Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/893100009D5011F1B4F3EDC0CE1D38B0.roa
File:                     893100009D5011F1B4F3EDC0CE1D38B0.roa (raw, json)
Hash identifier:          LaLxBsxY/Dje4OGMi6KHCMc+iy0rXgxz3qFNvzboNsg=
Subject key identifier:   F6:93:3B:E2:D9:C9:30:19:8B:F1:D8:FF:A2:7E:67:7A:97:27:2A:6F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CFB6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/893100009D5011F1B4F3EDC0CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 11:07:45 +0000
ROA not before:           Fri 21 Aug 2026 11:07:41 +0000
ROA not after:            Tue 29 Sep 2026 11:07:41 +0000
asID:                     44559
IP address blocks:        45.199.210.0/24 maxlen: 24
                          45.199.211.0/24 maxlen: 24
                          45.199.212.0/24 maxlen: 24
                          45.199.213.0/24 maxlen: 24
                          45.199.214.0/24 maxlen: 24
                          45.199.215.0/24 maxlen: 24
                          45.199.216.0/24 maxlen: 24
                          45.199.217.0/24 maxlen: 24
                          45.199.218.0/24 maxlen: 24
                          45.199.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118710 (0x1cfb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 11:07:41 2026 GMT
            Not After : Sep 29 11:07:41 2026 GMT
        Subject: CN=6a883181-776e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dd:88:a8:6b:88:b2:47:f7:e3:29:7c:e3:67:
                    41:d3:2f:3a:d2:1d:24:e8:15:fd:4a:7e:a4:a7:d7:
                    57:db:36:c0:90:31:28:54:3d:dc:42:b0:6f:95:ce:
                    ce:d7:86:65:84:57:84:46:c3:bc:78:49:1a:ce:f2:
                    b1:ac:b1:1d:c9:38:49:8b:98:89:1b:2f:84:8c:53:
                    6c:96:eb:eb:fd:58:0a:8a:3d:de:2f:79:3e:86:2a:
                    7e:9f:13:a6:13:f4:32:5d:ee:c4:25:37:63:dc:31:
                    56:87:e9:d7:92:fc:32:d0:6a:3a:cb:64:24:79:03:
                    60:39:44:9f:ad:2b:43:d2:f4:dc:f4:57:a7:6a:f9:
                    60:86:4d:e2:44:f9:7b:ba:18:13:ea:32:be:f9:6f:
                    86:09:b6:d2:be:67:9b:dd:87:32:b4:bc:f4:5f:dd:
                    c3:a7:9c:f8:66:80:2c:c8:f2:d8:95:7b:73:1b:bd:
                    d8:e7:bc:25:fe:8b:e5:f2:7e:1e:88:a1:71:36:d2:
                    4f:d8:3f:91:cd:ac:1d:91:bc:4b:32:38:5a:cd:03:
                    c2:3c:be:5d:69:5c:9b:22:04:57:08:fa:0c:9c:d6:
                    1b:73:7f:66:e0:4e:1b:3a:9a:41:7c:84:62:b7:84:
                    b5:bf:b7:e2:b3:b2:00:e2:47:43:fd:68:d3:e1:12:
                    4a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:93:3B:E2:D9:C9:30:19:8B:F1:D8:FF:A2:7E:67:7A:97:27:2A:6F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/893100009D5011F1B4F3EDC0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.210.0-45.199.219.255

    Signature Algorithm: sha256WithRSAEncryption
         3a:d3:c5:3a:88:e9:dc:e9:8e:fc:3c:b9:da:09:8d:48:51:ee:
         44:b6:c1:81:50:c1:a9:47:27:c3:b2:d3:f0:7e:c2:7b:e4:54:
         47:f0:76:47:68:39:5a:66:59:8e:df:44:51:47:ba:04:5f:00:
         ce:b2:5b:7e:ab:9e:d2:21:17:74:37:75:52:85:02:3f:27:50:
         2a:00:93:a2:7c:49:3f:b4:13:ec:7c:af:d0:9d:6e:67:ad:9c:
         89:bd:f0:e7:5a:f3:57:84:78:95:fb:de:0d:e1:a6:26:94:55:
         5b:c4:8b:54:71:c3:8f:33:35:0f:b0:0b:c2:d8:12:a1:eb:da:
         a5:ae:15:c0:f0:ef:28:08:0a:f8:d6:ab:7b:d2:11:6f:8a:40:
         8b:51:36:b2:cf:bd:c2:c4:55:22:d1:f3:3c:b0:95:ff:ca:43:
         91:d3:e0:0a:36:de:75:d7:bb:94:3a:86:e5:41:22:2b:7c:41:
         13:ab:6a:a0:38:e4:70:a8:c6:39:8c:e0:63:3e:b3:34:ff:a8:
         de:d3:76:b7:f4:76:39:db:17:b4:e8:e7:14:d4:be:c2:81:52:
         fa:26:17:3a:ff:3f:de:57:fc:ec:1d:cb:f4:5f:cd:5a:cc:46:
         d9:dd:50:55:22:b7:3c:2f:8e:06:13:57:13:91:fe:38:f6:96:
         10:1a:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----