Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD7B3AD0CEAD11F1ADCBFFC1CE1D38B0.roa
File:                     CD7B3AD0CEAD11F1ADCBFFC1CE1D38B0.roa (raw, json)
Hash identifier:          /taUd7o0XeBMwuEOBScL9UgyiXQkq+47FnSG+MeaD/A=
Subject key identifier:   0B:34:53:AE:E0:A2:A7:36:54:33:F5:EC:0D:8F:D6:24:4C:31:6A:95
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DFD4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD7B3AD0CEAD11F1ADCBFFC1CE1D38B0.roa
Signing time:             Fri 23 Oct 2026 06:48:50 +0000
ROA not before:           Fri 23 Oct 2026 06:48:45 +0000
ROA not after:            Mon 23 Nov 2026 06:48:45 +0000
asID:                     131471
IP address blocks:        45.195.130.0/24 maxlen: 24
                          45.195.131.0/24 maxlen: 24
                          45.195.194.0/24 maxlen: 24
                          45.195.195.0/24 maxlen: 24
                          45.195.210.0/24 maxlen: 24
                          45.195.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122836 (0x1dfd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 23 06:48:45 2026 GMT
            Not After : Nov 23 06:48:45 2026 GMT
        Subject: CN=6adb0352-4a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a2:6f:21:78:50:00:d2:5e:82:dd:55:67:1d:
                    8c:20:8e:e3:c5:57:b7:86:42:e3:f1:52:58:0e:17:
                    ec:04:0e:02:ef:0c:12:74:11:67:3f:f5:3f:7e:67:
                    3b:c5:22:66:fc:49:31:3d:27:cf:2b:1c:e0:6d:89:
                    f1:80:0f:02:8c:67:9a:ba:5d:c1:ef:7a:76:3f:4c:
                    4a:3d:16:41:da:f9:24:c9:38:c3:c8:eb:a7:e6:b2:
                    64:5f:d9:b7:23:19:8c:91:1d:7d:a3:b5:73:2b:4b:
                    83:88:d6:fe:b1:3f:53:b1:e2:24:03:cb:6c:20:e8:
                    e8:91:1e:20:4a:35:c6:c9:24:17:66:ef:a4:4b:89:
                    2b:31:b0:8c:a1:4a:4b:57:6d:58:55:b9:65:19:92:
                    5d:b2:13:cc:ff:58:3e:82:2c:7e:fe:00:f8:99:94:
                    d6:cb:de:c2:cb:af:01:04:4b:03:22:45:7a:d2:a5:
                    5e:9a:30:6e:b9:ae:38:34:bf:76:3f:e4:c4:55:e2:
                    3a:1f:b5:6a:b0:69:27:ba:b5:db:ea:ea:d2:b6:42:
                    6b:5e:c9:96:13:c2:f6:ec:e6:67:48:ae:b6:3a:54:
                    fb:19:f0:9a:50:30:5b:f0:b2:d9:6d:89:8d:95:7b:
                    06:27:fc:a7:a6:35:9c:90:87:99:d3:fc:52:1a:70:
                    a1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:34:53:AE:E0:A2:A7:36:54:33:F5:EC:0D:8F:D6:24:4C:31:6A:95
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD7B3AD0CEAD11F1ADCBFFC1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.130.0/23
                  45.195.194.0/23
                  45.195.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:0d:6f:e8:99:84:40:3f:bc:07:01:8c:f0:a0:07:89:53:0a:
         0c:cf:d4:81:8a:d5:6b:83:09:30:1c:ae:45:75:49:32:37:34:
         9d:5a:77:05:f5:8a:45:21:51:36:a1:3c:dd:67:2b:fb:d6:f8:
         8a:fa:bb:0d:a8:dc:50:1e:70:f5:5a:50:a0:11:e0:f3:e9:b3:
         cf:42:fe:dc:c5:24:28:2c:52:a6:d2:b3:ff:57:1a:ca:37:84:
         6d:55:08:87:b5:40:78:83:e9:3a:c6:e4:6f:af:94:19:d0:0e:
         01:45:f1:2f:bd:f7:1a:3d:87:24:ef:3d:9c:89:85:0f:be:42:
         fb:85:38:52:b8:b3:a8:04:31:b9:09:ef:ba:64:98:d8:2d:0a:
         14:fc:a4:9d:1e:dd:42:0f:52:e4:6e:e2:9f:79:60:6b:85:00:
         84:96:67:b1:1d:c9:a0:cc:34:8a:a8:6b:31:ae:c9:04:e1:43:
         01:5a:0d:11:f6:78:37:e6:02:27:91:e1:ee:0d:8f:02:13:ae:
         12:e1:3d:c4:a0:9d:e7:5a:2d:09:fb:1d:e5:ed:b6:47:1d:d8:
         0a:e5:c3:94:a3:fd:9d:ec:db:92:28:b9:c0:c1:41:7a:d1:86:
         21:18:8e:4f:7a:85:97:1a:b8:43:7f:87:f0:1d:47:f0:54:e8:
         36:05:e1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----