Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B15EEEF8924611F1B7E794D4CE1D38B0.roa
File:                     B15EEEF8924611F1B7E794D4CE1D38B0.roa (raw, json)
Hash identifier:          smZZw3LfI4iRApNExr5YdxIaHFaYNfwA5GJBw1uCLh8=
Subject key identifier:   9E:AB:3B:B9:A5:7A:CD:FB:5B:48:B6:5D:9C:5E:1F:0D:C2:0B:A3:73
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CA51
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B15EEEF8924611F1B7E794D4CE1D38B0.roa
Signing time:             Fri 07 Aug 2026 09:59:35 +0000
ROA not before:           Fri 07 Aug 2026 09:59:31 +0000
ROA not after:            Sun 04 Oct 2026 09:59:31 +0000
asID:                     140224
IP address blocks:        45.194.16.0/24 maxlen: 24
                          45.194.17.0/24 maxlen: 24
                          45.194.18.0/24 maxlen: 24
                          45.194.19.0/24 maxlen: 24
                          45.194.20.0/24 maxlen: 24
                          45.194.21.0/24 maxlen: 24
                          45.194.22.0/24 maxlen: 24
                          45.194.23.0/24 maxlen: 24
                          45.207.14.0/24 maxlen: 24
                          45.207.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117329 (0x1ca51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  7 09:59:31 2026 GMT
            Not After : Oct  4 09:59:31 2026 GMT
        Subject: CN=6a75ac87-97b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:09:45:52:35:fc:b1:dd:bc:79:05:ce:36:c3:
                    9e:39:c4:b0:c0:21:ce:5b:80:33:bc:1a:98:1e:68:
                    74:31:47:a0:14:8c:20:84:9b:97:96:90:3a:6d:94:
                    b8:52:c2:46:3f:3d:a4:cb:fa:7f:9c:6a:e5:68:0a:
                    b1:6a:93:1e:a9:2f:a7:a9:a8:95:ae:38:ac:fd:6b:
                    b6:bc:d4:09:40:66:61:1f:ca:40:9c:a4:53:53:31:
                    f8:ca:12:30:29:2b:b2:a5:7c:6f:df:2e:6f:54:13:
                    d3:a9:a1:b9:01:97:e6:0a:f9:63:83:79:d1:ea:f6:
                    ed:c8:04:a6:76:37:3f:a7:a6:6c:90:da:d6:a5:72:
                    5d:f1:8e:03:2e:16:bb:d5:29:5c:89:7e:6b:b8:3a:
                    2b:90:91:f9:6e:6d:83:31:52:f8:56:b1:9f:14:78:
                    c2:3b:29:a7:62:2c:a3:79:c0:d6:6e:02:c2:87:4f:
                    99:11:b0:10:57:a9:91:0e:5a:25:89:2b:39:8f:92:
                    04:5d:d3:09:57:4e:67:d1:ed:b8:3f:b3:19:8a:f8:
                    a2:b7:e7:9e:94:72:08:8e:be:d7:16:3b:37:5e:52:
                    5e:0f:c2:8c:2d:cd:14:91:37:2c:91:25:ca:93:fd:
                    8b:16:b1:02:87:f3:ab:b6:12:8c:3c:f9:54:da:e5:
                    b5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AB:3B:B9:A5:7A:CD:FB:5B:48:B6:5D:9C:5E:1F:0D:C2:0B:A3:73
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B15EEEF8924611F1B7E794D4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.16.0/21
                  45.207.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:73:15:31:0b:85:be:36:6c:dc:31:09:a7:6c:5e:80:df:da:
         bf:a3:d4:e4:75:b6:d5:85:dc:43:7d:1d:29:1f:51:5a:0c:0f:
         91:a2:7f:92:6e:ed:2a:33:5c:30:50:c8:48:06:29:d6:26:6b:
         33:1c:4e:03:0b:52:7b:ac:c5:ef:fc:a7:ae:58:4b:68:9c:24:
         f6:a5:50:22:5f:08:03:81:71:95:2d:b3:a8:7a:d4:88:b2:eb:
         6c:58:ea:ee:13:39:51:86:ea:86:e4:f8:5c:fc:b4:e8:c5:31:
         c9:a6:e8:ab:36:2c:fd:c0:b5:82:88:85:f4:6d:ae:e5:4d:94:
         2b:06:16:b7:6e:14:f1:9a:77:a3:ea:5a:1b:51:09:87:40:49:
         b5:62:9a:31:3b:ac:5b:f4:51:db:dc:d0:7a:68:25:8b:ab:4c:
         fd:ed:dc:dc:c1:51:fe:8d:8c:70:98:c6:c9:3f:78:a2:99:d5:
         77:8e:76:36:10:67:64:8f:7f:63:16:46:ad:d8:56:12:4b:c5:
         b0:ce:f2:3d:01:21:f3:19:b5:b7:6b:c4:1f:76:93:bd:5a:20:
         63:27:a4:9d:1b:d7:ee:d0:e2:31:6c:96:b2:37:fe:e4:3b:a9:
         9a:24:0c:86:2b:da:8e:01:e4:78:3b:7a:33:0f:40:44:50:cb:
         8a:db:9c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----