Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BC6745CC56911F1A67B6205CF1D38B0.roa
File:                     4BC6745CC56911F1A67B6205CF1D38B0.roa (raw, json)
Hash identifier:          MCDexVxiFXZfOnJ+QbYN/t8vsDxH1HDjCnw+od6EITA=
Subject key identifier:   14:27:5E:E6:A7:D1:79:C2:93:D8:6D:A0:5E:D5:B7:F1:13:7D:16:97
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DCB7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BC6745CC56911F1A67B6205CF1D38B0.roa
Signing time:             Sun 11 Oct 2026 11:45:46 +0000
ROA not before:           Sun 11 Oct 2026 11:45:41 +0000
ROA not after:            Wed 18 Nov 2026 11:45:41 +0000
asID:                     54801
IP address blocks:        45.199.191.0/24 maxlen: 24
                          45.202.8.0/24 maxlen: 24
                          45.202.9.0/24 maxlen: 24
                          45.202.10.0/24 maxlen: 24
                          45.202.11.0/24 maxlen: 24
                          45.202.63.0/24 maxlen: 24
                          45.204.1.0/24 maxlen: 24
                          45.204.64.0/24 maxlen: 24
                          45.204.71.0/24 maxlen: 24
                          45.207.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122039 (0x1dcb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 11 11:45:41 2026 GMT
            Not After : Nov 18 11:45:41 2026 GMT
        Subject: CN=6acb76ea-f11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1f:80:9d:20:b3:99:6c:8e:17:9b:d9:71:ed:
                    eb:43:7c:24:0e:4d:2c:0a:3a:d9:56:e3:66:1e:f9:
                    7a:f5:45:4f:93:45:7c:af:70:d2:b2:37:20:38:2d:
                    99:81:81:00:51:6b:90:64:bc:32:50:37:2a:c9:6d:
                    91:ec:89:52:94:37:f8:b8:03:f0:46:4e:20:e8:b6:
                    ac:49:6a:32:8f:8d:d8:3a:cd:74:aa:b0:cd:6d:cf:
                    85:a7:d9:66:2d:7b:a4:e3:5b:9c:6e:b2:03:7a:3b:
                    7a:6d:78:ac:a2:39:b9:77:b0:b3:3a:b7:28:cb:7b:
                    d2:37:13:6d:16:5d:ce:17:e4:12:db:8b:73:ef:9e:
                    7a:28:0a:c2:ac:4b:bd:0a:44:7a:49:c2:12:29:39:
                    71:d1:13:86:6a:50:ec:8c:2d:ef:5c:67:14:9a:f4:
                    ae:03:b5:6a:9c:14:ec:16:52:a8:f7:93:e5:c8:9c:
                    f6:e4:af:d9:fa:89:c0:2c:2a:59:3a:82:0d:94:90:
                    79:8f:2f:da:46:0b:02:c1:4e:c0:eb:fa:c4:60:8e:
                    70:80:9f:43:93:28:3c:1c:cc:7e:f0:7a:93:92:bd:
                    e6:44:bb:b3:7b:c2:c0:8d:4f:ba:8f:65:7a:f9:d5:
                    c9:9d:06:37:68:2a:1d:69:60:2d:b6:53:6d:29:62:
                    74:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:27:5E:E6:A7:D1:79:C2:93:D8:6D:A0:5E:D5:B7:F1:13:7D:16:97
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BC6745CC56911F1A67B6205CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.191.0/24
                  45.202.8.0/22
                  45.202.63.0/24
                  45.204.1.0/24
                  45.204.64.0/24
                  45.204.71.0/24
                  45.207.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:33:6c:67:7f:fd:91:97:c9:d5:40:01:8b:80:2a:e3:ff:a6:
         17:72:db:6b:27:a6:80:b7:04:ff:bc:ca:27:ce:02:c1:5a:75:
         06:1d:cc:f4:c4:85:65:01:43:80:77:c9:7f:80:79:87:e1:d3:
         96:c4:9c:d5:28:80:fe:55:0a:34:6d:c6:10:86:6e:da:71:11:
         f9:8d:02:df:6d:3c:b4:ff:0e:3b:7b:09:67:45:91:95:3e:de:
         57:82:ad:e4:87:1b:4d:ae:43:b1:b9:09:44:0f:b3:fb:69:e9:
         8f:85:79:0d:01:13:4b:74:0e:53:f5:f7:01:50:48:a0:50:bf:
         86:5e:a0:e2:1a:a8:77:b5:99:e4:70:1f:e2:58:a4:57:71:e0:
         61:56:bc:68:00:1d:b6:1d:25:4c:f8:32:5a:14:a8:dc:78:60:
         33:cd:c9:88:a3:d4:b0:c4:82:fb:39:b3:a5:1f:e7:30:0b:fe:
         cf:71:9a:90:ad:4d:a1:37:b9:a8:40:c6:83:16:a0:a3:e8:63:
         30:9f:2a:eb:f7:d9:b3:b9:f0:ba:5d:02:07:51:39:82:46:b5:
         ce:ad:dc:d8:7d:e3:7d:59:35:37:60:2a:6c:b4:c6:db:f3:85:
         62:b1:ac:0e:f1:78:59:38:27:3a:4e:84:bd:be:79:d8:a1:b6:
         da:3d:82:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----