Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8015126AC94011F19FF1B616CF1D38B0.roa
File:                     8015126AC94011F19FF1B616CF1D38B0.roa (raw, json)
Hash identifier:          15y81BQubt5zLpVy7LtQhPKMkNc40plTBNzVuA+9mJE=
Subject key identifier:   1A:F4:41:4B:A9:00:5B:EA:4C:31:47:1D:9F:06:4C:E5:0D:B4:42:2B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DDF0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8015126AC94011F19FF1B616CF1D38B0.roa
Signing time:             Fri 16 Oct 2026 09:03:49 +0000
ROA not before:           Fri 16 Oct 2026 09:03:45 +0000
ROA not after:            Mon 26 Oct 2026 09:03:45 +0000
asID:                     131471
IP address blocks:        45.195.130.0/24 maxlen: 24
                          45.195.131.0/24 maxlen: 24
                          45.195.194.0/24 maxlen: 24
                          45.195.195.0/24 maxlen: 24
                          45.195.210.0/24 maxlen: 24
                          45.195.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122352 (0x1ddf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 16 09:03:45 2026 GMT
            Not After : Oct 26 09:03:45 2026 GMT
        Subject: CN=6ad1e875-b14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:f4:f5:28:16:6e:e5:bb:1d:cb:d9:ed:33:
                    a9:78:fd:c4:b0:30:7f:c0:2f:ad:0f:05:00:9d:af:
                    6a:22:8c:91:25:fa:1e:c8:05:03:ff:cc:19:d5:66:
                    00:ef:26:eb:96:21:06:70:68:42:98:d3:0c:63:3a:
                    a0:d6:41:0e:46:be:cd:19:72:57:25:70:e0:6a:75:
                    73:88:23:8c:9e:36:73:7a:c4:0a:02:52:b0:64:79:
                    44:6f:a4:7a:d5:3a:02:7b:ca:b4:0f:27:7f:90:a8:
                    ec:8e:23:5e:3b:f4:0c:7a:8c:b0:9c:40:67:cd:87:
                    24:50:a7:97:cf:a2:15:98:94:5e:b8:65:03:11:fb:
                    41:ac:ad:cf:da:4a:ad:ee:d2:09:72:d1:6e:43:12:
                    07:25:82:29:e4:07:b7:87:47:76:9f:9e:56:fd:37:
                    03:e6:1c:4e:c7:c3:61:cd:50:ea:5d:34:ff:20:55:
                    c7:f9:51:7c:b7:5b:dd:70:7b:f0:c4:84:7a:2a:d2:
                    93:70:23:ad:22:9e:c8:75:0d:38:cf:dc:90:87:da:
                    b7:73:02:d8:42:96:4e:62:33:cf:41:3c:52:2a:cb:
                    5d:db:53:ca:b4:43:be:c2:07:ba:5c:11:e3:ef:71:
                    43:61:b7:ed:1a:36:26:2d:09:df:4a:98:8a:c0:58:
                    4e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F4:41:4B:A9:00:5B:EA:4C:31:47:1D:9F:06:4C:E5:0D:B4:42:2B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8015126AC94011F19FF1B616CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.130.0/23
                  45.195.194.0/23
                  45.195.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:4c:35:fd:9c:a5:7d:22:bb:03:d2:ce:97:25:51:c1:bb:0d:
         7f:a2:ab:18:a4:15:b2:9c:5a:39:f1:79:61:24:4c:ba:71:0b:
         21:8b:9f:cf:07:c3:31:26:00:b4:df:b0:2b:ec:f7:21:6b:07:
         87:91:2e:48:c2:91:07:ec:94:a0:63:1c:3d:df:6f:e9:a2:f2:
         d5:ef:aa:78:f6:2b:84:18:c1:54:34:61:59:34:2b:a5:fa:b1:
         f7:8e:3a:d5:68:d6:de:b1:4d:90:34:6c:43:fc:7d:42:7f:eb:
         56:57:3d:2a:3e:df:be:02:01:a2:cd:aa:4f:ff:bd:a1:0e:b8:
         14:3c:ce:bc:9a:92:12:a8:85:ba:ee:a7:f9:ad:9b:7b:de:fe:
         01:08:57:57:c5:3c:33:86:d5:15:59:6f:aa:32:03:6e:a9:df:
         af:23:47:f2:5a:95:7a:00:d6:16:7e:c2:11:17:dd:3a:fb:43:
         d8:cf:8f:da:50:44:8d:1a:28:24:52:e6:1f:cf:72:d8:4e:8b:
         f3:04:b7:d7:ee:81:f7:b2:c0:e3:69:e9:ae:11:d9:12:c9:3c:
         db:c9:1c:92:3c:94:9e:40:c6:f6:c4:65:fe:d1:10:93:70:72:
         82:0d:11:82:97:5b:f7:d6:8a:6d:a7:e6:e5:ba:1c:07:27:90:
         45:35:f4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----