Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C243A529EB311F18AD5C9AACE1D38B0.roa
File:                     3C243A529EB311F18AD5C9AACE1D38B0.roa (raw, json)
Hash identifier:          3zvMMT+Qz5lzpYogoIlWJazbCB54AbRKam8AN1Bdk2c=
Subject key identifier:   D4:9A:3B:DA:64:E5:09:90:BB:BF:EF:68:01:56:76:A8:FF:47:1F:B2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D00D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C243A529EB311F18AD5C9AACE1D38B0.roa
Signing time:             Sun 23 Aug 2026 05:26:47 +0000
ROA not before:           Sun 23 Aug 2026 05:26:43 +0000
ROA not after:            Wed 23 Sep 2026 05:26:43 +0000
asID:                     131471
IP address blocks:        45.195.130.0/24 maxlen: 24
                          45.195.131.0/24 maxlen: 24
                          45.195.194.0/24 maxlen: 24
                          45.195.195.0/24 maxlen: 24
                          45.195.210.0/24 maxlen: 24
                          45.195.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118797 (0x1d00d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 23 05:26:43 2026 GMT
            Not After : Sep 23 05:26:43 2026 GMT
        Subject: CN=6a8a8497-8a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:28:31:7a:df:d8:e2:cf:2f:fd:9e:84:b2:3f:
                    0b:ce:b2:9a:f0:d9:89:d2:d1:d5:e9:04:a0:26:a5:
                    65:3c:6b:30:65:1d:01:4e:7d:78:bc:4a:28:c1:90:
                    04:92:36:29:28:69:05:5c:3d:ce:bb:d3:73:45:ff:
                    84:54:e4:b6:48:4a:c3:8b:6b:08:b4:00:2a:fc:ad:
                    a1:f4:47:ce:c5:15:c1:8b:5b:4f:90:3f:9e:01:a1:
                    90:f2:bf:72:8e:a8:24:9b:77:de:76:4a:b9:81:1a:
                    90:61:6a:98:68:82:ce:82:0c:0b:01:5b:75:07:ab:
                    4f:83:ef:1b:8e:f0:97:13:57:f8:c0:76:c6:ee:ee:
                    c8:99:40:66:ba:3d:b5:82:18:e6:73:2c:02:f4:30:
                    4c:90:71:3d:4d:59:91:df:58:4e:58:e8:0b:c1:a6:
                    a3:0f:2c:77:04:2b:b2:25:22:32:a0:5d:6a:38:fe:
                    f7:fb:81:c3:1b:d6:77:53:56:72:19:97:d1:4c:f3:
                    1e:58:21:b8:72:3e:f6:e2:c0:da:bc:68:e5:8a:0c:
                    56:46:76:2e:92:7d:01:92:e1:68:6a:e4:75:32:fe:
                    10:22:bb:03:c4:8b:10:a2:0b:4e:7c:5d:53:50:da:
                    b7:e1:89:63:91:fd:37:74:7e:72:c2:9d:2c:f2:37:
                    df:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9A:3B:DA:64:E5:09:90:BB:BF:EF:68:01:56:76:A8:FF:47:1F:B2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C243A529EB311F18AD5C9AACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.130.0/23
                  45.195.194.0/23
                  45.195.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:bf:e3:a4:88:56:2b:59:c1:03:0a:b9:09:dc:25:47:bd:f5:
         85:5a:f4:ed:e3:06:43:ab:50:c5:66:a7:58:2d:a9:17:16:1c:
         1c:2d:be:9e:d6:fb:e2:57:c3:7e:26:0d:5f:5c:ac:40:75:88:
         5f:b0:38:bb:b4:1b:51:29:1b:92:aa:a2:b9:fa:44:96:73:44:
         b3:9f:4b:9b:5c:2a:40:24:21:e6:06:54:fc:a3:5e:ed:a4:dc:
         53:b1:4c:96:33:1b:75:29:f3:98:26:c4:b9:f6:25:78:8d:16:
         e1:48:af:f8:93:87:ca:af:2c:d6:77:be:79:bb:2e:d3:01:f5:
         9d:7e:d0:3b:45:ca:ce:3c:a8:c3:4e:26:95:fb:10:05:a9:cc:
         21:76:a8:64:9f:c9:59:cb:50:80:6c:0e:7d:09:62:91:73:32:
         8e:96:33:16:1a:4a:d4:84:40:c1:ec:a7:6f:91:1c:b1:c1:57:
         39:8b:52:3d:73:f7:62:cc:7f:ca:8c:d7:24:ef:77:0b:09:21:
         e8:47:cf:2f:3f:ba:73:04:af:66:a3:46:64:18:5f:e8:61:39:
         a6:46:27:82:b0:49:5f:34:15:a5:f2:e3:ec:b1:bd:10:99:a1:
         c2:4a:f2:06:80:b3:31:95:a4:87:cb:e8:89:e7:68:b1:15:b3:
         ff:74:59:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----