Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B46740C4970911F1BA8B7DB3CE1D38B0.roa
File:                     B46740C4970911F1BA8B7DB3CE1D38B0.roa (raw, json)
Hash identifier:          IN2VZeEF3RS2lDfz+Uo5pa0Jw/u5M3SflXxbdQiYXuA=
Subject key identifier:   F5:1D:0D:3E:5D:93:A9:66:C6:E2:D3:E7:20:E4:F6:72:41:AE:77:2A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CCA2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B46740C4970911F1BA8B7DB3CE1D38B0.roa
Signing time:             Thu 13 Aug 2026 11:25:36 +0000
ROA not before:           Thu 13 Aug 2026 11:25:32 +0000
ROA not after:            Thu 24 Sep 2026 11:25:32 +0000
asID:                     401783
IP address blocks:        45.192.13.0/24 maxlen: 24
                          45.198.227.0/24 maxlen: 24
                          45.207.138.0/23 maxlen: 24
                          45.207.140.0/23 maxlen: 24
                          45.207.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117922 (0x1cca2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 13 11:25:32 2026 GMT
            Not After : Sep 24 11:25:32 2026 GMT
        Subject: CN=6a7da9b0-240d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:b1:de:dd:a8:61:c2:76:0d:52:b8:b7:13:
                    aa:69:31:37:ec:af:20:24:41:54:ca:33:64:db:9b:
                    64:9c:17:b3:70:2b:1f:fa:ae:46:46:48:f3:65:93:
                    62:88:c5:ab:6c:40:11:d3:dd:31:a8:64:42:f7:72:
                    74:41:62:1d:2a:01:96:97:a9:7d:54:51:42:ee:6a:
                    d7:95:2b:2f:d0:3b:86:89:45:c4:57:b6:e3:e7:c9:
                    35:6d:29:a7:34:ed:46:cd:e4:0a:48:2c:9e:16:c6:
                    a3:87:74:5c:0a:57:02:31:df:13:54:ae:17:33:7c:
                    36:57:9e:fa:98:5f:b5:43:8e:ba:65:e8:90:1a:a1:
                    12:78:62:78:bd:17:e5:ca:57:52:89:2e:2b:8d:0c:
                    56:1e:b7:79:ed:8c:fa:bc:10:6c:f6:d8:58:4e:11:
                    46:7d:8f:32:39:b2:ee:32:9a:bc:5c:d0:ca:0f:10:
                    50:c1:68:43:70:16:98:dc:81:54:b4:7d:e6:ef:b3:
                    89:86:c7:bd:af:c6:09:8b:7a:49:85:e6:dd:00:d0:
                    31:53:c7:10:67:34:eb:ed:2a:90:ba:4f:44:16:c5:
                    d8:8f:c3:e9:4e:f0:c5:ab:92:46:b8:ed:59:df:cb:
                    0f:8d:c0:db:dd:e2:ca:64:64:b1:85:17:dc:e9:51:
                    92:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1D:0D:3E:5D:93:A9:66:C6:E2:D3:E7:20:E4:F6:72:41:AE:77:2A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B46740C4970911F1BA8B7DB3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.13.0/24
                  45.198.227.0/24
                  45.207.138.0-45.207.143.255

    Signature Algorithm: sha256WithRSAEncryption
         af:5c:e6:f4:68:9c:5d:2b:2f:d0:1a:01:fb:35:b7:40:28:20:
         c1:19:ac:e9:a4:40:8e:1e:73:05:64:fb:10:70:f1:0c:cb:98:
         24:c0:ce:33:cf:12:e9:70:e7:1c:fb:81:5c:5b:20:a1:a9:4d:
         cd:ca:3e:ee:ce:07:50:55:c9:07:c0:bf:30:e1:3d:77:f1:5c:
         37:91:d3:f9:44:a8:69:e0:aa:73:50:bd:a4:4b:1f:94:47:6c:
         25:fa:01:a2:89:44:78:64:54:00:35:d9:be:00:3c:85:78:9b:
         5c:8e:77:91:30:19:dc:1c:a9:38:b6:96:29:f6:71:be:fb:0c:
         ba:7c:78:62:64:55:37:24:f6:c2:c6:23:28:99:70:fe:3a:42:
         3a:11:b6:c5:db:1d:2c:77:0d:13:ae:e3:79:4b:cd:94:3e:c3:
         59:e3:bc:cc:5d:42:4f:84:09:b4:76:4d:df:cc:d2:89:dc:c0:
         75:c6:79:d1:52:71:cb:b2:62:54:32:b1:26:e5:bb:5a:3d:83:
         56:41:0a:7c:80:30:ad:f3:0f:b1:ad:1c:69:cd:6a:d9:60:88:
         7c:64:21:53:f4:00:f9:57:ab:73:bd:79:81:2e:4d:84:88:06:
         1d:12:b0:65:75:a8:89:85:23:ed:82:64:54:eb:f6:ce:d7:89:
         6b:8c:78:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----