Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44465F90BF0F11F18A9D0D00CF1D38B0.roa
File:                     44465F90BF0F11F18A9D0D00CF1D38B0.roa (raw, json)
Hash identifier:          PVV5S+lwWe/B1D04xvkiWi7iFjR41onbiB+fUKfVAoA=
Subject key identifier:   FA:0F:DA:8B:1E:E9:0E:9A:05:A6:EF:CC:B0:1E:63:A7:A1:15:E2:79
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA4F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44465F90BF0F11F18A9D0D00CF1D38B0.roa
Signing time:             Sat 03 Oct 2026 09:46:12 +0000
ROA not before:           Sat 03 Oct 2026 09:46:08 +0000
ROA not after:            Tue 10 Nov 2026 09:46:08 +0000
asID:                     138915
IP address blocks:        45.197.64.0/24 maxlen: 24
                          45.197.74.0/24 maxlen: 24
                          45.197.75.0/24 maxlen: 24
                          45.197.96.0/24 maxlen: 24
                          45.197.97.0/24 maxlen: 24
                          45.197.106.0/24 maxlen: 24
                          45.197.107.0/24 maxlen: 24
                          45.197.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121423 (0x1da4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  3 09:46:08 2026 GMT
            Not After : Nov 10 09:46:08 2026 GMT
        Subject: CN=6ac0cee4-1bb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:85:78:4b:d6:23:0f:37:c5:c3:94:b9:05:77:
                    29:b4:53:ce:89:5f:b9:7d:15:f4:8d:a4:42:58:da:
                    d1:d1:a6:45:47:2a:08:10:cb:f3:d7:98:ce:39:d3:
                    25:63:1a:dd:1c:79:e8:95:e0:06:b5:7d:0c:e7:f1:
                    25:80:6c:8d:3d:1d:72:19:bb:fc:eb:20:f2:98:23:
                    67:83:a6:0e:24:1c:db:03:d5:6f:3b:f6:4b:10:18:
                    f7:10:52:d5:d4:0e:3a:ea:eb:49:96:71:45:8c:d9:
                    0e:32:1a:cf:ee:d1:4d:87:f3:02:7b:c2:18:a1:f9:
                    0d:86:36:f9:31:90:2c:56:ed:09:c3:1f:fa:a9:ad:
                    2e:5c:29:8d:75:e5:00:bf:e0:5a:1e:15:1c:38:b0:
                    81:52:1f:5e:eb:ea:84:b9:d7:09:a6:a2:e2:76:a8:
                    4b:34:23:a3:84:50:6f:74:1b:79:9f:fc:3a:c2:81:
                    86:97:f2:aa:5b:b0:de:b4:0d:17:70:9b:59:a6:4a:
                    d5:e7:78:0b:88:99:4e:62:23:be:2a:03:2b:07:9c:
                    de:ea:c9:cd:6b:83:f1:e3:04:d6:e3:ba:11:64:60:
                    83:17:76:6a:97:b0:84:ba:a2:5f:7b:9f:92:8d:cc:
                    17:76:77:56:61:65:68:31:ad:5a:ac:0d:c9:45:85:
                    32:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0F:DA:8B:1E:E9:0E:9A:05:A6:EF:CC:B0:1E:63:A7:A1:15:E2:79
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44465F90BF0F11F18A9D0D00CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.64.0/24
                  45.197.74.0/23
                  45.197.96.0/23
                  45.197.106.0/23
                  45.197.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:10:e0:26:1d:c8:6d:44:86:63:bc:86:e8:2e:0d:0f:db:5b:
         0d:e3:3d:c2:19:4f:05:a1:6b:13:9c:73:df:b2:96:b4:14:83:
         24:b2:90:09:ad:71:7c:2b:d5:9a:0f:6f:62:48:8a:4c:4b:6e:
         46:b6:80:4a:2b:67:58:05:51:bb:d4:3a:43:b9:ee:53:ab:b2:
         44:e0:93:92:77:19:6f:85:bb:5d:f1:c0:da:6b:ff:57:70:2c:
         a2:92:84:bd:c0:62:35:f8:ac:cb:e9:bb:ab:6d:6f:6a:18:20:
         b7:f6:ec:4d:af:57:94:15:6e:c6:57:20:14:63:ec:77:28:04:
         6d:75:81:00:da:2e:6e:48:18:1f:9e:16:63:0f:b9:04:a7:4b:
         7f:82:24:3f:17:c2:df:70:5f:23:d6:35:ad:a2:87:7e:21:57:
         20:ad:63:84:62:0b:fc:67:e0:12:ec:a0:42:42:50:a8:36:cf:
         54:dc:1e:cc:68:4b:5a:86:19:1d:4b:62:1f:97:b5:33:74:6f:
         df:d0:a8:6b:58:ca:f1:c8:c1:62:58:08:3d:32:51:7c:3e:64:
         aa:ea:a1:a7:89:ca:c9:83:73:d6:17:ba:31:1c:d6:b7:3b:82:
         08:66:68:a6:c1:04:08:aa:43:21:b4:06:38:ab:06:7e:c1:51:
         ea:13:4c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----