Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B971862BF3711F1B47C2C00CF1D38B0.roa
File:                     8B971862BF3711F1B47C2C00CF1D38B0.roa (raw, json)
Hash identifier:          KbASNS9c9EWbMk1sKFU9CknZXWZG2L7DXtNFKQeEBMI=
Subject key identifier:   08:9C:04:17:F2:C1:37:16:A2:7F:A9:AA:34:F3:8B:AA:98:7F:8B:84
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA93
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B971862BF3711F1B47C2C00CF1D38B0.roa
Signing time:             Sat 03 Oct 2026 14:34:31 +0000
ROA not before:           Sat 03 Oct 2026 14:34:27 +0000
ROA not after:            Sun 22 Nov 2026 14:34:27 +0000
asID:                     141159
IP address blocks:        45.205.16.0/21 maxlen: 24
                          45.205.16.0/24 maxlen: 24
                          45.205.17.0/24 maxlen: 24
                          45.205.18.0/24 maxlen: 24
                          45.205.19.0/24 maxlen: 24
                          45.205.20.0/24 maxlen: 24
                          45.205.21.0/24 maxlen: 24
                          45.205.22.0/24 maxlen: 24
                          45.205.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121491 (0x1da93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  3 14:34:27 2026 GMT
            Not After : Nov 22 14:34:27 2026 GMT
        Subject: CN=6ac11277-ea28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:30:0b:1e:52:e0:e0:47:1f:2d:51:93:55:0b:
                    2e:ff:4c:a0:77:34:70:ca:23:53:c9:2b:5c:17:ac:
                    b5:57:a8:a5:ab:4d:67:c0:5b:08:4c:a5:ff:e7:1a:
                    d8:33:12:b1:15:4a:10:09:65:d7:33:18:04:13:f5:
                    e0:39:ee:01:47:09:98:25:fc:bb:52:1b:42:c9:24:
                    37:88:55:22:7f:c4:5b:4f:2f:ce:68:a9:21:8b:fd:
                    60:f9:51:d6:3c:03:df:12:6a:84:ae:b5:28:35:90:
                    3c:b3:51:91:f0:5d:d0:fe:cf:03:80:12:b5:59:6d:
                    1a:9f:fa:bf:d5:04:db:a0:ec:97:fb:46:07:fc:5a:
                    4d:33:4f:32:c6:5f:f8:af:71:89:ed:e2:7c:12:2e:
                    b4:ce:91:ac:ff:3c:ef:38:bf:ed:76:71:7b:f8:23:
                    56:4b:1b:b6:d4:50:54:07:07:44:4d:18:20:49:92:
                    23:60:62:0b:50:fb:65:ff:05:5b:33:ee:e9:cb:85:
                    0d:c2:98:57:bb:70:e8:ac:06:dd:87:bb:de:4f:d4:
                    ac:cd:d3:2d:f9:30:45:ea:9e:e8:44:c2:2b:4b:6c:
                    73:c8:12:cd:63:3d:42:57:8a:6a:4e:e7:96:dd:60:
                    b0:5a:2d:bb:10:8f:bd:d5:ad:1d:97:9d:0a:d5:2b:
                    b1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:9C:04:17:F2:C1:37:16:A2:7F:A9:AA:34:F3:8B:AA:98:7F:8B:84
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B971862BF3711F1B47C2C00CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8a:c4:27:a9:6d:79:47:b7:88:a9:14:b6:ed:1f:56:b0:05:d7:
         29:cc:87:75:bc:85:c9:b1:e1:3c:7c:82:d7:93:9f:f5:64:55:
         de:0b:f0:61:a6:80:63:00:26:af:e4:47:0f:b3:e6:50:75:3c:
         d6:a4:4f:35:07:47:34:c0:b2:53:6c:d8:c7:e8:34:0a:f3:69:
         8b:40:70:6d:1b:91:74:31:87:e4:1e:fb:42:2b:df:38:d1:03:
         5c:94:69:2f:09:7a:2b:7e:db:a3:c1:1f:42:92:44:4b:fc:cb:
         90:5d:39:b9:df:91:e0:a7:97:ff:40:49:f6:91:03:d2:4e:85:
         94:b6:20:a0:44:33:4a:9d:8c:f1:6a:a7:cc:80:c2:34:db:f2:
         04:30:b6:5a:af:bb:44:9d:36:83:ee:af:2d:29:87:5f:5f:95:
         ef:67:c7:0f:77:ca:a2:3d:48:7e:88:26:c9:e1:c6:07:a7:d3:
         68:a0:9c:18:03:c6:41:90:66:df:8d:d5:89:a1:f6:cb:c6:c2:
         ab:08:68:ab:f2:4c:87:88:51:c5:1a:95:01:2e:8f:11:58:2f:
         03:67:ac:52:90:a8:ae:2e:9a:fc:93:42:6a:c3:65:1b:d6:1e:
         69:1d:85:9c:47:d7:81:3e:c0:c3:f3:bb:68:72:a9:06:18:0c:
         d1:25:ee:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----