Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/523C8392963111F18B2B6A09CF1D38B0.roa
File:                     523C8392963111F18B2B6A09CF1D38B0.roa (raw, json)
Hash identifier:          eN/vcEaTfCmExUkscbIXEAFDmI6cRA9IPZhQOJwvsDA=
Subject key identifier:   35:02:62:49:4D:3C:EE:6A:50:A5:F1:22:34:77:B5:22:7F:1B:AC:52
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CBEB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/523C8392963111F18B2B6A09CF1D38B0.roa
Signing time:             Wed 12 Aug 2026 09:36:41 +0000
ROA not before:           Wed 12 Aug 2026 09:36:36 +0000
ROA not after:            Sun 12 Aug 2029 09:36:36 +0000
asID:                     17561
IP address blocks:        45.200.252.0/24 maxlen: 24
                          45.200.253.0/24 maxlen: 24
                          45.200.254.0/24 maxlen: 24
                          45.200.255.0/24 maxlen: 24
                          45.202.76.0/24 maxlen: 24
                          45.202.77.0/24 maxlen: 24
                          45.202.78.0/24 maxlen: 24
                          45.202.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117739 (0x1cbeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 09:36:36 2026 GMT
            Not After : Aug 12 09:36:36 2029 GMT
        Subject: CN=6a7c3ea8-7dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:29:d3:37:77:03:c6:32:31:ca:c7:cd:9f:ff:
                    6a:f2:06:89:b6:56:0a:2b:97:c0:4a:58:26:34:02:
                    f6:18:f1:dd:f1:a9:5b:e9:df:54:be:ea:96:e6:1b:
                    98:33:d8:e2:a5:3a:64:fb:50:ba:20:df:56:c8:c2:
                    f8:77:81:a3:d9:f9:20:a0:97:fd:65:04:41:fa:af:
                    fd:c3:50:65:90:88:63:48:b1:bc:4f:76:ff:5b:3d:
                    10:24:69:ef:28:5c:b9:cd:5e:f8:7f:e1:4b:32:ca:
                    cb:45:30:1d:46:91:83:f0:45:40:60:4b:d8:66:18:
                    41:7b:63:4e:ba:cc:14:90:60:d4:d6:18:b8:76:7c:
                    d2:18:b2:6e:db:06:56:d1:0e:fb:61:4f:e2:5c:03:
                    d7:a4:73:59:c9:b1:65:59:b7:33:46:14:34:07:30:
                    89:f0:13:83:2a:3b:fb:e5:e8:08:15:21:bc:be:fe:
                    9c:99:b5:48:64:84:f7:13:e1:ac:bf:4a:17:15:ee:
                    5c:ef:f3:40:97:11:ce:50:b4:35:11:1b:33:f4:86:
                    7f:c3:d1:cf:5e:d6:57:a3:0f:18:fa:5a:42:b5:89:
                    03:3f:ca:94:fe:4a:98:68:f6:c7:fd:ed:ea:da:d3:
                    7e:7b:48:27:69:2e:f9:7b:76:d1:ce:27:f4:69:23:
                    0d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:02:62:49:4D:3C:EE:6A:50:A5:F1:22:34:77:B5:22:7F:1B:AC:52
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/523C8392963111F18B2B6A09CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.252.0/22
                  45.202.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:77:4d:7d:b9:29:f5:95:f4:ff:c8:6f:11:44:55:e5:83:d0:
         b4:e1:5a:40:17:03:fc:15:a1:22:f4:6a:25:c4:6a:86:20:1e:
         a4:c2:e1:6b:2f:99:21:7e:bd:f9:a5:10:a6:96:19:64:7a:82:
         65:fe:d7:ba:e8:c7:87:ba:11:1e:9d:db:c5:be:ec:8f:3e:d0:
         df:50:43:69:8d:1d:38:9d:71:c4:64:aa:e9:ac:ae:fe:38:5e:
         11:b2:05:c5:d3:e7:13:f2:f2:f8:0d:3c:83:97:8b:de:a8:d8:
         c1:af:da:3d:f8:d2:4f:b7:b7:93:85:4a:c7:f0:ad:9a:22:2e:
         a4:45:df:23:6d:b3:9a:74:f9:fa:17:74:30:dd:b5:3c:2a:38:
         e0:14:9d:70:9d:36:0e:f0:16:f7:3a:b5:3f:89:1c:57:e7:5e:
         7d:d3:e3:32:27:43:b2:37:1b:49:c2:1c:10:b5:ca:3c:ec:4e:
         60:7a:30:23:a2:5b:35:de:0c:d4:8f:7f:95:89:32:1e:dd:3d:
         43:c4:51:a0:0d:8d:1b:fe:5d:25:11:95:84:68:94:94:e9:54:
         10:be:d4:22:ba:20:9f:0a:c3:4d:08:14:b0:2e:29:8d:85:8c:
         c5:24:12:f2:cb:52:64:39:fc:50:cd:c4:69:29:25:63:6f:1e:
         18:ae:01:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----