Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E031C2668B1E11F1B40EFFD3CE1D38B0.roa
File:                     E031C2668B1E11F1B40EFFD3CE1D38B0.roa (raw, json)
Hash identifier:          qJU1FrdgGeNhprsvPLWXlVKJjtLAUyLE1uSTC2cXfCY=
Subject key identifier:   68:4C:0E:BF:DA:7F:98:27:A6:6A:6F:AD:65:6B:59:84:37:CE:B6:D9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C871
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E031C2668B1E11F1B40EFFD3CE1D38B0.roa
Signing time:             Wed 29 Jul 2026 07:26:55 +0000
ROA not before:           Wed 29 Jul 2026 07:26:51 +0000
ROA not after:            Tue 01 Sep 2026 07:26:51 +0000
asID:                     44559
IP address blocks:        45.196.140.0/24 maxlen: 24
                          45.196.141.0/24 maxlen: 24
                          45.196.142.0/24 maxlen: 24
                          45.196.143.0/24 maxlen: 24
                          45.196.152.0/24 maxlen: 24
                          45.196.198.0/24 maxlen: 24
                          45.196.199.0/24 maxlen: 24
                          45.202.119.0/24 maxlen: 24
                          45.202.125.0/24 maxlen: 24
                          45.202.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 01 Sep 2026 07:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116849 (0x1c871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 29 07:26:51 2026 GMT
            Not After : Sep  1 07:26:51 2026 GMT
        Subject: CN=6a69ab3f-5dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ac:d7:d0:04:5a:0a:11:bd:1e:8e:2c:5c:6e:
                    65:eb:87:49:87:d9:48:c6:ec:7c:4d:4d:45:c6:fd:
                    dc:9f:59:5d:f6:15:13:b0:75:ed:b8:39:b3:2f:aa:
                    af:10:2e:8d:f0:66:11:c2:c8:b4:52:99:cb:19:f2:
                    b4:70:00:12:0d:56:2a:9a:d4:fe:52:c4:e6:90:3f:
                    6c:52:e4:8a:df:f6:35:a5:c3:0f:c5:ff:20:0e:94:
                    15:38:7d:15:a7:8a:5f:d5:8f:b4:6b:c8:51:c5:bd:
                    b0:03:0e:65:2b:97:88:33:11:f9:49:74:f3:b4:11:
                    a2:e2:fe:d8:71:da:9b:80:f7:05:f4:c8:7e:fa:90:
                    d0:9b:2c:1c:23:f9:19:ec:fb:1f:3d:0b:b7:59:a4:
                    4f:67:a2:56:e4:82:72:c8:75:45:27:19:82:e0:68:
                    3f:3f:e1:37:e2:2c:1f:ab:b9:27:59:e5:0b:03:92:
                    5a:c0:cf:7c:5d:8a:a1:0e:ad:11:9d:ae:92:fb:aa:
                    ae:2b:93:3f:2f:31:d7:e7:e3:76:02:54:85:f3:c0:
                    e9:d7:df:a5:3c:d0:26:e8:25:33:11:27:ac:59:be:
                    88:2b:3c:d7:c0:2d:81:bf:92:6e:9b:a7:56:2f:a1:
                    1b:57:76:ca:7d:1d:f7:71:41:9e:85:0c:7a:e4:ee:
                    98:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4C:0E:BF:DA:7F:98:27:A6:6A:6F:AD:65:6B:59:84:37:CE:B6:D9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E031C2668B1E11F1B40EFFD3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.140.0/22
                  45.196.152.0/24
                  45.196.198.0/23
                  45.202.119.0/24
                  45.202.125.0/24
                  45.202.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:6d:a0:6d:af:74:3e:50:49:8e:bd:ed:49:80:b3:70:2b:3d:
         ac:e9:8a:ca:7a:f4:43:95:ca:f0:96:c1:36:ce:c2:4c:4b:55:
         4e:a5:2b:57:ec:45:df:f0:b7:b1:34:34:19:a7:b3:e3:08:84:
         17:8d:90:5e:83:60:09:67:a6:c3:33:27:2d:13:91:80:6b:79:
         be:45:76:72:d8:c5:6f:b6:f9:06:a8:43:ff:5e:bf:de:ab:dd:
         59:3e:11:8f:dd:99:df:3d:47:db:a5:ca:28:8b:5d:0e:8a:7c:
         5b:ba:ad:5f:ca:e0:b2:e4:e5:4d:68:eb:02:2f:e0:1f:77:1d:
         a1:ce:a5:c2:6d:cd:7d:e6:70:9f:53:12:f9:ea:53:39:33:7b:
         7e:d2:6e:6c:07:80:5e:e6:85:35:e2:89:84:7b:eb:37:99:54:
         47:c7:21:ff:13:15:06:94:68:fc:66:eb:8a:d1:0a:46:46:56:
         87:46:f8:49:bc:54:54:1a:06:e8:dd:96:a8:0f:df:9c:64:3b:
         16:19:cb:46:0a:d4:42:66:8c:d2:7d:27:02:b2:4b:f2:f8:c7:
         d6:79:a3:0a:f7:33:2d:5a:77:8c:93:5f:11:78:94:82:bf:77:
         c9:72:1f:2e:0e:1a:1c:a1:16:33:b2:1b:4e:00:b1:64:a6:ad:
         f6:a9:55:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----