Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FC8ECA2BF3311F1869C02E6CE1D38B0.roa
File:                     3FC8ECA2BF3311F1869C02E6CE1D38B0.roa (raw, json)
Hash identifier:          XpHbYK3mDChfMeFLO7Id6XRw0iz5W3xOG+YqvOw+S6Y=
Subject key identifier:   73:E3:04:E2:80:7D:E7:1F:3C:2E:65:AD:32:11:95:78:83:AE:D3:9B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FC8ECA2BF3311F1869C02E6CE1D38B0.roa
Signing time:             Sat 03 Oct 2026 14:03:46 +0000
ROA not before:           Sat 03 Oct 2026 14:03:42 +0000
ROA not after:            Sun 22 Nov 2026 14:03:42 +0000
asID:                     395886
IP address blocks:        45.205.16.0/20 maxlen: 24
                          45.207.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121481 (0x1da89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  3 14:03:42 2026 GMT
            Not After : Nov 22 14:03:42 2026 GMT
        Subject: CN=6ac10b42-3ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0d:e6:6c:8c:e7:4c:a1:97:7b:f2:d0:00:6e:
                    f6:04:99:ae:15:33:aa:a1:af:93:af:3a:c0:60:fc:
                    99:c5:0a:10:52:80:e7:e7:dd:b8:fb:6f:82:73:4a:
                    af:2a:8f:11:a2:fc:ef:a2:07:8d:a4:c4:b5:af:f0:
                    c4:7b:1e:2a:95:5d:d0:98:c5:0b:fa:88:64:40:4a:
                    af:43:8e:49:63:50:b5:39:2d:f8:45:d7:ed:f6:ce:
                    b5:bc:1d:0a:18:e6:11:17:68:4c:b6:be:92:2c:37:
                    18:db:19:c8:54:58:77:ed:d7:35:fe:d2:6d:49:71:
                    d6:98:8b:bb:78:1e:ac:ee:75:3c:46:56:de:d2:ff:
                    9d:be:00:c4:cc:28:4d:5b:b9:81:72:19:99:66:05:
                    c1:3d:08:20:af:28:5d:43:7b:c8:99:c8:b1:1e:6c:
                    10:8d:5b:ea:d8:d5:a9:44:57:41:6a:7a:24:26:76:
                    5a:b5:27:07:8e:fd:be:1f:9c:76:6d:4c:75:a7:09:
                    9c:9f:0b:20:20:62:fc:a8:c4:4f:b4:6e:6b:8d:53:
                    2d:61:74:86:ed:6d:bb:13:e8:83:a0:bb:18:13:bf:
                    e4:ec:d0:fe:ed:4a:71:0e:76:f2:e0:6b:b8:97:49:
                    39:05:bb:cd:a3:94:26:38:15:af:8f:ec:00:d3:44:
                    78:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E3:04:E2:80:7D:E7:1F:3C:2E:65:AD:32:11:95:78:83:AE:D3:9B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3FC8ECA2BF3311F1869C02E6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.16.0/20
                  45.207.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         34:65:ff:f1:60:7c:3c:c4:54:2c:1f:6e:7e:23:27:53:c9:74:
         f8:a6:a9:2b:d4:40:38:e8:79:8f:db:72:90:8f:49:9f:45:38:
         e1:15:25:52:64:04:b6:ee:c4:fd:53:4c:d8:9b:e0:2f:c3:b3:
         13:8d:a9:75:4b:e1:03:dc:45:83:05:b7:9d:8b:fe:97:47:23:
         60:9f:43:5b:00:8c:41:3e:83:05:9d:9b:e2:6f:ed:b2:14:70:
         3e:b8:7e:bf:13:5c:73:60:e6:ae:ec:64:b8:e5:69:63:06:88:
         bf:5c:f1:0f:05:9e:7c:95:25:34:d8:89:c7:d8:3a:5e:ae:49:
         d8:35:a8:ac:3c:af:0d:cc:f6:ad:d2:d3:78:d8:0a:ff:2d:1c:
         a7:71:e3:cd:0b:56:8b:c4:32:60:e6:ff:0a:0f:4a:9a:72:4d:
         54:23:e9:00:13:e6:15:03:0e:e1:b5:77:dd:f9:f5:96:66:b8:
         97:45:d3:a2:41:dd:60:2e:ec:7d:72:df:e8:f3:07:b1:ab:0a:
         17:c2:4a:b1:8d:c7:33:85:a5:ed:22:e3:8c:7d:fa:a0:73:c6:
         54:54:79:68:31:2e:a9:b6:65:84:bc:89:39:da:18:1c:49:c6:
         90:43:cf:07:99:36:a1:3c:97:32:a2:16:4a:88:99:0a:2e:ab:
         22:44:d3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----