Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C17133EBE3B11F1B2092B1ACF1D38B0.roa
File:                     3C17133EBE3B11F1B2092B1ACF1D38B0.roa (raw, json)
Hash identifier:          BKLUDGrnFopshLExQnjMKmEQkLIynAin6SFBM56Sdco=
Subject key identifier:   DA:E9:4B:9B:12:DB:33:51:E0:D1:FF:83:21:C3:6B:0C:A6:8C:13:42
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA18
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C17133EBE3B11F1B2092B1ACF1D38B0.roa
Signing time:             Fri 02 Oct 2026 08:28:25 +0000
ROA not before:           Fri 02 Oct 2026 08:28:21 +0000
ROA not after:            Fri 23 Oct 2026 08:28:21 +0000
asID:                     132513
IP address blocks:        45.195.145.0/24 maxlen: 24
                          45.204.66.0/24 maxlen: 24
                          45.204.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 13:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121368 (0x1da18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  2 08:28:21 2026 GMT
            Not After : Oct 23 08:28:21 2026 GMT
        Subject: CN=6abf6b29-0e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1b:25:ec:1a:cf:64:52:a0:70:e1:4b:d2:1b:
                    1d:1f:00:12:51:67:07:f8:1d:d8:34:61:98:ef:b0:
                    40:69:70:6f:9d:2d:a3:9c:6a:2b:f1:86:a3:cb:0e:
                    d2:4d:fe:df:a5:5b:9e:51:bc:07:53:d6:8e:64:b1:
                    63:08:33:3c:b1:b9:96:e2:3d:a6:b5:72:dc:1c:39:
                    e9:12:5a:0f:07:16:a5:2f:27:a3:65:00:b8:20:0a:
                    15:dc:af:33:34:14:7a:31:e4:3a:ca:69:7e:99:cb:
                    9b:c4:0a:55:e1:5c:82:1e:42:ba:a8:87:73:ce:48:
                    f7:2c:0e:c5:7e:84:36:3f:ae:26:26:1e:0f:1b:43:
                    82:f5:58:9f:a3:3f:32:80:5e:07:0b:25:8e:cc:eb:
                    c6:cf:d4:3d:37:23:e9:87:77:ee:f3:dc:3c:10:47:
                    05:7a:86:17:0d:ae:3b:d0:db:5e:d4:4f:d4:04:45:
                    40:b2:5d:ca:e1:48:90:1d:2c:04:d8:76:be:21:db:
                    30:52:41:ba:28:88:43:ad:53:6f:1b:a8:93:4e:5d:
                    a5:13:ab:77:58:1e:79:c6:40:30:de:7b:86:8b:d5:
                    35:dd:ad:c8:9f:8c:27:e5:da:4b:88:76:1c:d4:3f:
                    e7:ee:b9:fa:5b:7c:fb:87:cd:16:51:4d:9a:4f:09:
                    6a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E9:4B:9B:12:DB:33:51:E0:D1:FF:83:21:C3:6B:0C:A6:8C:13:42
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C17133EBE3B11F1B2092B1ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.145.0/24
                  45.204.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:10:ae:37:d5:e0:a2:23:0f:06:85:ea:88:9e:2b:c6:25:b9:
         fb:b3:1e:8d:55:dd:d9:4e:d6:8f:70:a6:f3:cf:7d:f2:85:79:
         fa:e5:df:0d:37:d4:72:33:ef:fe:d3:f3:6d:3e:05:20:81:0b:
         cb:bc:3c:c1:59:aa:20:56:95:c4:7d:47:05:ec:92:64:41:ba:
         4c:30:8e:21:e0:1f:0d:4c:02:9b:43:8d:e4:96:47:9f:7b:b3:
         9d:7b:2f:82:da:b4:69:e0:75:25:d8:c9:40:f3:c0:46:78:96:
         47:c0:92:eb:3a:49:43:bc:90:b9:52:42:85:df:ee:f7:06:b1:
         1a:ae:69:2b:6b:54:c4:8a:66:a5:47:1c:64:ab:a0:f0:b3:e2:
         5d:54:4a:38:e3:84:15:da:c0:26:c5:3b:2a:5c:f0:e2:f0:c9:
         58:b3:47:39:88:2d:74:e0:3a:ce:0b:fb:3e:36:ce:89:ed:fe:
         96:66:3f:5b:60:1c:7f:f2:66:83:09:01:83:30:8d:32:64:c2:
         b7:bd:16:98:d0:57:55:c6:51:b3:2f:e3:55:3d:64:ef:7a:92:
         b6:10:95:2c:e4:37:8a:23:fc:f5:ac:42:9e:d4:7a:ee:c1:5f:
         da:87:0a:36:00:85:f0:2c:34:4d:54:9d:61:9b:aa:8c:9e:b9:
         50:fd:d5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----