Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/413FDFEAC6CD11F19C21391DCF1D38B0.roa
File:                     413FDFEAC6CD11F19C21391DCF1D38B0.roa (raw, json)
Hash identifier:          9RBe5N+vM1Tda0YFblQ7XVNX9JvyyV4q7G3jtlMiM+k=
Subject key identifier:   39:33:4A:07:65:6B:3F:02:01:C6:73:92:22:6A:4A:4E:C6:06:90:34
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DCFF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/413FDFEAC6CD11F19C21391DCF1D38B0.roa
Signing time:             Tue 13 Oct 2026 06:13:50 +0000
ROA not before:           Tue 13 Oct 2026 06:13:45 +0000
ROA not after:            Sun 28 Mar 2027 06:13:45 +0000
asID:                     26617
IP address blocks:        45.195.146.0/24 maxlen: 24
                          45.195.206.0/24 maxlen: 24
                          45.195.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122111 (0x1dcff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 13 06:13:45 2026 GMT
            Not After : Mar 28 06:13:45 2027 GMT
        Subject: CN=6acdcc1e-32b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:40:b6:1d:7b:ad:ce:b1:ec:6c:4c:ac:31:b4:
                    bc:94:82:b9:df:f7:a5:91:05:1f:80:e0:c1:b5:1f:
                    75:61:08:ea:1e:96:69:c3:d0:01:95:7c:49:0e:6f:
                    04:ef:c3:76:e1:18:ea:67:a4:a2:28:4a:bc:92:2a:
                    78:d6:69:34:ca:95:5d:6d:52:d4:2a:ca:d9:cb:a1:
                    f2:e4:55:8a:39:31:78:99:16:28:8d:dc:27:d2:2e:
                    51:89:64:91:58:77:28:e0:1a:65:a8:b4:f9:ab:ae:
                    cc:43:9c:ae:fa:86:5c:46:82:44:07:1c:18:47:aa:
                    16:2e:61:6e:3e:54:5c:bb:45:02:b5:52:85:20:62:
                    dc:df:09:74:50:ce:62:93:ab:d5:a1:d1:97:b0:b2:
                    6e:ad:f1:cf:d1:68:ac:31:31:47:5d:4f:ca:b1:6a:
                    70:27:70:9c:4d:dc:ba:9d:c5:60:09:c6:96:a0:6a:
                    f0:b0:a5:83:44:81:11:64:08:45:b4:c3:29:a6:7b:
                    88:39:3a:cf:98:b0:02:cf:87:16:34:3c:39:ff:2a:
                    95:f0:57:32:4a:00:c3:ef:c0:43:fb:83:6a:52:5f:
                    a4:58:c8:c3:2c:30:30:25:4d:c0:e7:89:04:52:6d:
                    48:48:8f:d8:84:ab:86:69:21:02:b3:6b:ef:4c:cf:
                    31:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:33:4A:07:65:6B:3F:02:01:C6:73:92:22:6A:4A:4E:C6:06:90:34
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/413FDFEAC6CD11F19C21391DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.146.0/24
                  45.195.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:80:9f:7b:51:7b:8b:86:38:0d:90:37:44:61:21:ea:44:89:
         88:1d:58:65:90:40:50:24:ab:53:0b:f5:80:9a:54:d4:0a:46:
         41:e5:1f:80:1d:73:dd:61:cf:57:ea:16:c6:03:42:f1:7b:e4:
         34:2d:99:00:a9:24:38:27:86:60:74:6b:e1:87:84:5f:0a:a7:
         cc:2c:9d:a3:53:9f:c2:45:b2:67:f5:52:bf:ea:89:f1:c5:bf:
         28:36:01:40:2b:2f:3b:4d:08:55:d9:5e:b2:65:61:43:2e:21:
         35:ff:7e:25:31:e9:b6:a4:f4:d1:7c:8c:d1:2e:04:5f:17:1f:
         33:d0:cb:f2:58:63:a5:c2:7b:a4:59:36:43:85:49:85:a7:5a:
         f0:d1:b4:55:d1:d8:ca:63:4c:06:3b:34:e8:94:4e:fd:d9:06:
         29:48:70:51:3b:23:d8:72:5e:45:aa:28:f0:1c:bd:8d:0d:d3:
         9b:cd:0a:ec:1f:75:48:66:1f:6b:eb:c6:82:5b:3a:02:52:cb:
         ae:c3:49:de:f2:2e:a7:62:1d:5d:51:9a:a0:dd:76:1b:dd:80:
         10:9f:63:f3:fb:bb:89:1f:5a:5d:90:53:15:8b:f6:19:77:af:
         13:38:f8:4f:8a:02:df:28:d4:23:6f:86:43:b0:d5:72:89:2f:
         b2:17:40:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----