Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D10E320962311F1B1541CB7CE1D38B0.roa
File:                     5D10E320962311F1B1541CB7CE1D38B0.roa (raw, json)
Hash identifier:          SCom1hgqXzUvDDcphzmAVjtpzMXXgpuafQ0EL41wBjI=
Subject key identifier:   1E:B5:6D:A4:E0:B0:F3:7B:E5:F3:BD:25:38:69:43:6D:76:74:AB:8A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CBBE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D10E320962311F1B1541CB7CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 07:56:46 +0000
ROA not before:           Wed 12 Aug 2026 07:56:42 +0000
ROA not after:            Sat 19 Sep 2026 07:56:42 +0000
asID:                     11427
IP address blocks:        45.203.192.0/22 maxlen: 24
                          45.205.76.0/22 maxlen: 24
                          45.205.88.0/21 maxlen: 24
                          45.205.156.0/22 maxlen: 24
                          45.205.160.0/23 maxlen: 24
                          45.205.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117694 (0x1cbbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 07:56:42 2026 GMT
            Not After : Sep 19 07:56:42 2026 GMT
        Subject: CN=6a7c273e-5a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ee:3a:5e:f4:ab:f6:a0:2e:52:eb:77:cd:19:
                    ec:40:1c:5a:80:6b:c9:eb:c8:63:aa:21:79:18:d9:
                    17:77:9c:72:0b:88:f8:e2:db:91:e3:e7:a7:a6:e7:
                    b2:1a:14:a6:80:86:f1:91:a3:8a:c6:f8:f9:da:8c:
                    89:e7:5c:36:3a:63:52:50:7a:16:d9:26:b5:0c:db:
                    f7:f5:dc:16:9a:84:6b:c5:3d:5b:87:74:74:78:b7:
                    40:49:57:b0:20:de:e3:aa:83:f5:80:3b:80:4e:bb:
                    40:2e:48:0e:6a:54:2c:0c:9c:14:ab:4d:7e:7e:4e:
                    c0:07:31:56:66:dd:13:9e:d6:ad:ee:74:b2:c4:4c:
                    9f:cd:5b:e8:fc:fa:67:86:ce:95:69:6e:72:04:5b:
                    dd:b2:e9:5c:90:9c:e9:cd:dd:73:f7:43:bd:7b:23:
                    3e:0e:0b:7d:21:5e:a7:c3:7d:9a:a6:94:54:47:44:
                    2d:9b:a4:38:f6:a7:35:2e:3e:d9:d1:21:5f:31:39:
                    8f:84:67:82:66:3d:f9:9d:28:59:65:e2:c5:bd:66:
                    54:ee:c2:68:7b:e3:81:6b:b3:0f:87:a4:13:fa:78:
                    43:26:22:71:09:e0:cb:36:cb:e5:7f:6a:7a:77:d1:
                    8b:98:82:3a:43:7a:56:cd:de:35:b7:2e:10:3d:eb:
                    d7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B5:6D:A4:E0:B0:F3:7B:E5:F3:BD:25:38:69:43:6D:76:74:AB:8A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D10E320962311F1B1541CB7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.203.192.0/22
                  45.205.76.0/22
                  45.205.88.0/21
                  45.205.156.0-45.205.161.255
                  45.205.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:5a:5e:fa:86:7a:4c:97:ad:b6:07:37:9d:48:77:82:83:32:
         e8:75:49:10:db:8a:df:e0:d4:6d:0a:04:28:be:7e:3e:08:bf:
         d2:11:90:bb:64:d9:21:e4:89:ac:4b:b3:c7:37:ee:ae:05:fd:
         87:9c:b5:68:52:79:e0:a7:36:aa:1d:c2:46:1d:38:a9:d7:18:
         1d:5b:f6:64:58:cf:5f:0a:ea:94:86:de:49:f6:4a:e7:fe:e6:
         53:96:9c:67:a1:52:62:92:43:8b:ba:6c:25:0c:3e:db:7e:7c:
         c9:90:b2:37:b0:fa:52:16:ff:c6:13:ca:04:46:6c:d1:93:14:
         81:38:e7:7b:18:a8:5b:f0:a7:cc:63:20:da:2a:4b:6b:ac:0a:
         60:fd:80:d2:b1:1c:05:85:5d:3b:48:25:2a:2f:81:52:cf:86:
         71:86:1d:bd:52:76:58:ab:6b:53:85:47:aa:9d:b7:fa:dc:85:
         1c:1c:91:bd:cf:6b:bc:0b:60:38:c3:a9:ff:25:da:dc:31:97:
         d9:75:be:7f:45:b5:0e:c7:9d:9d:f6:bd:00:6d:25:50:8c:16:
         a6:52:e4:f3:93:a3:c0:be:45:cc:3f:a7:b8:da:13:b7:33:13:
         7b:e1:20:a5:cc:55:97:66:ab:65:84:a3:bc:3a:29:5c:de:1e:
         96:b8:98:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----