Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A7D3366923C11F18E932C15CF1D38B0.roa
File:                     4A7D3366923C11F18E932C15CF1D38B0.roa (raw, json)
Hash identifier:          ItC+Izr9P3NZyoB91VRynNKcNFgpSUVEjroIjMsurSo=
Subject key identifier:   00:48:3D:82:94:4D:FF:5B:2B:B1:27:CA:2C:A6:2A:86:35:E5:29:3A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CA3F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A7D3366923C11F18E932C15CF1D38B0.roa
Signing time:             Fri 07 Aug 2026 08:45:08 +0000
ROA not before:           Fri 07 Aug 2026 08:45:03 +0000
ROA not after:            Thu 22 Apr 2027 08:45:03 +0000
asID:                     152450
IP address blocks:        45.195.52.0/22 maxlen: 24
                          45.195.56.0/23 maxlen: 24
                          45.204.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117311 (0x1ca3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  7 08:45:03 2026 GMT
            Not After : Apr 22 08:45:03 2027 GMT
        Subject: CN=6a759b13-ccfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5c:75:4e:45:5b:0d:61:44:4e:f3:68:54:2f:
                    01:6f:30:50:07:b1:33:c9:f8:e6:a0:c1:07:b1:be:
                    28:d3:59:f2:6d:8a:66:28:d9:ad:9a:47:60:28:d9:
                    9b:c5:9a:df:a9:77:09:82:26:bc:3e:9e:1d:88:d2:
                    c3:7a:b0:7a:6b:f3:4a:94:b5:38:32:1c:cc:8e:6e:
                    cc:b1:c3:2a:df:b5:22:dd:50:05:b5:d7:9a:51:07:
                    6e:37:4f:30:58:fd:f0:a1:02:07:27:b6:a1:33:45:
                    05:ea:5d:71:94:fd:37:3a:a9:f1:12:39:d9:29:c4:
                    a2:28:0c:58:56:48:6b:46:c4:dd:63:cc:39:ea:ac:
                    39:df:a2:8f:50:4b:58:d2:e0:2f:17:c2:59:cb:30:
                    4d:1c:da:ca:4c:d9:48:7b:9b:3a:76:15:45:e9:1e:
                    57:5a:29:2a:f2:b0:94:32:8a:35:8b:40:c8:d6:cd:
                    1a:21:b3:a2:90:d8:22:88:ab:e0:85:06:ef:30:ac:
                    03:18:c1:dd:ab:f3:d5:ba:a4:c6:b8:80:bb:8d:12:
                    7d:60:81:ff:2f:28:3f:73:73:5f:c5:cd:f1:84:65:
                    e4:b8:e9:e2:14:99:98:0a:5c:de:38:30:40:21:2f:
                    b0:b3:59:47:9b:18:6e:0e:7d:c6:85:a4:97:a1:bc:
                    be:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:48:3D:82:94:4D:FF:5B:2B:B1:27:CA:2C:A6:2A:86:35:E5:29:3A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A7D3366923C11F18E932C15CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.52.0-45.195.57.255
                  45.204.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         64:51:af:f2:e1:43:f0:46:65:a2:3e:8c:5a:ad:76:72:07:a5:
         10:33:39:66:83:94:ce:1d:18:e7:1e:6e:25:e0:0c:c6:b5:a6:
         7d:96:88:b1:82:79:66:37:3e:e8:68:ad:b6:f7:2e:09:44:d3:
         31:f4:9b:c2:2f:6e:21:4e:87:c8:7c:58:d3:9f:a2:b2:92:48:
         36:47:6d:f1:02:aa:52:4e:0e:1b:38:8b:b7:b1:5f:fc:a6:cf:
         57:d9:15:45:7b:fb:fd:4b:b2:68:43:0b:83:41:2a:db:b3:0c:
         ab:19:3e:5f:01:c0:81:21:cb:f7:0b:7c:ea:07:0c:95:67:01:
         56:c8:f0:4e:45:cd:2d:0e:b3:ff:db:44:0c:18:53:d0:df:96:
         05:ca:31:f6:37:7b:6b:20:af:03:2e:ed:da:ec:6b:45:c4:70:
         78:30:0d:e3:2e:c9:86:35:6f:95:41:dd:6c:be:51:c8:87:e6:
         be:1d:aa:64:c0:e7:89:f7:2f:32:c7:0d:f0:7d:66:47:65:12:
         f2:19:d2:dc:df:3b:83:f5:bd:fb:33:e0:60:25:a0:32:a9:41:
         0f:ac:f6:fc:30:c8:9e:e8:ba:98:2f:e8:bb:5b:4b:a3:8c:5d:
         0f:29:14:0f:2d:b7:98:35:ed:8e:ad:5b:09:9e:48:ac:b4:8a:
         72:4b:72:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----