Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A518FCDC8B1C11F19BB1C5C7CE1D38B0.roa
File:                     A518FCDC8B1C11F19BB1C5C7CE1D38B0.roa (raw, json)
Hash identifier:          JQYYVX9vMHaAJzPuUNBwasV3fMb4hFCv60fJX0VXOP4=
Subject key identifier:   01:E5:3F:70:1E:BA:4A:EA:7E:DB:F5:8B:00:82:A6:92:E7:9F:65:59
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C869
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A518FCDC8B1C11F19BB1C5C7CE1D38B0.roa
Signing time:             Wed 29 Jul 2026 07:10:57 +0000
ROA not before:           Wed 29 Jul 2026 07:10:53 +0000
ROA not after:            Sat 28 Jul 2029 07:10:53 +0000
asID:                     17561
IP address blocks:        45.206.60.0/24 maxlen: 24
                          45.206.62.0/24 maxlen: 24
                          45.206.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116841 (0x1c869)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 29 07:10:53 2026 GMT
            Not After : Jul 28 07:10:53 2029 GMT
        Subject: CN=6a69a781-aeb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fa:47:a6:7c:35:a0:e3:d1:e2:c3:eb:4c:26:
                    4d:2d:f6:0b:04:44:d8:6b:52:08:6e:cc:63:e1:c4:
                    5d:ec:7f:f8:59:e9:41:9b:55:25:29:3a:02:28:51:
                    9c:27:93:ec:06:62:1b:b4:4c:af:20:5c:a0:ca:54:
                    20:bf:80:70:f7:b0:83:55:5a:29:b4:79:46:f6:9c:
                    9d:d5:94:67:82:89:6b:ba:7d:13:a2:25:75:92:f9:
                    1e:8b:ce:18:53:4b:50:a9:4c:4a:d1:94:ac:ca:6f:
                    b5:9b:f8:ba:8a:d0:a7:1f:a4:2e:be:eb:bf:f7:4b:
                    bf:f9:51:89:4e:9f:c7:ad:f4:b5:39:69:bf:91:8a:
                    25:77:60:dc:a6:d2:d2:05:11:f8:c7:46:e0:cc:22:
                    57:0e:30:ee:57:73:ab:00:5e:85:48:d4:79:18:b8:
                    c5:ef:73:c9:42:1e:9f:96:47:61:8e:47:cf:0c:52:
                    71:c7:5c:8b:ee:d8:ce:07:1d:78:39:8b:31:d5:cf:
                    b8:d6:cf:f0:a8:36:3a:9b:b7:97:67:83:78:bf:bb:
                    a6:cb:53:71:b5:b6:da:2a:7f:2a:00:40:9c:85:e9:
                    62:14:7b:8f:33:82:f9:be:72:0d:83:b5:a9:98:33:
                    b2:71:14:2d:9b:79:9c:04:f9:39:82:e6:fe:0c:f2:
                    7b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E5:3F:70:1E:BA:4A:EA:7E:DB:F5:8B:00:82:A6:92:E7:9F:65:59
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A518FCDC8B1C11F19BB1C5C7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.60.0/24
                  45.206.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:21:42:71:5d:57:09:53:6a:83:6f:35:9e:7e:cd:9f:d5:f6:
         4a:fc:66:ca:51:1a:be:5b:25:a7:4a:52:e5:31:b3:7a:00:12:
         25:18:a5:d3:10:14:cd:88:31:52:41:b6:93:f3:89:9c:c0:04:
         61:dd:94:7f:84:4f:58:ab:19:10:e3:0a:75:14:82:28:ed:e1:
         da:27:f1:87:d0:a8:94:23:27:fd:00:d4:9f:cd:e6:3d:60:6f:
         fd:45:22:4b:fa:f9:1d:f0:da:21:c8:1a:4e:d5:cc:7d:72:8f:
         d2:fe:7d:23:4c:4f:67:d8:ad:95:c0:1e:29:41:5f:e4:89:20:
         95:5c:7d:10:61:47:48:23:1e:8a:60:c8:8b:5c:8f:af:01:89:
         94:45:89:6b:02:46:ec:84:f5:41:9c:9e:eb:f7:80:b3:5f:fc:
         52:36:39:0f:60:00:c5:13:0d:92:f0:53:62:3d:de:4c:01:e6:
         6b:7a:03:a2:91:8a:bb:84:80:a1:8c:71:5c:a5:d6:25:8c:19:
         e1:86:d3:b4:b2:10:ce:f3:c5:fd:14:b6:61:b2:8e:a3:05:2d:
         b9:d7:99:c4:f8:0a:4e:19:07:1a:46:ba:e1:53:5e:83:af:a1:
         81:54:c7:18:6f:45:74:e1:63:b6:06:27:1d:a7:9e:29:79:35:
         cf:62:84:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----