Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60C58C22BE3811F19731B208CF1D38B0.roa
File:                     60C58C22BE3811F19731B208CF1D38B0.roa (raw, json)
Hash identifier:          jGAO31KEYWY7iYa2RfUk6nrMuzHNZAmMeTkYrS9CMAs=
Subject key identifier:   75:57:B2:A7:2B:F1:14:01:3A:D4:D8:F6:6F:F8:16:22:4C:59:A2:B9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA12
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60C58C22BE3811F19731B208CF1D38B0.roa
Signing time:             Fri 02 Oct 2026 08:07:58 +0000
ROA not before:           Fri 02 Oct 2026 08:07:54 +0000
ROA not after:            Mon 09 Nov 2026 08:07:54 +0000
asID:                     202656
IP address blocks:        45.202.192.0/24 maxlen: 24
                          45.202.193.0/24 maxlen: 24
                          45.202.213.0/24 maxlen: 24
                          45.207.2.0/24 maxlen: 24
                          45.207.3.0/24 maxlen: 24
                          45.207.6.0/24 maxlen: 24
                          45.207.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121362 (0x1da12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  2 08:07:54 2026 GMT
            Not After : Nov  9 08:07:54 2026 GMT
        Subject: CN=6abf665e-ccd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:0d:50:d3:90:fd:a0:da:ee:92:44:e1:5a:
                    ed:07:87:c7:c5:b3:3e:1b:80:8a:8f:8c:5a:53:46:
                    f2:50:ff:20:f5:67:b0:74:82:65:6f:4e:eb:89:5d:
                    db:eb:ab:f0:95:18:16:15:b8:ca:45:35:b5:1a:f7:
                    e5:78:97:1d:53:d0:6b:3a:11:1a:63:98:f0:d6:b3:
                    27:bc:0d:fb:72:f4:cb:dc:fd:f5:0b:60:db:04:5a:
                    93:5d:29:06:02:eb:23:c2:fd:be:d3:72:35:8c:75:
                    77:6b:6b:97:12:13:ef:f4:b3:b3:72:2a:45:a6:f3:
                    6b:90:32:be:6c:e6:b5:03:b3:7a:a1:03:8b:6f:00:
                    ef:8b:45:e2:6b:88:89:7b:ee:7a:98:9c:f0:4e:c8:
                    5d:7a:5d:f3:7e:43:77:16:9f:89:70:d3:be:92:ac:
                    59:97:b9:61:a3:ef:e0:25:25:0c:a6:fe:fd:71:c7:
                    76:77:db:f7:5b:16:25:49:e0:02:4c:ae:17:2c:03:
                    53:87:75:a9:76:26:b7:32:65:80:53:81:2e:2b:2a:
                    8a:c1:84:60:4b:5b:20:ac:f5:35:af:b8:a9:9b:07:
                    26:83:8b:ea:b1:50:e4:e4:9e:60:c3:cd:e1:7a:42:
                    a4:36:5d:17:46:61:ee:63:7f:68:26:3a:0e:5c:11:
                    b6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:57:B2:A7:2B:F1:14:01:3A:D4:D8:F6:6F:F8:16:22:4C:59:A2:B9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/60C58C22BE3811F19731B208CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.192.0/23
                  45.202.213.0/24
                  45.207.2.0/23
                  45.207.6.0/24
                  45.207.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:14:6a:20:f6:db:a9:ae:90:c9:b3:6a:12:00:71:d3:bb:b9:
         5e:04:75:65:d3:39:d7:e2:dc:22:aa:f2:be:24:00:ea:02:33:
         e1:32:25:81:e8:fa:83:a5:fa:df:1c:a6:67:33:41:29:a5:06:
         a1:3d:44:73:25:b0:fb:1b:33:71:ba:d8:1d:36:b4:17:d8:0a:
         05:4c:a4:01:3a:ab:0d:67:39:7e:4c:47:09:fc:9e:9c:72:e7:
         d5:c8:80:82:ad:e8:ff:38:52:0a:76:cc:7a:c4:00:10:45:75:
         7b:0f:4f:8c:5f:77:45:10:39:7f:86:ea:a7:05:df:0f:e6:92:
         8e:91:f7:cc:8d:8a:35:34:e5:32:1e:00:39:24:2f:5c:9d:7e:
         ec:9f:fd:dc:d8:f2:09:03:e7:8c:8f:66:02:35:bf:b7:17:79:
         44:6f:e0:02:f3:c0:50:e8:8a:f7:7c:b0:b8:ad:5f:4c:1d:82:
         75:5d:b1:a7:5c:3a:b5:13:1b:02:d7:3e:0e:22:a8:e8:b9:73:
         6a:89:21:24:1d:90:63:a9:d2:26:91:7c:e2:50:ab:d7:64:e6:
         c5:58:03:36:da:86:0b:55:83:86:b0:f9:7a:62:75:bd:d9:b5:
         b5:d9:36:be:28:5e:c7:0d:a3:6a:7a:34:ab:40:c7:4c:17:5c:
         20:53:d7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----