXbO/LRmDHUcu3+1bWB4Lk/h1aeBuXuAweQ=
Subject key identifier:   62:4F:4D:97:94:30:63:EF:69:87:3F:10:49:A3:15:D4:97:4C:34:71
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CD15
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33F9019A994B11F192A07BE7CE1D38B0.roa
Signing time:             Sun 16 Aug 2026 08:19:30 +0000
ROA not before:           Sun 16 Aug 2026 08:19:26 +0000
ROA not after:            Tue 22 Sep 2026 08:19:26 +0000
asID:                     7843
IP address blocks:        45.194.128.0/17 maxlen: 24
                          45.196.184.0/21 maxlen: 24
                          45.200.192.0/18 maxlen: 24
                          45.204.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118037 (0x1cd15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 16 08:19:26 2026 GMT
            Not After : Sep 22 08:19:26 2026 GMT
        Subject: CN=6a817292-43d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8d:13:26:e5:04:cd:84:69:59:61:38:6e:f1:
                    28:5d:c5:33:f7:03:72:13:f4:55:dc:df:fe:cb:de:
                    75:b1:46:40:ba:ac:97:a9:9c:48:ae:c2:08:cd:c0:
                    13:ae:62:97:1b:33:81:81:87:f0:e3:d3:4c:3e:bb:
                    c0:52:4a:54:eb:e2:01:b1:07:c2:72:75:2b:6b:be:
                    50:4b:70:64:51:e0:00:07:13:a5:6c:ee:ad:a7:16:
                    69:a9:07:4b:46:a3:63:4e:18:56:a7:5a:69:a7:74:
                    94:69:dd:07:69:e6:f5:d0:58:ba:06:48:34:d5:87:
                    c7:2d:9f:a3:6d:e4:2f:e4:79:53:29:25:c1:9f:81:
                    94:78:b7:f7:e8:fa:c0:5e:b4:db:8d:92:39:65:d7:
                    f4:ae:d7:09:0a:66:c0:8f:76:a6:14:0b:0e:52:97:
                    72:04:5c:55:2b:a5:33:3f:63:2c:09:8a:40:9b:db:
                    4c:0b:5e:08:4e:d5:16:79:e9:d0:e1:36:85:3d:94:
                    2f:e4:43:f2:ad:32:e8:ed:a0:1a:53:cb:01:7f:66:
                    56:cc:31:56:2e:3a:3a:6b:a3:75:44:dd:dc:9f:9c:
                    db:37:f3:dc:5f:03:ef:7a:5d:75:12:5e:10:ff:2f:
                    a1:8f:a0:4a:af:fe:6d:d1:5a:6b:50:ec:3e:93:76:
                    f5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4F:4D:97:94:30:63:EF:69:87:3F:10:49:A3:15:D4:97:4C:34:71
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33F9019A994B11F192A07BE7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.128.0/17
                  45.196.184.0/21
                  45.200.192.0/18
                  45.204.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8a:21:59:7e:f8:84:c8:d5:7c:a2:cd:2f:ae:9f:95:e7:79:8f:
         fe:1b:2e:1b:e3:95:f8:c7:29:99:d7:72:5b:45:d2:c2:ab:20:
         3e:cb:b2:d4:3d:bd:d0:0d:68:27:c8:70:27:c2:fa:b2:e5:11:
         3c:5e:78:7b:93:92:4b:30:fc:fb:70:20:b1:d5:71:53:74:37:
         46:70:9e:c1:3c:45:c0:53:96:9f:a2:c9:80:80:af:7b:57:50:
         03:44:f2:99:9e:3f:07:d7:67:af:82:b5:01:74:ef:af:68:fa:
         bb:ae:15:58:db:c4:76:fb:62:31:2b:7e:08:34:01:79:d9:b8:
         d3:40:de:f0:ee:44:99:c5:d6:7f:8c:6c:55:f4:ae:1b:46:8e:
         3f:10:02:93:f7:39:69:91:63:1e:87:8b:a0:42:e6:04:f4:78:
         04:99:23:88:5e:ff:62:d0:98:ce:b2:56:a6:a6:67:8a:97:63:
         ef:7a:6e:16:1d:d0:43:fa:fd:bf:49:35:39:a4:aa:63:f4:0d:
         a4:96:79:94:06:38:49:49:f8:bd:7a:ee:f0:d7:c8:3c:08:d0:
         ae:bb:ea:c4:0e:b4:0d:fe:23:46:71:b1:8b:69:c5:f6:79:5a:
         e6:e5:00:f3:db:f2:da:fb:36:cb:25:7c:8b:15:98:30:83:10:
         17:89:a7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----