Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84740024962211F1AA030BB3CE1D38B0.roa
File:                     84740024962211F1AA030BB3CE1D38B0.roa (raw, json)
Hash identifier:          GnqQUUUje1bUpymhMQLCnOaBDLGXUqX27d8a5V4rPiM=
Subject key identifier:   25:97:BA:47:CC:5D:12:C7:CC:09:8E:80:86:F7:4F:3B:F3:45:C4:53
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CBBC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84740024962211F1AA030BB3CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 07:50:42 +0000
ROA not before:           Wed 12 Aug 2026 07:50:38 +0000
ROA not after:            Sun 12 Aug 2029 07:50:38 +0000
asID:                     17561
IP address blocks:        45.194.207.0/24 maxlen: 24
                          45.194.208.0/24 maxlen: 24
                          45.194.209.0/24 maxlen: 24
                          45.194.210.0/24 maxlen: 24
                          45.194.211.0/24 maxlen: 24
                          45.194.212.0/24 maxlen: 24
                          45.194.213.0/24 maxlen: 24
                          45.194.214.0/24 maxlen: 24
                          45.194.215.0/24 maxlen: 24
                          45.194.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117692 (0x1cbbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 07:50:38 2026 GMT
            Not After : Aug 12 07:50:38 2029 GMT
        Subject: CN=6a7c25d2-dbb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6c:24:a9:78:db:f5:24:34:68:05:e4:3a:f7:
                    54:18:37:31:ee:1a:f7:1b:e4:60:74:ba:ed:2c:a7:
                    dc:d7:80:b1:c0:38:98:5b:bd:a8:73:3b:cc:31:94:
                    d7:9d:4e:21:53:c0:a2:0c:8b:41:9e:e9:7e:bf:de:
                    61:72:25:a3:8e:41:b8:8b:fb:a4:de:98:11:61:8f:
                    1e:e9:c7:26:d0:4d:c7:8d:d8:20:66:f6:36:8d:15:
                    df:65:f6:d6:af:7c:35:2a:dd:01:62:92:42:71:b6:
                    47:2b:7a:3a:35:2e:9e:1b:3d:7c:a7:44:b2:cb:6f:
                    ef:c0:df:ef:5b:d4:f3:45:dc:a4:45:47:26:4d:f4:
                    08:64:35:3e:c5:13:f4:a0:ff:ff:43:95:80:56:a8:
                    6f:29:c2:7e:c8:36:25:8e:89:d0:b3:3a:f0:ec:bc:
                    36:b4:98:ad:a9:d2:af:a4:e9:8f:56:82:ee:e3:20:
                    dd:03:98:36:b0:e0:ac:fa:ee:24:0a:61:2e:33:cb:
                    70:64:03:b8:e5:75:be:e3:cd:ac:81:74:df:0e:40:
                    08:f4:5f:56:1d:4f:3f:07:35:97:c9:8f:00:6c:54:
                    46:0e:27:8b:cc:81:7b:a9:2c:d4:8b:dc:06:a5:97:
                    db:7d:4e:0e:bb:21:1f:aa:9d:95:14:33:cd:ab:86:
                    d0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:97:BA:47:CC:5D:12:C7:CC:09:8E:80:86:F7:4F:3B:F3:45:C4:53
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84740024962211F1AA030BB3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.207.0-45.194.216.255

    Signature Algorithm: sha256WithRSAEncryption
         ad:73:a6:fb:10:c1:99:33:ea:ee:43:65:97:90:6e:8f:9c:52:
         ce:aa:91:62:34:97:0c:87:86:ec:8a:5b:1a:5e:73:a7:59:09:
         a2:10:1a:5f:88:7d:7a:2b:f5:5d:ab:64:c5:34:c0:eb:cd:bf:
         c3:4e:2d:76:bb:25:6c:2d:09:fd:bf:70:51:ee:76:d8:3a:f9:
         0c:ff:ae:5d:29:7d:76:df:c9:62:da:6a:8d:21:a0:65:78:e8:
         ba:31:16:02:23:1a:1c:bb:30:0d:55:0a:d5:a9:cd:d1:47:26:
         ff:fa:a9:9c:d8:16:56:d0:ce:82:e2:c0:4e:70:8a:e6:f3:fd:
         e8:e8:99:bd:b4:32:77:52:dc:ae:8d:45:43:73:b3:49:df:78:
         e0:98:02:da:af:50:ac:51:c9:e5:a8:ee:57:76:83:7e:84:98:
         71:12:5e:93:fa:a9:bf:31:06:35:17:f6:41:fb:d9:98:f4:04:
         c2:c3:96:23:52:6f:52:ea:2f:53:d1:6e:a0:8c:b0:f0:a3:1f:
         49:3b:11:a0:82:07:9d:87:da:5f:c4:e5:55:5b:f9:1d:35:8c:
         0c:32:17:e2:7d:85:83:07:48:79:29:53:61:98:0e:7e:5f:2e:
         2c:4c:49:18:cc:fc:bf:c7:da:eb:b5:ae:a3:fc:b1:ea:79:26:
         37:f5:ce:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----