Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/413B795EC3A411F189A7E3FFCE1D38B0.roa
File:                     413B795EC3A411F189A7E3FFCE1D38B0.roa (raw, json)
Hash identifier:          Eg46CAUGxJAuS9TKFm7k7IFMTMXbNAJCQc96y9Ol+T8=
Subject key identifier:   65:9D:76:46:41:57:16:92:C4:B2:B1:1A:63:44:C9:8E:7F:B9:49:0F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DBEB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/413B795EC3A411F189A7E3FFCE1D38B0.roa
Signing time:             Fri 09 Oct 2026 05:42:46 +0000
ROA not before:           Fri 09 Oct 2026 05:42:41 +0000
ROA not after:            Sun 08 Nov 2026 05:42:41 +0000
asID:                     135222
IP address blocks:        45.195.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121835 (0x1dbeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  9 05:42:41 2026 GMT
            Not After : Nov  8 05:42:41 2026 GMT
        Subject: CN=6ac87ed6-815a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:70:25:c0:73:ac:07:f4:cb:ad:78:78:d9:16:
                    13:e8:21:f7:dc:2d:93:c8:fe:7e:67:9d:2d:d9:7e:
                    ab:be:2f:6d:08:29:6d:54:d1:3b:df:8d:fe:e3:91:
                    d6:2b:e5:dd:28:21:51:a9:35:c4:a2:50:73:4c:50:
                    fd:3c:16:e9:46:39:55:2d:73:54:bf:b2:07:2e:7c:
                    86:d6:fc:e3:d7:65:fb:c8:76:72:7f:7b:6d:ef:44:
                    2c:43:93:8b:1e:8a:9d:43:9e:a5:d5:ea:06:05:1f:
                    ca:60:1b:45:99:52:bd:aa:c3:16:b7:22:cc:3d:8d:
                    08:30:78:20:a2:b8:74:a2:cd:e1:0e:9f:d8:a0:ef:
                    0d:54:a4:82:2e:cc:db:41:ef:31:6c:da:2b:8f:4b:
                    b1:f2:3d:cd:77:74:19:9d:d5:95:12:24:d3:93:bd:
                    d6:b4:99:cd:2b:02:c7:ae:8a:1f:39:2f:a5:58:82:
                    cb:58:8a:14:7c:3b:6c:b0:0d:cc:c6:53:d0:ae:77:
                    33:77:ab:23:69:84:5a:f7:42:84:b7:6d:42:d5:19:
                    4a:5f:a7:0f:df:3c:70:d5:96:15:40:00:cb:83:71:
                    20:07:6e:a7:8e:75:93:69:3b:e6:1d:a3:10:c7:c4:
                    3d:cf:fb:79:90:12:d9:de:18:a2:95:0d:84:c0:b8:
                    c1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9D:76:46:41:57:16:92:C4:B2:B1:1A:63:44:C9:8E:7F:B9:49:0F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/413B795EC3A411F189A7E3FFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:9a:19:01:2f:e1:ff:1a:cf:33:dd:bd:a0:2c:36:f0:70:c0:
         08:95:53:8b:bc:8c:2d:73:a4:fb:e2:78:c7:be:86:7a:b0:10:
         01:ab:13:ac:26:3b:de:a5:69:7c:a4:ca:ca:e7:14:ef:cd:34:
         14:4d:60:b1:48:11:53:0d:71:85:1d:ed:39:2d:37:11:72:5a:
         1b:14:25:d2:02:0e:96:0a:a9:b7:42:ee:35:95:0c:10:48:f9:
         58:a4:9d:58:9a:32:68:fa:25:6f:e0:d2:5f:72:44:ed:ef:1c:
         6f:db:b2:99:60:94:ee:ee:e0:5a:15:4c:62:38:24:4c:df:7a:
         ca:84:90:28:7a:6a:79:71:95:1f:f2:b7:a8:88:c6:af:be:d9:
         26:04:d7:68:20:5f:96:55:44:40:51:1c:c5:60:1d:76:fb:f0:
         bd:b6:38:d9:96:35:ca:d8:a1:1d:fa:a8:01:7f:78:fe:64:0a:
         3f:19:0c:52:47:17:1c:7f:d5:a2:ea:e7:04:ed:d5:87:55:d5:
         e6:97:0f:4f:57:90:76:f7:14:31:39:a4:ed:03:e8:4a:b5:96:
         f9:94:32:ae:5c:aa:ea:54:da:de:ce:26:10:c8:1e:16:96:92:
         4b:61:54:c0:ed:fe:b1:82:34:43:8c:93:83:88:fa:64:8e:dd:
         0f:e7:15:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----