Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE305E3CBA4C11F18BCE65F2CE1D38B0.roa
File:                     AE305E3CBA4C11F18BCE65F2CE1D38B0.roa (raw, json)
Hash identifier:          QPoFQ6kB6lSl+5O3XdMYexWLCVcBdSPhm+T4eEjxass=
Subject key identifier:   C2:0B:18:6D:4D:AD:E1:47:6A:EB:BF:F8:D2:96:01:58:45:D9:9B:BA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D931
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE305E3CBA4C11F18BCE65F2CE1D38B0.roa
Signing time:             Sun 27 Sep 2026 08:23:13 +0000
ROA not before:           Sun 27 Sep 2026 08:23:09 +0000
ROA not after:            Wed 26 Sep 2029 08:23:09 +0000
asID:                     17561
IP address blocks:        45.195.145.0/24 maxlen: 24
                          45.204.66.0/24 maxlen: 24
                          45.204.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121137 (0x1d931)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 27 08:23:09 2026 GMT
            Not After : Sep 26 08:23:09 2029 GMT
        Subject: CN=6ab8d271-710a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c1:ad:64:32:c3:3b:d3:3f:1f:f2:ee:52:40:
                    9d:a8:f7:0f:fe:f2:13:bf:fe:99:ea:ff:18:80:e4:
                    83:f3:1e:a1:f2:6e:2d:93:a1:6c:3e:6a:67:4c:35:
                    64:a1:1a:25:11:8c:4d:eb:79:b8:52:39:9b:a7:97:
                    03:c7:83:76:b3:6b:35:62:17:77:48:4c:f0:5d:92:
                    e1:d8:39:48:a6:13:87:69:47:d0:0a:d1:93:0a:e3:
                    19:1b:fb:3c:6d:29:3d:da:b9:71:1f:61:9b:26:64:
                    f3:b6:d4:ff:5a:26:5d:ee:17:42:3d:17:d7:c0:4a:
                    fb:91:25:ba:9f:1a:d1:ae:fa:4f:c3:9c:5a:76:21:
                    40:bb:d7:ee:e8:5b:34:2d:01:ca:1d:b3:f7:d3:81:
                    d9:53:da:0b:3b:3a:77:6a:30:6a:0d:2a:ea:d3:38:
                    53:31:3b:7f:ce:69:45:59:92:c7:7e:48:15:85:85:
                    58:1f:5b:d9:6a:89:81:b7:a4:b8:de:b0:e7:2b:b3:
                    f0:9f:42:93:db:75:da:c5:76:b3:d9:d1:18:e6:bf:
                    41:fd:d3:01:25:47:a2:c6:ce:36:ab:8b:65:57:8f:
                    ec:1a:be:c5:08:c0:56:f7:ff:e5:d6:b6:01:e0:e5:
                    d1:0e:ea:ca:3f:c1:12:69:7b:e6:e3:fe:83:9f:45:
                    1c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0B:18:6D:4D:AD:E1:47:6A:EB:BF:F8:D2:96:01:58:45:D9:9B:BA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE305E3CBA4C11F18BCE65F2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.145.0/24
                  45.204.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:bb:fa:b6:c0:74:83:2e:13:6f:24:29:9c:ee:09:86:39:01:
         f6:8b:8c:2c:7f:05:7a:e7:17:fa:b7:f9:d7:35:ce:be:8a:2c:
         19:48:1a:39:42:0c:e0:1a:8d:27:47:a0:83:25:b9:37:7b:fe:
         20:52:f1:80:35:e4:35:36:c7:c7:1b:78:70:19:df:38:9f:94:
         88:1b:b1:1e:a8:6c:7e:7f:9a:67:4b:c5:d1:bd:a7:e2:87:a6:
         6c:1b:d1:82:0b:84:27:d1:27:c7:5e:6a:dd:53:07:b0:af:5f:
         19:56:ae:13:1a:1b:3a:2b:77:dc:15:df:69:c0:de:19:b7:eb:
         d9:0f:4a:be:f5:8a:f5:44:94:f0:f8:10:59:e9:56:b4:a9:30:
         f5:72:e8:28:c3:ff:ad:9a:6d:ff:6b:ad:9b:ea:ee:36:e0:3a:
         01:3f:3c:a4:7c:11:9f:a5:32:80:f8:04:d4:b8:db:5e:d0:f1:
         a0:2d:0c:c4:45:1d:4d:34:3a:e1:fe:ec:3e:8a:3c:a6:a9:eb:
         2b:c3:42:6d:ad:0f:50:b2:95:55:f9:8c:ca:48:4f:b4:9d:a6:
         69:b0:d1:d6:66:f1:d7:f2:20:95:59:29:18:d7:3a:b5:80:90:
         62:c3:ab:a1:95:65:8a:42:4d:f6:b6:b1:5f:ae:5a:25:96:1a:
         a6:23:68:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----