Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4039D176A6A411F1BB5D99FCCE1D38B0.roa
File:                     4039D176A6A411F1BB5D99FCCE1D38B0.roa (raw, json)
Hash identifier:          wWefwPExOnRST14uYpjKsjtgz7XPUE6xcGa2Jfk0pBc=
Subject key identifier:   E4:5F:AF:98:AB:01:B5:07:E5:A9:C5:B2:31:10:78:3E:A6:C8:29:A6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D25E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4039D176A6A411F1BB5D99FCCE1D38B0.roa
Signing time:             Wed 02 Sep 2026 07:59:41 +0000
ROA not before:           Wed 02 Sep 2026 07:59:37 +0000
ROA not after:            Sat 10 Oct 2026 07:59:37 +0000
asID:                     135377
IP address blocks:        45.195.216.0/24 maxlen: 24
                          45.195.217.0/24 maxlen: 24
                          45.195.218.0/24 maxlen: 24
                          45.195.219.0/24 maxlen: 24
                          45.195.220.0/24 maxlen: 24
                          45.195.221.0/24 maxlen: 24
                          45.195.222.0/24 maxlen: 24
                          45.195.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119390 (0x1d25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  2 07:59:37 2026 GMT
            Not After : Oct 10 07:59:37 2026 GMT
        Subject: CN=6a97d76d-1a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:36:c4:73:38:42:2f:5f:91:34:e6:a5:83:f2:
                    92:3e:95:a0:55:ee:30:79:25:d2:39:de:c7:2b:25:
                    cc:61:23:29:55:85:d7:3e:6c:16:4c:5f:86:e3:b9:
                    99:80:8d:e4:35:f2:5b:85:64:5a:65:26:ae:43:f7:
                    d4:9b:04:78:bb:8f:61:72:10:a9:72:c8:77:c9:1d:
                    26:70:55:f7:96:4e:b2:44:36:ef:40:7e:ba:f0:94:
                    08:1d:3c:42:d1:8f:94:77:bd:4d:ca:e3:4c:d7:0e:
                    24:b7:ee:a1:a0:6a:e5:7d:7e:e1:3f:ce:7a:0e:c9:
                    21:23:2e:80:67:f4:ee:d5:da:9d:25:9b:bd:c2:2a:
                    21:97:6b:ab:c6:0d:04:2a:d1:dd:62:9a:03:6c:cc:
                    3a:15:2d:9f:68:41:cb:14:61:18:0c:3b:b7:3d:7f:
                    8d:e8:d7:68:f9:24:3d:16:84:86:06:40:02:ba:e6:
                    25:7e:03:22:3c:4d:76:b4:51:be:64:1e:9c:9f:1f:
                    40:c0:c5:51:c8:fc:a1:d8:15:23:d6:7a:4b:c8:4a:
                    41:c5:d0:da:95:40:76:c9:dd:64:91:3f:cc:28:d3:
                    fe:56:8a:4e:87:c1:e1:9b:6a:19:39:01:e8:83:97:
                    dc:93:6c:e0:0b:1e:f0:db:48:b4:90:ef:58:09:2b:
                    f1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5F:AF:98:AB:01:B5:07:E5:A9:C5:B2:31:10:78:3E:A6:C8:29:A6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4039D176A6A411F1BB5D99FCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:69:4f:96:a0:f3:2b:cf:96:73:94:b4:90:40:d2:48:53:2c:
         35:b0:93:6d:10:d7:24:11:fd:b7:67:a2:2a:00:5d:0a:bd:7e:
         3f:2d:8c:2f:67:47:8b:a3:69:49:4b:ad:3f:4f:48:e5:fb:2c:
         64:4d:c6:20:fd:2c:10:0b:c3:b9:f4:73:c9:4b:33:e0:50:4a:
         9c:1e:58:70:f5:f0:16:37:99:4a:5b:a9:ce:c6:59:18:3b:57:
         9d:7a:db:df:1d:44:1f:a2:6b:df:3d:44:46:b4:5a:56:ec:f0:
         16:4b:d4:6b:6a:35:6e:34:3f:21:22:83:69:61:3e:7d:bc:09:
         c6:6b:1b:09:74:87:64:28:3c:34:b5:32:29:ae:9b:89:7d:ec:
         32:df:97:f2:07:27:4c:d0:88:d6:6f:67:59:a9:58:d9:38:56:
         72:bf:4d:ef:74:ec:99:ce:f8:7d:de:8b:32:39:64:29:26:22:
         c7:e2:ee:a2:df:39:54:99:27:54:f5:86:dd:30:e4:2a:62:9e:
         95:f3:a3:7e:50:ac:62:a2:1a:06:41:ef:6e:f9:17:dc:2e:c1:
         72:ba:ef:48:9a:6d:65:de:28:f0:08:71:6a:10:1b:4c:29:df:
         57:6d:c9:35:60:a0:2b:f0:c3:e1:a3:54:2a:fe:4a:ca:9e:0e:
         f2:a3:51:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----