Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2381F48BE3C11F1A5F1BEA4CE1D38B0.roa
File:                     C2381F48BE3C11F1A5F1BEA4CE1D38B0.roa (raw, json)
Hash identifier:          TFuGcUxPJlzy4Zkc8HVs2gWLd4X0GsY5Z4jQpvOCHHs=
Subject key identifier:   0F:E2:FA:91:22:84:A1:86:F7:35:21:8C:76:7B:05:C7:4E:E8:99:B9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA1A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2381F48BE3C11F1A5F1BEA4CE1D38B0.roa
Signing time:             Fri 02 Oct 2026 08:39:19 +0000
ROA not before:           Fri 02 Oct 2026 08:39:15 +0000
ROA not after:            Wed 06 Oct 2027 08:39:15 +0000
asID:                     393294
IP address blocks:        45.199.169.0/24 maxlen: 24
                          45.199.170.0/24 maxlen: 24
                          45.199.171.0/24 maxlen: 24
                          45.199.172.0/24 maxlen: 24
                          45.199.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121370 (0x1da1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  2 08:39:15 2026 GMT
            Not After : Oct  6 08:39:15 2027 GMT
        Subject: CN=6abf6db7-fcc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bd:4c:a5:1c:d7:1f:46:cc:70:d6:dc:39:b7:
                    ea:9b:ad:88:d4:bd:11:b9:07:bf:fe:39:47:6c:30:
                    bb:ed:30:81:a0:f0:d6:a4:d8:13:d7:28:b1:0b:1c:
                    b8:58:e0:9a:e9:1b:f6:72:15:bb:75:ec:80:58:59:
                    49:8e:82:5d:07:fd:4c:85:01:c8:af:9a:0d:ad:9e:
                    f8:de:9c:24:b2:4c:2d:50:2a:67:23:7a:62:c6:0f:
                    45:5a:eb:57:c2:ee:95:22:11:73:9e:44:c1:c4:85:
                    6a:b9:f2:a6:2d:3d:c0:0c:f3:8e:e4:c7:d3:f6:0b:
                    1f:93:2a:54:1d:fb:0d:9b:6e:a5:4c:db:ba:44:90:
                    1d:a7:48:e5:d5:4b:dc:44:98:00:24:ec:50:34:66:
                    de:68:49:04:93:c7:9a:0d:84:d1:f4:5c:a3:3a:e9:
                    6c:78:35:8c:c5:e5:83:9d:ff:fa:fd:94:c6:76:b8:
                    ed:4c:cd:7b:63:59:e4:42:04:75:e9:90:41:dd:32:
                    eb:d6:ea:09:35:07:1e:cc:98:3c:ba:82:c3:10:5d:
                    3f:82:9d:06:5b:8e:22:f5:63:03:bb:9d:c8:eb:60:
                    72:a2:71:d1:04:f3:6b:ac:fc:83:6e:44:3f:6e:05:
                    d2:0d:10:28:5f:90:15:bf:07:44:8a:2d:bb:fa:50:
                    e0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E2:FA:91:22:84:A1:86:F7:35:21:8C:76:7B:05:C7:4E:E8:99:B9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2381F48BE3C11F1A5F1BEA4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.169.0-45.199.173.255

    Signature Algorithm: sha256WithRSAEncryption
         45:f9:4f:c2:76:31:be:fa:bd:82:17:89:8e:38:1b:4e:c5:b8:
         d9:0b:b0:6e:e7:0f:37:38:07:59:54:de:b6:5c:cf:fd:9f:f2:
         cc:10:d1:5e:60:ef:66:ee:f9:b0:b2:e7:a2:38:27:e7:3e:70:
         9a:38:e1:60:83:75:da:aa:e8:5d:6b:04:bb:60:13:dd:bd:ff:
         05:32:63:79:5b:78:8d:bf:d2:f7:91:e1:d5:76:e7:68:27:c7:
         57:d7:91:2e:fb:94:23:30:61:f0:75:b0:55:cf:c1:74:41:60:
         79:0c:37:1d:20:d4:91:f3:d7:d3:a0:fb:39:5a:3f:8f:26:11:
         35:f2:5d:af:a1:9f:9a:c5:3e:07:87:c3:29:ab:7e:e4:df:29:
         cc:cd:1d:6d:ae:62:0d:00:75:14:df:e7:4c:89:2c:dd:91:59:
         7b:63:e6:83:b0:66:04:0d:7e:d3:6e:ca:d5:db:66:46:a5:c9:
         1a:d7:d3:38:f0:7e:a6:9c:33:fd:15:b6:7e:17:5c:d5:55:2e:
         79:1c:71:09:44:76:d0:0b:3f:d4:7f:d9:4b:b0:58:a1:05:8c:
         df:50:b0:2b:96:3c:52:34:9e:a5:14:54:21:cc:75:0d:c3:56:
         86:72:b4:a5:08:9f:c8:bf:73:a7:c7:a9:79:56:1e:32:66:0f:
         81:1f:c9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----