Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FFFF208C22111F181F6F10DCF1D38B0.roa
File:                     6FFFF208C22111F181F6F10DCF1D38B0.roa (raw, json)
Hash identifier:          8341+NBIwPNXySYAPMq9Y7TzrnB7pG++co9IGlK+xgc=
Subject key identifier:   43:2C:B4:C4:96:85:DD:2F:48:3B:BD:8B:B4:5B:2C:38:3A:F8:23:16
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DBB9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FFFF208C22111F181F6F10DCF1D38B0.roa
Signing time:             Wed 07 Oct 2026 07:33:50 +0000
ROA not before:           Wed 07 Oct 2026 07:33:45 +0000
ROA not after:            Sat 14 Nov 2026 07:33:45 +0000
asID:                     401650
IP address blocks:        45.195.108.0/24 maxlen: 24
                          45.195.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121785 (0x1dbb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  7 07:33:45 2026 GMT
            Not After : Nov 14 07:33:45 2026 GMT
        Subject: CN=6ac5f5de-497f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:29:0f:bc:61:df:37:7a:b6:00:4c:86:c4:dd:
                    2a:3f:b1:5c:4a:fe:70:d0:e3:a1:83:9d:ad:a0:80:
                    1d:1c:df:46:1f:e0:fd:36:43:61:f2:c6:1e:75:5c:
                    cc:32:73:6e:f8:59:ae:73:ab:c2:91:41:2c:b7:a3:
                    f4:ea:1f:2f:bb:67:86:c1:83:35:cb:de:81:ec:44:
                    69:af:d9:e6:c4:e6:df:3f:85:78:03:8e:c9:99:cf:
                    bc:05:5b:2e:57:77:4c:3f:b7:98:10:5b:8a:78:69:
                    56:99:b1:c1:31:66:fd:28:25:c3:64:13:65:73:f5:
                    67:21:31:ba:75:b3:bf:04:ee:ee:db:77:ca:97:45:
                    25:8e:28:fb:e4:a4:4a:ea:3c:d5:90:b6:46:f9:1d:
                    3c:06:76:ef:94:a1:ac:b8:ab:67:11:04:67:21:01:
                    7b:7b:c9:54:04:db:4b:bd:0a:6a:9c:8f:e6:8c:66:
                    ed:6d:2e:1a:64:0e:b9:bc:5a:7e:bf:75:67:7b:4c:
                    74:51:e9:c9:8b:4e:df:62:73:75:6a:21:4f:e1:10:
                    27:d0:3c:e1:19:1d:7e:ee:fd:bb:c5:03:c4:e7:61:
                    33:70:03:0d:ac:27:a0:15:18:dc:e1:bb:2b:25:b9:
                    54:d7:a5:4a:6e:f3:ad:bb:36:e9:b2:27:0c:6b:09:
                    1e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2C:B4:C4:96:85:DD:2F:48:3B:BD:8B:B4:5B:2C:38:3A:F8:23:16
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FFFF208C22111F181F6F10DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:8e:3d:5d:d6:59:6b:55:f7:0a:87:75:1c:d4:b2:8b:e8:9e:
         46:b8:18:39:b1:e9:79:10:c0:dc:f9:da:d1:e8:76:d0:56:c4:
         25:d5:41:08:cb:5c:45:07:e5:a2:78:ff:0b:61:d6:8b:11:25:
         52:ba:96:5b:6d:36:76:84:87:2f:08:0a:4f:97:92:92:59:b3:
         80:69:b4:13:07:fa:29:4b:f7:05:57:c4:ba:61:fd:66:62:0c:
         66:b0:60:60:21:e8:4f:69:50:1d:74:25:92:f8:d1:0e:8c:ce:
         5c:26:dd:e8:25:29:9c:45:b8:48:56:bb:33:4f:4c:3c:56:0a:
         83:32:9d:8e:e7:b8:4a:c6:4a:e0:c4:83:86:4b:56:06:5d:db:
         41:b7:ec:40:7c:a9:07:4c:01:67:14:ef:d2:87:f1:86:ed:13:
         d0:95:c1:c8:8b:dc:44:8e:d2:5e:32:fa:27:c4:9e:38:57:ad:
         4a:10:74:2d:6b:c9:05:e8:de:a8:e9:4e:a3:d6:48:a6:9e:42:
         0e:34:fa:e3:ee:af:9b:02:55:c4:4f:6c:af:24:8e:c2:48:17:
         e3:c9:c3:2c:d7:56:a2:18:92:0f:24:db:09:82:be:89:3c:3a:
         94:5f:c2:df:2a:14:fe:a2:a0:a7:3f:18:7b:76:68:e3:a5:e9:
         48:df:e7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----