Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1604682C61311F1AFDBD6E4CE1D38B0.roa
File:                     E1604682C61311F1AFDBD6E4CE1D38B0.roa (raw, json)
Hash identifier:          l7tt9T8wWnw53IdT8W4SaewWgYd8xqLbzbk1WIkyIBo=
Subject key identifier:   28:BB:AB:A5:4F:83:49:AF:74:4A:A4:8A:C3:77:C6:36:26:C2:E6:8D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DCF0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1604682C61311F1AFDBD6E4CE1D38B0.roa
Signing time:             Mon 12 Oct 2026 08:06:52 +0000
ROA not before:           Mon 12 Oct 2026 08:06:47 +0000
ROA not after:            Thu 22 Oct 2026 08:06:47 +0000
asID:                     11427
IP address blocks:        45.203.192.0/22 maxlen: 24
                          45.205.76.0/22 maxlen: 24
                          45.205.88.0/21 maxlen: 24
                          45.205.156.0/22 maxlen: 24
                          45.205.160.0/23 maxlen: 24
                          45.205.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122096 (0x1dcf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 12 08:06:47 2026 GMT
            Not After : Oct 22 08:06:47 2026 GMT
        Subject: CN=6acc951b-5f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fc:3b:0f:46:c2:92:da:2c:0e:de:de:59:92:
                    42:2b:dd:d6:1a:16:92:59:a6:e2:a6:3d:12:85:d6:
                    bd:c4:c6:e4:f3:dd:73:96:a5:58:b1:97:19:d0:55:
                    c3:59:4d:2f:38:1f:43:ec:66:d0:0c:56:0b:bd:77:
                    b8:98:5d:d9:74:e8:f3:9b:0b:bb:52:f0:d2:11:24:
                    23:a4:8d:74:c0:8f:ca:7f:ce:4b:c1:09:93:33:a2:
                    98:7c:e5:cb:db:74:75:fe:86:eb:24:25:64:f3:05:
                    16:be:5c:ff:db:69:db:58:09:fe:80:d9:e3:1e:32:
                    36:01:e0:f3:08:cd:30:3b:6b:35:e4:55:43:f8:87:
                    5c:d0:f1:72:37:5f:cd:7a:21:02:14:66:fc:25:3c:
                    47:98:63:54:45:c7:93:1b:73:de:a0:43:48:5f:7e:
                    17:aa:df:07:16:62:3a:16:f6:42:83:32:81:ce:26:
                    72:25:9a:c2:1b:cb:3f:b2:fb:fc:7c:0d:1c:07:ee:
                    ca:d2:ec:58:6b:b5:4e:79:ae:8b:b7:cc:96:df:4e:
                    56:4e:ca:3a:58:e7:c9:9c:71:10:5a:b5:3f:41:51:
                    63:99:fd:d6:78:86:22:d9:b1:4e:d6:cb:08:a7:bb:
                    c1:67:37:eb:5d:b0:89:db:7f:ab:f0:ae:24:a2:3f:
                    56:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BB:AB:A5:4F:83:49:AF:74:4A:A4:8A:C3:77:C6:36:26:C2:E6:8D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1604682C61311F1AFDBD6E4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.203.192.0/22
                  45.205.76.0/22
                  45.205.88.0/21
                  45.205.156.0-45.205.161.255
                  45.205.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:40:4c:10:46:9c:64:3f:5e:e7:23:37:69:0d:98:20:de:ce:
         fc:68:2f:39:3c:92:6d:ce:c0:85:be:ca:02:0d:69:df:2a:d8:
         f7:75:dd:68:3a:b4:cb:6b:b5:be:47:64:dc:be:26:43:51:a1:
         ef:81:ef:a3:22:31:26:07:fa:de:93:69:60:c6:bf:49:57:d6:
         c0:a0:9c:b5:a9:f8:4f:d8:f7:68:57:32:ca:bb:c3:3d:9b:98:
         89:ad:a5:21:96:34:dc:4f:b8:75:3d:a5:30:cb:55:cd:f1:b7:
         6e:0c:88:83:df:8f:39:0c:bb:d8:a5:a7:cb:aa:c6:70:11:4c:
         c8:9e:37:b1:cf:77:f0:c9:df:52:3b:1b:7b:95:a7:84:a6:e2:
         bf:85:b4:42:39:f0:e0:c9:c6:bf:ef:a9:7e:cb:6d:f0:59:b9:
         46:75:ba:b7:94:45:d8:af:76:09:51:bd:3d:c5:a1:47:c2:41:
         5b:51:9e:29:5c:41:22:b4:0b:ca:f7:35:0f:4b:88:21:cc:08:
         e6:30:b1:57:c0:45:08:63:bb:13:4a:3f:38:4f:46:1c:c4:eb:
         53:1d:6f:29:63:c2:1a:75:53:77:ef:60:e1:88:9c:dd:2b:ff:
         66:85:ef:0d:6f:61:0c:95:fc:53:bd:67:3a:bf:d3:17:a2:91:
         4a:7b:37:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----