Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/754B7D50C4AF11F1BAF219C8CE1D38B0.roa
File:                     754B7D50C4AF11F1BAF219C8CE1D38B0.roa (raw, json)
Hash identifier:          DAqK6BV8u74cdBj53ndm8KvHIVIdCiZgHi5YTmD2/B4=
Subject key identifier:   EF:C1:6F:89:A8:95:81:08:A4:EA:6C:26:DD:C9:A5:25:FE:BF:E5:76
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC90
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/754B7D50C4AF11F1BAF219C8CE1D38B0.roa
Signing time:             Sat 10 Oct 2026 13:35:29 +0000
ROA not before:           Sat 10 Oct 2026 13:35:24 +0000
ROA not after:            Tue 17 Nov 2026 13:35:24 +0000
asID:                     6079
IP address blocks:        45.192.64.0/19 maxlen: 24
                          45.202.32.0/21 maxlen: 24
                          45.202.40.0/23 maxlen: 24
                          45.202.42.0/23 maxlen: 24
                          45.202.44.0/23 maxlen: 24
                          45.202.124.0/24 maxlen: 24
                          45.204.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122000 (0x1dc90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 10 13:35:24 2026 GMT
            Not After : Nov 17 13:35:24 2026 GMT
        Subject: CN=6aca3f21-7cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e6:21:12:7c:e9:28:b9:86:cb:8c:67:58:6b:
                    2e:26:66:bc:96:45:08:de:38:e3:b1:36:b2:ad:83:
                    b8:bb:ff:77:53:16:df:18:65:a8:3d:a3:df:19:8a:
                    d5:fd:00:ef:b5:de:eb:e2:a6:45:b3:90:f9:59:8b:
                    18:64:70:e7:8a:72:e0:bf:8f:51:bc:9c:9f:14:24:
                    31:67:89:de:5c:f2:2b:54:69:01:8e:64:03:d3:93:
                    c4:0a:38:4e:a6:aa:5c:3e:10:68:83:80:7c:c1:13:
                    d3:61:00:4a:38:0f:6a:fe:33:3e:89:b2:d5:22:e4:
                    da:6e:eb:ed:ab:e9:34:c9:6e:1d:9b:80:a9:e4:68:
                    61:74:91:13:ca:0b:34:dc:de:bb:ca:99:ba:ca:ce:
                    84:ea:7d:66:e3:3b:49:2e:a9:59:80:e0:05:56:e2:
                    d3:00:1b:cd:e9:21:95:e3:20:65:33:a6:e2:f2:77:
                    4e:34:f1:ef:a5:ab:70:ce:50:62:ae:9f:ba:f4:de:
                    9e:f2:33:af:49:59:b3:28:1b:13:55:a9:1d:82:a3:
                    7d:ba:9e:b1:59:23:aa:e1:8b:db:b3:89:30:93:f9:
                    8e:42:c1:97:c1:e4:e9:b9:a0:05:9e:c2:b2:08:ea:
                    ce:81:9c:c1:dc:0e:2a:96:e9:96:09:d6:04:10:5a:
                    c5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C1:6F:89:A8:95:81:08:A4:EA:6C:26:DD:C9:A5:25:FE:BF:E5:76
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/754B7D50C4AF11F1BAF219C8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.64.0/19
                  45.202.32.0-45.202.45.255
                  45.202.124.0/24
                  45.204.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:43:66:2d:0b:d9:e0:22:0e:67:2c:6a:00:aa:49:6e:f1:ae:
         b2:bd:71:21:68:3d:51:bb:11:a1:4c:70:ae:6c:60:a6:d1:5b:
         45:bf:92:65:52:16:b4:af:05:07:55:d1:94:5a:30:cd:2f:5b:
         70:ba:29:f9:82:cf:d6:74:48:1b:6b:48:22:20:a9:1a:9c:c8:
         7a:be:5a:99:fe:13:bb:da:38:1e:7b:6b:fc:86:db:1d:0c:2d:
         c2:9d:98:1a:a6:20:a3:b7:2e:3d:0e:e2:8d:bb:e5:f7:e5:62:
         0d:1f:28:1b:c8:8f:d0:9e:32:1d:42:63:89:22:65:e0:38:da:
         7c:db:68:11:57:6d:94:7f:03:2d:bc:80:2d:e8:f1:34:e7:bf:
         60:33:f9:2a:96:d2:d7:e3:cf:7c:cf:e5:45:14:39:23:b7:1a:
         03:1a:0d:c6:0d:be:44:1c:00:82:a2:ca:60:37:3c:eb:55:3a:
         a9:fd:c7:3f:b7:48:c7:f9:f7:53:0c:ad:e9:02:c2:65:c7:bb:
         0b:15:e2:15:a0:4c:ec:fe:88:35:80:bd:ad:9c:cc:09:6d:db:
         8e:65:21:c5:7a:2b:6f:81:92:fe:35:35:31:e6:5d:bb:be:49:
         fc:89:8e:c2:d3:19:c2:07:2d:e0:36:bc:bd:92:22:ae:0e:85:
         6e:5b:85:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----