Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C7637869D5111F1B7BDD3C6CE1D38B0.roa
File:                     6C7637869D5111F1B7BDD3C6CE1D38B0.roa (raw, json)
Hash identifier:          rgqDonQgXQi9SwhM1UBHyIJZ7yEwvOZY6pqkL4ivx50=
Subject key identifier:   EA:3D:A9:BD:CE:4F:E7:37:62:6E:86:75:43:00:E3:C8:47:A3:4A:05
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CFB8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C7637869D5111F1B7BDD3C6CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 11:14:07 +0000
ROA not before:           Fri 21 Aug 2026 11:14:03 +0000
ROA not after:            Tue 29 Sep 2026 11:14:03 +0000
asID:                     44559
IP address blocks:        45.199.220.0/24 maxlen: 24
                          45.199.231.0/24 maxlen: 24
                          45.199.232.0/24 maxlen: 24
                          45.199.233.0/24 maxlen: 24
                          45.199.234.0/24 maxlen: 24
                          45.199.235.0/24 maxlen: 24
                          45.199.236.0/24 maxlen: 24
                          45.199.237.0/24 maxlen: 24
                          45.199.238.0/24 maxlen: 24
                          45.199.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118712 (0x1cfb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 11:14:03 2026 GMT
            Not After : Sep 29 11:14:03 2026 GMT
        Subject: CN=6a8832fe-7c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:00:af:ad:0a:08:d1:a1:02:66:3c:a5:0f:60:
                    f4:07:b2:bd:0f:92:22:a3:ef:02:dd:30:a9:ce:50:
                    e8:4b:2e:bd:cf:a2:cd:3c:71:af:83:d8:78:91:3f:
                    12:47:8a:3e:28:19:5a:ea:64:f9:29:42:78:c6:51:
                    77:49:02:c5:b7:23:b9:07:46:1b:dd:92:f2:a6:e7:
                    53:c8:57:2a:7f:3c:78:37:c3:74:29:82:9a:e6:dc:
                    74:69:81:4d:4f:ae:e8:16:2d:4c:08:fe:43:f0:f3:
                    7c:6e:e8:62:ef:44:d5:91:e0:b1:56:ef:98:25:27:
                    e5:e9:24:94:b3:34:7b:e1:20:c6:b9:0d:8a:c4:81:
                    d8:52:d7:fc:31:e2:78:3c:26:6f:8f:38:3a:56:64:
                    77:72:b6:79:08:ee:3b:3c:6c:ea:22:fa:d3:fe:f5:
                    92:28:ae:6a:dd:f4:0b:7d:ad:78:92:2d:28:5e:dd:
                    27:6b:64:de:58:95:ce:2f:aa:b7:ef:c4:45:5a:fe:
                    ab:f9:cd:b5:79:44:c2:04:75:75:c0:d4:b7:65:3c:
                    7f:15:f3:3a:e1:1d:8e:aa:46:3c:a5:f3:8b:61:0b:
                    49:30:77:aa:5b:d9:25:57:8c:78:f6:f7:a3:f1:ab:
                    a4:d3:b3:40:79:d1:ae:a3:88:97:96:7d:03:e0:19:
                    e7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3D:A9:BD:CE:4F:E7:37:62:6E:86:75:43:00:E3:C8:47:A3:4A:05
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C7637869D5111F1B7BDD3C6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.220.0/24
                  45.199.231.0-45.199.239.255

    Signature Algorithm: sha256WithRSAEncryption
         09:65:85:9e:79:10:25:c5:b2:44:3f:36:2a:b8:c6:16:a3:a3:
         57:c7:79:2d:6c:54:d5:a3:35:ee:4a:e7:70:60:81:b8:4d:09:
         b7:7f:e8:b6:d4:1a:73:c5:6a:24:01:1b:91:3b:70:d6:66:0d:
         f5:8b:37:bc:d0:62:27:c4:90:07:fd:86:00:54:bd:e0:c1:b3:
         91:08:51:5f:f1:dd:96:bf:47:57:c5:e9:af:18:b4:97:d9:08:
         b7:73:ec:ad:b2:5c:2c:ea:34:fe:c9:ae:ff:6d:20:17:6c:0f:
         c4:c9:fb:58:fd:dc:03:03:90:19:6d:49:9e:c2:50:ba:42:b7:
         15:55:15:3b:ba:25:4f:b0:46:a3:42:76:c7:a2:25:8f:0f:03:
         88:fd:7e:06:09:2d:b3:b0:0d:cd:4b:cf:ff:3c:1e:6a:e6:1d:
         a1:f8:10:c5:b8:ac:4e:c3:b3:be:dd:29:ca:74:13:4f:0e:c4:
         b2:61:91:ed:8a:7d:d8:bd:58:cd:73:c0:45:7a:9c:99:3d:66:
         a7:1f:bd:31:3d:04:03:71:b5:33:0c:d4:e9:92:5e:c2:99:40:
         2d:bc:1a:a2:88:8f:a2:d5:1a:9d:69:72:2c:10:86:c6:1c:39:
         64:f7:9d:bc:3e:26:dc:1a:d6:1c:b1:3b:a0:7c:29:2b:ce:2e:
         59:ac:d7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----