Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78756606963011F194023705CF1D38B0.roa
File:                     78756606963011F194023705CF1D38B0.roa (raw, json)
Hash identifier:          K+FHt7gduovgfCK2DsIBN0Oc2Nh0gJ7H2/VKgqQpioA=
Subject key identifier:   48:B0:FE:2F:98:5F:33:E1:BA:C3:40:A1:26:5E:86:49:F6:37:AE:9F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CBE9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78756606963011F194023705CF1D38B0.roa
Signing time:             Wed 12 Aug 2026 09:30:35 +0000
ROA not before:           Wed 12 Aug 2026 09:30:31 +0000
ROA not after:            Sun 12 Aug 2029 09:30:31 +0000
asID:                     17561
IP address blocks:        45.200.242.0/24 maxlen: 24
                          45.200.243.0/24 maxlen: 24
                          45.200.244.0/24 maxlen: 24
                          45.200.245.0/24 maxlen: 24
                          45.200.246.0/24 maxlen: 24
                          45.200.247.0/24 maxlen: 24
                          45.200.248.0/24 maxlen: 24
                          45.200.249.0/24 maxlen: 24
                          45.200.250.0/24 maxlen: 24
                          45.200.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117737 (0x1cbe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 09:30:31 2026 GMT
            Not After : Aug 12 09:30:31 2029 GMT
        Subject: CN=6a7c3d3b-c40d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:04:59:39:7d:1f:71:76:b4:ca:e2:0b:4e:30:
                    bb:4c:a1:00:71:4c:df:7c:3b:df:c0:cc:91:b4:6d:
                    f9:f1:8b:9a:92:2c:af:db:21:5c:5f:99:fb:ab:d1:
                    68:cb:41:09:a8:2d:ef:de:c2:00:2b:ac:15:3e:74:
                    eb:11:b3:23:33:c9:91:19:34:19:eb:c7:b8:21:b3:
                    a8:af:1d:18:81:c2:54:48:10:8a:ac:17:78:89:41:
                    52:f0:d9:32:f6:de:6e:5b:4d:c2:62:90:8a:f1:34:
                    72:f8:04:28:c0:2c:33:18:e1:a0:24:1b:8f:92:f4:
                    7f:c9:fc:d6:d3:d5:fd:a6:4f:b0:6d:2a:27:a2:8e:
                    95:cc:f2:7c:a9:5b:1a:64:00:8d:7f:d0:85:c9:d2:
                    42:3b:c2:48:8c:08:53:94:6a:e8:66:67:d3:9d:59:
                    09:b5:ba:13:67:0f:32:29:c1:a8:cb:67:91:a2:cf:
                    b2:3b:8f:7a:67:84:17:31:69:01:44:e0:73:9d:d8:
                    d3:9d:32:2e:7c:12:23:60:39:a3:91:7e:47:44:a5:
                    2c:99:1c:94:96:95:f3:3b:e1:39:c8:66:99:4e:19:
                    c3:18:7b:5c:e5:83:60:f1:27:b8:67:43:4f:55:97:
                    3d:fa:dd:fc:a9:86:a5:75:81:b3:33:61:4c:1f:59:
                    41:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B0:FE:2F:98:5F:33:E1:BA:C3:40:A1:26:5E:86:49:F6:37:AE:9F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/78756606963011F194023705CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.242.0-45.200.251.255

    Signature Algorithm: sha256WithRSAEncryption
         4a:9e:70:ac:bc:6f:7a:f2:6e:6a:36:4a:96:e4:e9:86:69:b5:
         1e:00:7d:5c:04:97:43:a2:1e:c1:27:10:c3:66:8a:81:10:37:
         b8:19:5a:0b:5c:55:7a:de:e8:91:6f:04:ce:42:49:f7:9c:70:
         96:36:cb:38:1d:00:72:a7:05:60:54:d3:22:05:df:22:68:cd:
         42:22:73:e8:41:98:13:a5:63:56:7f:85:f2:b7:28:8a:31:e1:
         a9:11:d0:d5:e3:13:bf:ff:61:ac:55:ba:d5:5d:c6:3b:01:ba:
         f0:a5:27:b1:a3:52:b8:e0:1c:56:de:3a:42:da:3a:8b:7b:75:
         6d:37:5c:a9:f1:01:a9:ef:20:c1:9b:e2:65:7a:65:a2:6d:fd:
         dd:e8:e2:79:36:6d:1b:9e:38:c7:e5:07:65:2d:9f:8f:0c:0b:
         70:34:1c:ce:b2:75:ae:be:21:43:57:dc:0d:03:7a:28:b3:15:
         7c:68:b1:11:1e:38:97:e6:2f:77:9d:8e:14:18:63:c3:f3:53:
         25:67:72:cb:83:96:51:27:88:8b:c9:58:54:bf:6b:bf:78:e4:
         f8:eb:01:4c:e0:02:dd:1e:e0:63:3b:1a:bb:82:10:47:db:5f:
         38:26:92:21:69:3b:f5:b0:ef:75:9c:ec:a6:a2:2b:a7:e9:84:
         f4:b2:f5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----