Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFFA9772962011F1830FCAA6CE1D38B0.roa
File:                     BFFA9772962011F1830FCAA6CE1D38B0.roa (raw, json)
Hash identifier:          QhIj6Wk9mED+vwAdci0+XMOIWllupDtDAXegDaibztI=
Subject key identifier:   C8:F5:7D:4C:A1:D8:F6:28:F6:23:10:0A:4A:FE:00:D2:7A:7F:AA:A8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CBB8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFFA9772962011F1830FCAA6CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 07:38:03 +0000
ROA not before:           Wed 12 Aug 2026 07:37:59 +0000
ROA not after:            Sun 12 Aug 2029 07:37:59 +0000
asID:                     17561
IP address blocks:        45.194.187.0/24 maxlen: 24
                          45.194.188.0/24 maxlen: 24
                          45.194.189.0/24 maxlen: 24
                          45.194.190.0/24 maxlen: 24
                          45.194.191.0/24 maxlen: 24
                          45.194.192.0/24 maxlen: 24
                          45.194.193.0/24 maxlen: 24
                          45.194.194.0/24 maxlen: 24
                          45.194.195.0/24 maxlen: 24
                          45.194.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117688 (0x1cbb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 07:37:59 2026 GMT
            Not After : Aug 12 07:37:59 2029 GMT
        Subject: CN=6a7c22db-fec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:13:a1:31:d3:36:da:50:16:df:7d:1c:fc:
                    c8:11:f7:3a:0f:83:c0:92:1e:94:44:87:c2:45:ff:
                    4d:ff:e8:34:ae:82:a1:ec:77:07:27:ad:85:e5:52:
                    37:36:88:d8:52:01:7a:7e:96:c7:a7:a6:71:54:b4:
                    6c:c4:d8:e9:d1:38:ed:cc:3a:e8:b3:a4:d2:4d:7c:
                    2c:da:45:69:80:84:1f:ab:0a:1c:df:d3:7e:05:27:
                    4d:26:0d:c0:6d:7c:bb:44:0d:ce:a3:b0:14:88:46:
                    40:fe:bf:af:bf:a2:8a:66:80:5b:8c:8a:16:b2:87:
                    fc:12:23:38:30:cd:39:2f:b4:ca:e9:e0:97:6c:8b:
                    37:1c:28:9a:2f:fc:b1:8f:a5:9f:86:1f:7e:20:67:
                    b0:c3:b8:8a:c6:d6:79:95:4c:09:f4:ae:a7:4b:48:
                    05:6f:34:26:db:27:fd:e2:5d:4e:b7:d0:8e:1a:34:
                    3b:4b:38:a9:85:96:37:31:c8:ae:26:52:e6:f1:91:
                    00:10:59:3e:e0:0f:a1:43:a4:99:ce:63:7e:3f:29:
                    8c:3f:34:8e:5a:3a:b4:c9:cd:45:b5:0d:08:80:ad:
                    26:07:bc:87:cd:c4:33:f6:73:8d:0f:0f:9a:80:d2:
                    ca:bb:d8:0d:24:ff:3d:2d:77:a7:ce:13:44:74:6c:
                    db:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F5:7D:4C:A1:D8:F6:28:F6:23:10:0A:4A:FE:00:D2:7A:7F:AA:A8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFFA9772962011F1830FCAA6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.187.0-45.194.196.255

    Signature Algorithm: sha256WithRSAEncryption
         99:f0:13:4f:b3:f1:d4:41:a6:2a:c8:f2:ec:9d:df:7e:26:05:
         85:1d:22:93:e9:04:84:40:fd:76:20:5a:94:fb:62:d9:8b:78:
         55:8f:fb:ba:47:85:b1:13:dd:b2:91:df:a5:dd:f1:85:4a:c5:
         4f:32:17:8d:1c:0f:5e:61:92:58:40:e5:70:1e:70:88:ae:7d:
         9e:91:cd:f3:82:bd:7d:2d:35:49:0c:2c:2d:65:8a:90:81:bb:
         29:ba:22:df:4c:8b:45:4d:1e:ce:8d:6f:0a:7a:bd:f9:c6:ca:
         a7:ad:b3:49:24:e0:84:19:c7:a5:1b:49:b7:0c:9d:e4:92:13:
         75:49:80:2f:01:54:88:b5:4f:c1:4f:5d:1f:e8:92:be:0e:22:
         81:39:66:1f:f9:a4:88:0f:bf:81:f6:b1:c9:5c:f2:0b:06:a4:
         a3:43:b3:27:2d:c4:61:d7:73:72:db:af:d2:a8:dc:8a:6a:61:
         62:15:5e:e9:0a:7f:a3:c4:7e:3f:5a:a0:0b:10:99:12:cd:2f:
         07:85:67:7f:9d:60:50:4a:0b:4d:8a:9f:6e:e0:5e:a3:21:e6:
         90:1d:64:1d:a8:df:21:04:a6:68:ae:42:86:15:9e:0a:2d:e9:
         07:d1:1a:48:44:94:d1:b9:6d:9d:25:05:e3:8b:89:b1:98:f1:
         4c:a3:03:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----