Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D49A808ACAC211F1BB7C8FF1CE1D38B0.roa
File:                     D49A808ACAC211F1BB7C8FF1CE1D38B0.roa (raw, json)
Hash identifier:          0n6k8AGrIt3EDVDs5KNo6XsesbVROJE+QFxvedwg1/o=
Subject key identifier:   B5:59:53:54:B0:D7:BC:8A:29:CB:D6:D6:30:A8:4D:AD:4C:D5:4C:6B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DE71
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D49A808ACAC211F1BB7C8FF1CE1D38B0.roa
Signing time:             Sun 18 Oct 2026 07:09:17 +0000
ROA not before:           Sun 18 Oct 2026 07:09:12 +0000
ROA not after:            Fri 04 Dec 2026 07:09:12 +0000
asID:                     140227
IP address blocks:        45.194.22.0/24 maxlen: 24
                          45.207.8.0/24 maxlen: 24
                          45.207.9.0/24 maxlen: 24
                          45.207.10.0/24 maxlen: 24
                          45.207.11.0/24 maxlen: 24
                          45.207.12.0/24 maxlen: 24
                          45.207.13.0/24 maxlen: 24
                          45.207.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122481 (0x1de71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 18 07:09:12 2026 GMT
            Not After : Dec  4 07:09:12 2026 GMT
        Subject: CN=6ad4709d-b561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dc:72:6f:9b:4d:fc:e5:f4:a5:38:e8:e5:c4:
                    c3:a1:ad:35:21:78:76:b8:21:db:00:27:aa:42:5d:
                    ea:d2:ef:77:fa:ba:96:66:26:b0:35:9c:99:dc:08:
                    b6:09:2a:48:1b:75:0a:d3:b2:30:b2:d4:05:36:08:
                    65:de:a5:86:62:51:9b:96:8a:96:ad:af:e4:79:09:
                    be:10:cd:ff:70:16:ea:77:31:a4:c2:20:7e:d6:eb:
                    da:f4:01:8b:af:b3:93:77:d8:f9:e9:e7:f6:53:b7:
                    06:6a:2c:a5:fd:7b:db:9a:54:0a:d8:e7:b8:9d:e5:
                    a9:7d:17:d5:7c:ac:66:3c:af:b4:66:76:76:33:1c:
                    8b:93:fc:bd:7c:d4:73:d9:9b:05:b8:82:26:eb:ee:
                    c3:9a:e6:d0:85:ff:1c:f4:c4:86:d3:ab:61:04:14:
                    f7:e8:0f:83:8d:c4:f3:c8:be:26:0e:8f:46:0e:ef:
                    35:2f:4f:42:00:ea:06:fc:b9:bc:97:e5:a7:99:ed:
                    fa:b9:10:44:a6:ed:a8:10:cc:65:2a:cb:24:cc:5c:
                    43:71:72:5b:e4:1d:31:2d:2c:4f:c7:20:d2:c4:8f:
                    0f:30:e7:d7:42:ef:a1:45:21:9e:ef:ee:1d:ff:d8:
                    3d:3a:17:d6:89:04:34:9e:38:4e:1e:c8:7f:71:77:
                    47:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:59:53:54:B0:D7:BC:8A:29:CB:D6:D6:30:A8:4D:AD:4C:D5:4C:6B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D49A808ACAC211F1BB7C8FF1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.22.0/24
                  45.207.8.0-45.207.14.255

    Signature Algorithm: sha256WithRSAEncryption
         15:db:97:de:8a:b8:a4:92:17:19:12:21:b6:b6:10:b6:64:cf:
         eb:c6:7e:8e:25:a9:0a:84:b8:80:93:d1:d7:9a:c2:f7:8a:48:
         61:76:53:68:7b:06:05:8d:9a:12:a4:2e:19:2a:cb:dd:da:c5:
         77:6b:7d:96:ff:59:d0:f9:87:63:dc:62:75:df:26:2f:82:97:
         4b:41:fe:e6:d8:12:f6:ec:67:20:8f:14:34:b1:50:b8:57:3d:
         f3:d7:1d:4e:17:6b:70:9d:20:62:01:ac:3e:f0:ca:27:c0:b1:
         0f:8d:18:4c:0d:f3:86:f4:9e:33:97:07:6f:50:48:9f:0f:04:
         d3:c2:ce:ff:c7:ec:e1:5d:60:86:13:98:24:37:d2:32:58:1b:
         b2:8d:95:d4:58:8c:f7:4c:0e:9b:30:84:e3:31:bb:70:e2:af:
         3c:76:98:2a:4c:ad:a5:75:2b:fc:4a:1e:16:cb:d4:60:9b:54:
         6a:e9:1d:a2:f1:05:cd:7b:a9:bb:bc:cb:b4:3c:6a:84:c5:42:
         f6:9d:87:f3:32:a1:b2:8b:1f:79:e8:04:78:74:bf:0e:85:73:
         08:2d:51:3b:65:f9:23:d5:c1:1c:15:39:7b:e0:62:a0:b2:b8:
         e6:24:38:1a:8b:a1:2e:b6:72:9e:95:49:90:37:d0:ac:90:20:
         8c:4e:07:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----