Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDF1CF5C961C11F189558410CF1D38B0.roa
File:                     CDF1CF5C961C11F189558410CF1D38B0.roa (raw, json)
Hash identifier:          dYBrBiY7xLOXg52ZoVPk///+MBMTTrhIZlP9lA71DVw=
Subject key identifier:   38:3A:92:A4:2E:95:FA:73:46:03:8B:5F:48:9D:59:18:C5:B6:85:4F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CBA7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDF1CF5C961C11F189558410CF1D38B0.roa
Signing time:             Wed 12 Aug 2026 07:09:49 +0000
ROA not before:           Wed 12 Aug 2026 07:09:45 +0000
ROA not after:            Sun 12 Aug 2029 07:09:45 +0000
asID:                     17561
IP address blocks:        45.194.137.0/24 maxlen: 24
                          45.194.138.0/24 maxlen: 24
                          45.194.139.0/24 maxlen: 24
                          45.194.140.0/24 maxlen: 24
                          45.194.141.0/24 maxlen: 24
                          45.194.142.0/24 maxlen: 24
                          45.194.143.0/24 maxlen: 24
                          45.194.144.0/24 maxlen: 24
                          45.194.145.0/24 maxlen: 24
                          45.194.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117671 (0x1cba7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 07:09:45 2026 GMT
            Not After : Aug 12 07:09:45 2029 GMT
        Subject: CN=6a7c1c3d-1ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:db:64:47:31:d2:b8:71:f8:5c:e9:fa:ca:8b:
                    94:bd:3b:58:49:03:eb:ae:ec:c5:2c:75:71:6d:0e:
                    d3:b3:31:de:a2:e4:89:7c:9a:ce:56:f4:31:73:03:
                    25:ac:8a:37:cc:a8:d2:24:de:95:3b:f6:77:89:89:
                    be:10:e2:64:f2:81:9b:3d:9b:9e:0b:18:e2:e3:bd:
                    10:1e:09:1c:84:f0:cd:85:fc:7b:06:e0:f0:23:a9:
                    d4:7a:20:0c:f7:49:14:57:59:68:42:c2:1c:2d:24:
                    e2:80:25:f6:b4:78:a5:d2:70:d8:ed:8a:6d:7d:73:
                    d3:60:09:e2:f0:1d:df:e5:70:be:8f:61:9a:da:b2:
                    ed:20:f4:f2:89:2c:8d:ad:c7:e0:77:e5:7f:fa:88:
                    ad:0d:25:ef:26:20:5e:59:90:97:ca:a6:a0:50:ad:
                    62:7b:b7:aa:bf:46:ed:06:b0:99:1e:37:fd:38:20:
                    76:db:bc:e4:34:b1:85:c2:8b:19:63:9e:8e:ee:e1:
                    e2:fa:e3:e5:e7:1d:7f:47:66:6e:b3:2f:16:56:2e:
                    b4:45:d8:e1:82:70:75:6a:9d:bb:b8:cb:4d:d5:c0:
                    6e:15:15:6a:e2:ed:af:a3:d0:e6:b0:ac:27:ac:b9:
                    11:c5:f7:f1:ba:66:7f:b1:39:5a:47:7e:8f:82:64:
                    d7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3A:92:A4:2E:95:FA:73:46:03:8B:5F:48:9D:59:18:C5:B6:85:4F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDF1CF5C961C11F189558410CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.137.0-45.194.146.255

    Signature Algorithm: sha256WithRSAEncryption
         b2:1c:57:31:4e:cf:56:a8:1e:62:36:4a:ce:b6:e7:31:74:3e:
         29:f0:2d:3d:82:09:c9:fd:18:5d:c8:7f:ed:5b:ab:c3:f9:53:
         4f:a9:7d:95:6f:1b:b4:f8:d3:05:71:24:6f:11:ee:44:fa:a0:
         15:cf:ba:01:9c:d1:65:9e:f0:c5:f5:90:ae:58:77:ae:bd:7d:
         83:27:c5:63:e8:a8:16:07:01:8e:bc:5c:4e:b8:1e:46:28:92:
         da:dc:eb:b4:26:b0:d9:e4:d4:ee:4f:23:d3:51:d6:2b:d0:41:
         a7:93:97:f7:a2:04:c3:f1:5c:9f:6d:8f:61:07:d2:aa:24:53:
         3a:64:9a:37:84:ff:50:12:ee:d9:17:ad:a2:03:c9:ef:6f:fe:
         8b:9e:b8:87:78:12:a6:92:6c:6d:57:b6:0c:b7:3a:a6:07:ce:
         7e:a4:03:c6:27:fc:6a:e8:bb:de:fb:4c:9c:d8:98:ff:7a:ad:
         2a:de:ba:fe:1c:31:f5:52:de:c1:13:9f:ab:e5:b2:a4:01:54:
         e4:c7:06:91:af:f8:81:7b:07:af:a6:95:e6:aa:4c:e9:32:8d:
         5e:7f:f5:ee:33:e3:72:90:c6:f2:48:4c:50:79:64:8b:4e:52:
         08:5b:89:1c:80:b3:44:5f:88:03:f2:89:f3:23:c2:06:6b:02:
         eb:a4:72:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----