Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FC39B64CABE11F188E851D7CE1D38B0.roa
File:                     6FC39B64CABE11F188E851D7CE1D38B0.roa (raw, json)
Hash identifier:          wV6jx2qtu0Qgbjh6qDRj0ka1kOhdxpv+cTDcOHN4XXk=
Subject key identifier:   C2:7C:C5:4E:77:FE:45:3D:D8:10:0B:CA:26:59:B4:11:80:60:59:DE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DE67
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FC39B64CABE11F188E851D7CE1D38B0.roa
Signing time:             Sun 18 Oct 2026 06:37:50 +0000
ROA not before:           Sun 18 Oct 2026 06:37:44 +0000
ROA not after:            Wed 25 Nov 2026 06:37:44 +0000
asID:                     151066
IP address blocks:        45.195.48.0/22 maxlen: 24
                          45.195.48.0/24 maxlen: 24
                          45.195.49.0/24 maxlen: 24
                          45.195.50.0/24 maxlen: 24
                          45.195.51.0/24 maxlen: 24
                          45.195.154.0/23 maxlen: 24
                          45.195.154.0/24 maxlen: 24
                          45.195.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122471 (0x1de67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 18 06:37:44 2026 GMT
            Not After : Nov 25 06:37:44 2026 GMT
        Subject: CN=6ad4693d-0ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b3:8d:de:6a:de:41:8d:ff:9d:8a:6d:4a:c7:
                    e0:68:01:a5:cb:d7:57:cc:82:83:6b:28:60:bc:e9:
                    60:bd:a6:38:9d:18:45:48:d1:8d:07:b2:7d:20:95:
                    92:f0:de:fe:21:00:8f:7c:39:0a:89:b9:f6:ac:1e:
                    a0:a2:07:d4:00:75:db:3c:a1:a6:80:c0:62:39:92:
                    cf:89:66:42:e8:16:70:d9:c0:e1:c1:c3:fa:99:ec:
                    06:f1:8c:6c:1c:34:d5:f5:3c:32:89:20:93:ee:af:
                    bd:99:26:04:d3:76:6c:20:a3:aa:2f:33:2b:9c:e1:
                    46:cf:a0:a5:75:61:d2:94:f2:54:8d:62:18:16:ed:
                    e4:14:8a:66:ca:a8:82:e1:2b:c4:ef:49:13:b3:e0:
                    69:14:a5:58:6b:c5:d5:3f:5c:be:63:9a:b8:59:3b:
                    66:48:45:dc:09:ed:6e:df:88:64:8a:1b:23:99:4c:
                    3b:2c:49:55:c7:da:5a:57:98:93:3a:bb:10:59:60:
                    72:77:61:9e:13:cf:4d:eb:a1:7e:bf:d7:2b:ce:73:
                    ba:01:f5:dc:8a:d8:d2:da:2d:12:3e:0e:c8:6a:33:
                    56:7c:1c:e6:35:07:31:3b:0e:de:40:65:28:ce:87:
                    5e:c6:87:37:62:2b:73:33:bd:d4:72:ca:08:63:6d:
                    fb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7C:C5:4E:77:FE:45:3D:D8:10:0B:CA:26:59:B4:11:80:60:59:DE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FC39B64CABE11F188E851D7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.48.0/22
                  45.195.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:16:e5:a0:e9:a5:5b:e2:37:fa:17:cb:c4:eb:1c:17:06:00:
         a6:6b:56:18:e5:45:dc:b3:45:01:50:a0:e1:95:6e:99:ff:dc:
         55:7f:62:7c:c4:d0:15:eb:88:c1:c3:50:22:84:b4:e9:76:ca:
         d9:8e:68:57:8b:f2:13:26:15:3a:27:1f:90:f0:0e:5f:8c:b7:
         6f:da:83:ca:34:a6:01:b9:d8:d0:4b:64:84:e7:dc:55:18:95:
         06:cf:b9:fd:a9:5f:a7:e2:74:d6:58:c2:09:c3:7c:65:59:e4:
         d2:60:ba:1c:8f:73:6f:8e:b6:5e:ca:ce:ab:b4:24:a0:7b:f3:
         1a:69:e2:9e:f3:2c:b2:48:23:32:84:61:87:a2:2a:ae:f8:c9:
         36:31:98:9f:9c:b9:89:5f:ee:d1:c1:ff:00:37:59:47:75:d2:
         ff:de:b2:57:30:bf:39:e5:fb:0f:f9:c3:f4:a3:af:98:6a:4d:
         da:bd:52:3e:03:1b:ba:22:15:db:38:50:2e:bd:f7:83:f4:e9:
         b5:67:34:a2:5a:01:d1:73:6d:a5:d9:6a:11:55:2a:26:ae:ac:
         22:78:14:89:a6:dc:6d:16:88:32:d6:b9:cf:70:dc:92:94:3e:
         1d:e4:36:11:bd:b4:90:75:49:f0:2e:b3:c1:22:f4:8d:5a:37:
         9f:6f:dc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----