Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72EBE4028F1F11F1AA76C3B7CE1D38B0.roa
File:                     72EBE4028F1F11F1AA76C3B7CE1D38B0.roa (raw, json)
Hash identifier:          XZjCoAk4aPIsuOPV4v9Z/Nl8w8NESXHSG1PLPRo+Dx0=
Subject key identifier:   A2:C3:F5:FD:27:C0:05:A9:3F:FB:8E:F2:5F:D4:B2:0E:3B:E5:1A:F0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C98D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72EBE4028F1F11F1AA76C3B7CE1D38B0.roa
Signing time:             Mon 03 Aug 2026 09:41:06 +0000
ROA not before:           Mon 03 Aug 2026 09:41:02 +0000
ROA not after:            Thu 10 Sep 2026 09:41:02 +0000
asID:                     63139
IP address blocks:        45.197.80.0/24 maxlen: 24
                          45.197.81.0/24 maxlen: 24
                          45.197.82.0/24 maxlen: 24
                          45.197.83.0/24 maxlen: 24
                          45.197.84.0/24 maxlen: 24
                          45.197.85.0/24 maxlen: 24
                          45.197.86.0/24 maxlen: 24
                          45.197.87.0/24 maxlen: 24
                          45.197.88.0/24 maxlen: 24
                          45.197.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117133 (0x1c98d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  3 09:41:02 2026 GMT
            Not After : Sep 10 09:41:02 2026 GMT
        Subject: CN=6a706232-82e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e4:ab:59:71:bb:0b:a0:d1:13:40:9b:1a:87:
                    5d:15:73:a5:10:af:24:79:d1:f6:f3:f4:c8:fe:0c:
                    e8:5e:66:85:76:d1:4a:6a:9c:dc:69:29:7c:42:74:
                    21:e3:75:06:86:ab:eb:de:57:90:47:ea:93:0d:6e:
                    3b:29:bb:9f:35:da:fa:20:6e:79:7e:1f:db:6a:29:
                    0b:92:3f:1a:ad:53:cb:f0:96:e3:6b:7b:c2:5d:55:
                    63:6b:3a:a5:03:cb:1f:56:d6:04:5b:2d:a4:d8:06:
                    c8:ad:bf:3d:d7:ac:53:e6:33:ad:5b:4b:a9:e7:96:
                    72:1b:82:a7:e2:20:bc:7b:c3:3f:92:08:76:04:91:
                    61:e9:45:14:e8:72:eb:ad:70:cb:46:8d:2c:58:a7:
                    98:b8:9b:2e:64:a9:24:ae:e0:e3:af:47:9b:b0:12:
                    d1:f2:cd:85:1e:cf:2b:0c:17:a9:f2:7b:94:9b:1d:
                    e5:88:94:63:91:05:be:99:fe:0d:e8:48:2d:8c:9b:
                    f0:6d:66:81:a9:9e:33:1c:f5:f5:a7:e3:83:35:f5:
                    e4:34:6c:9e:d4:8a:ec:d0:6e:45:08:c8:f9:0b:07:
                    ae:75:70:52:ed:32:26:87:13:01:bf:b4:18:91:dd:
                    e3:ee:e8:5f:dd:1a:36:74:3a:9c:ca:ac:61:7d:b8:
                    64:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C3:F5:FD:27:C0:05:A9:3F:FB:8E:F2:5F:D4:B2:0E:3B:E5:1A:F0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72EBE4028F1F11F1AA76C3B7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.80.0-45.197.89.255

    Signature Algorithm: sha256WithRSAEncryption
         a4:9b:23:a9:8c:6a:c5:34:ef:aa:28:a5:16:79:8b:b2:3c:d0:
         b9:b4:f8:77:68:9e:9f:7a:c0:5b:f8:45:ea:d6:89:fe:b1:d5:
         10:85:ad:e4:26:16:c6:57:4a:4b:c2:d2:17:30:e2:b3:e5:a6:
         c4:eb:54:16:b9:a8:b1:26:a1:c6:75:98:27:56:11:be:c0:39:
         b9:e2:d3:f3:53:af:a6:33:f3:7d:ce:ad:6b:c5:02:45:17:f8:
         4e:fa:a8:d3:cf:74:00:fa:64:cd:e2:f8:64:d4:78:e5:c5:17:
         72:2d:8d:d4:d0:26:2b:2f:6c:1f:ed:2a:c2:e9:79:57:9d:ab:
         04:bd:9c:cb:02:58:0a:4c:f6:0a:05:74:14:22:d8:3f:86:8f:
         19:39:42:ff:3c:09:9b:8b:c5:83:85:88:fa:0f:4a:14:ef:e5:
         8a:b3:83:12:ee:73:07:41:33:00:f3:3c:3d:fc:31:bf:6b:25:
         af:be:8e:5f:27:09:81:b9:b9:b4:3e:9a:ef:43:4a:a9:e2:70:
         dd:b4:fb:e5:ef:be:88:6b:7d:c8:a7:84:0f:1f:ff:39:97:ba:
         5c:03:45:44:44:d2:de:4f:69:ba:3d:dc:94:7a:df:b5:03:f2:
         5e:c8:32:14:fd:0e:77:c3:47:4d:ec:3c:88:6e:16:3a:cf:5a:
         3d:17:9e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----