Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BB76E8ECAC011F1A79A44E2CE1D38B0.roa
File:                     3BB76E8ECAC011F1A79A44E2CE1D38B0.roa (raw, json)
Hash identifier:          egFG8LxcOYjJi2gZqDMY2JcKqVkdYIYB8NJ5ZMEXpUQ=
Subject key identifier:   A0:5D:79:49:6E:A2:E5:18:20:5B:84:DF:3C:B9:04:D5:32:7B:CF:53
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DE6B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BB76E8ECAC011F1A79A44E2CE1D38B0.roa
Signing time:             Sun 18 Oct 2026 06:50:41 +0000
ROA not before:           Sun 18 Oct 2026 06:50:36 +0000
ROA not after:            Fri 04 Dec 2026 06:50:36 +0000
asID:                     140224
IP address blocks:        45.194.16.0/21 maxlen: 24
                          45.194.16.0/24 maxlen: 24
                          45.207.8.0/24 maxlen: 24
                          45.207.9.0/24 maxlen: 24
                          45.207.10.0/24 maxlen: 24
                          45.207.11.0/24 maxlen: 24
                          45.207.12.0/24 maxlen: 24
                          45.207.13.0/24 maxlen: 24
                          45.207.14.0/24 maxlen: 24
                          45.207.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 25 Oct 2026 08:20:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122475 (0x1de6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 18 06:50:36 2026 GMT
            Not After : Dec  4 06:50:36 2026 GMT
        Subject: CN=6ad46c41-c3c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:61:db:44:9f:0c:56:76:a3:90:94:53:4c:fe:
                    8f:5f:53:72:a3:63:a8:91:e2:c5:16:f3:da:82:49:
                    56:0a:48:22:f0:a2:85:d2:e5:6c:42:ee:74:f8:cc:
                    e0:1d:fb:8d:18:7b:de:50:a4:5b:87:5f:b4:68:e1:
                    53:59:69:ef:6a:4f:08:f0:54:c4:ac:c4:22:9e:6f:
                    b3:6f:db:c0:76:f9:7a:10:84:4c:27:8e:64:8b:83:
                    ea:a4:2d:30:c4:85:c3:ab:a9:7b:28:ab:3c:82:69:
                    90:f5:61:e5:eb:d7:6e:22:7f:d6:d7:f5:cf:42:6e:
                    f4:09:d5:73:1f:d0:2c:da:bc:8d:4c:ec:c3:72:78:
                    cc:77:4d:4e:10:8b:b6:f0:66:aa:50:8d:b1:0c:d9:
                    d3:2d:bc:4c:22:ad:4c:a8:64:34:a4:44:0a:4e:8b:
                    14:99:ce:29:2c:ed:38:74:6a:e2:b3:0a:a8:0b:28:
                    db:fd:d8:b9:e5:f0:07:eb:85:04:8b:35:e9:c6:8a:
                    2a:db:1f:5f:1f:52:ab:03:26:33:60:f4:4a:1f:32:
                    aa:89:b5:69:ac:86:c2:df:56:f7:c9:cc:2c:cc:47:
                    37:af:93:ef:f4:58:26:0b:b6:70:7f:00:13:01:0d:
                    81:a5:71:82:fb:28:22:09:c8:0e:5e:e9:70:36:40:
                    d9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5D:79:49:6E:A2:E5:18:20:5B:84:DF:3C:B9:04:D5:32:7B:CF:53
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BB76E8ECAC011F1A79A44E2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.16.0/21
                  45.207.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         87:60:f5:cd:c1:83:b9:d7:56:38:78:44:4d:a4:f4:f7:77:71:
         57:14:8b:72:37:b3:27:1a:4d:1b:e9:c0:08:f3:3e:4a:9a:08:
         cf:8c:86:1e:68:14:a5:e0:17:af:a4:59:fc:7c:96:ac:96:fa:
         4a:32:a7:e6:de:01:dc:25:7a:87:e0:db:8b:9b:72:dd:73:0b:
         e5:fe:23:a1:0b:b7:92:8d:b6:f7:73:8d:fe:d8:90:c8:91:06:
         0d:90:dd:e0:eb:37:2b:e9:c6:63:cb:f0:a9:b8:02:30:e8:59:
         37:74:b9:5a:42:38:a7:71:43:6f:98:60:bb:bf:06:86:52:80:
         7a:de:12:4e:1f:87:a0:0e:f3:4e:9e:2a:f9:fc:df:e3:b3:17:
         2a:c1:71:15:99:47:bc:59:09:70:00:4c:4a:b9:0a:fa:02:32:
         a4:3b:5a:e7:6f:dc:40:8b:d5:48:80:db:df:12:81:b9:61:8e:
         53:5f:20:3e:3d:91:85:e1:ea:c2:06:da:98:6a:b4:e6:d4:83:
         48:29:28:88:72:19:d8:f7:1b:e4:83:a9:82:b8:8b:35:ca:5f:
         ee:d2:0c:48:79:33:23:af:f5:45:75:af:a5:2d:94:b3:01:2c:
         61:c9:87:14:73:13:c8:b4:b7:27:ad:78:d0:22:5f:88:27:d4:
         f1:7b:36:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----