Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E382EC2AC87111F1A43747D4CE1D38B0.roa
File:                     E382EC2AC87111F1A43747D4CE1D38B0.roa (raw, json)
Hash identifier:          0S9KNg0pQGlkQUC8VMZX/YabcfaTosRzVbk/CFy7HV4=
Subject key identifier:   80:97:60:5E:DE:E4:46:55:8A:7F:AD:B0:95:C5:CE:A5:2A:E7:F7:8E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DD9C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E382EC2AC87111F1A43747D4CE1D38B0.roa
Signing time:             Thu 15 Oct 2026 08:24:50 +0000
ROA not before:           Thu 15 Oct 2026 08:24:46 +0000
ROA not after:            Tue 24 Nov 2026 08:24:46 +0000
asID:                     395793
IP address blocks:        45.192.13.0/24 maxlen: 24
                          45.192.14.0/24 maxlen: 24
                          45.192.15.0/24 maxlen: 24
                          45.192.16.0/24 maxlen: 24
                          45.196.64.0/22 maxlen: 24
                          45.196.68.0/24 maxlen: 24
                          45.198.226.0/24 maxlen: 24
                          45.201.36.0/22 maxlen: 24
                          45.201.40.0/24 maxlen: 24
                          45.207.138.0/23 maxlen: 24
                          45.207.140.0/23 maxlen: 24
                          45.207.142.0/23 maxlen: 24
                          45.207.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122268 (0x1dd9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 15 08:24:46 2026 GMT
            Not After : Nov 24 08:24:46 2026 GMT
        Subject: CN=6ad08dd2-16a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:71:ee:e4:4f:13:44:ed:e5:8a:aa:19:e2:1e:
                    ba:bb:ed:0c:7b:bb:ca:1d:be:13:d9:ab:37:eb:cc:
                    2c:f2:05:e6:70:64:04:76:45:a5:a8:f3:fa:01:7d:
                    d2:47:ba:90:42:b1:ba:c8:5f:50:12:c1:6b:c7:fc:
                    03:fb:fd:c2:a0:58:ab:c3:ca:62:35:fb:22:d9:60:
                    19:84:e7:f8:71:e3:3f:df:76:0c:0a:56:26:c4:00:
                    25:06:08:d3:b3:8e:5b:eb:d0:66:4f:72:eb:5c:8e:
                    f0:45:9d:67:5b:36:a1:3b:01:dd:c5:0f:6b:0b:b5:
                    84:4e:ab:ad:f3:dd:82:ff:99:e7:05:c1:7a:b1:48:
                    bb:17:3f:d2:f8:62:9c:c8:c7:e1:b9:91:0d:1d:e9:
                    99:05:04:7d:2f:9d:dc:8a:1c:f5:74:be:4f:b8:ce:
                    b8:a3:ec:39:1d:a0:78:d9:53:1f:48:57:1d:ed:27:
                    73:3e:58:a4:b6:d9:f5:8d:c7:cd:07:bc:03:15:bf:
                    8e:a2:4c:a2:60:d5:b0:c9:6e:6e:90:44:c7:1f:ce:
                    56:ef:03:1d:33:d5:ff:8f:2d:36:c8:93:fb:af:ae:
                    6b:cf:c2:4a:4d:52:75:f0:ce:3c:ce:65:88:6b:4e:
                    d7:2c:f7:2c:ce:15:ff:98:76:52:ca:6a:f4:4c:36:
                    60:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:97:60:5E:DE:E4:46:55:8A:7F:AD:B0:95:C5:CE:A5:2A:E7:F7:8E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E382EC2AC87111F1A43747D4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.13.0-45.192.16.255
                  45.196.64.0-45.196.68.255
                  45.198.226.0/24
                  45.201.36.0-45.201.40.255
                  45.207.138.0-45.207.147.255

    Signature Algorithm: sha256WithRSAEncryption
         22:16:54:8e:39:0c:1f:12:8f:81:5f:fd:3d:dd:8b:20:3e:bd:
         2f:32:97:51:39:fb:4b:28:28:41:51:6b:4e:4e:b5:64:3e:a3:
         e7:0f:a2:03:f0:60:c6:07:b8:a5:d6:b2:fa:bc:bf:34:e9:bb:
         9e:d0:22:24:4d:0e:5a:64:94:71:af:c4:98:90:3f:48:a5:02:
         99:b5:38:1f:aa:de:47:3c:43:b9:2c:97:56:6e:98:00:9a:05:
         64:32:48:38:f4:34:c1:1b:97:15:63:23:60:7e:21:f3:f4:2b:
         82:bf:f3:05:1c:d4:4a:62:e7:f9:51:2f:d2:5b:be:c1:79:d4:
         37:5a:00:53:7b:0f:68:c6:f8:08:dc:88:c3:a8:c3:38:c8:a5:
         4d:9d:74:e4:f9:78:b7:05:36:b9:ce:b1:04:e0:92:56:41:6d:
         75:e1:6b:3b:41:b5:cc:bc:ec:f7:be:56:f7:a3:6f:33:d1:f3:
         bd:d0:4b:3c:7b:73:5f:f4:70:7e:7e:50:4b:30:b7:4e:fc:c2:
         dd:1d:e8:e4:56:af:ad:26:b8:ff:fc:33:c4:b8:c4:c6:99:96:
         96:c4:31:22:2e:92:38:ef:0a:39:92:58:08:3f:a3:e0:fc:65:
         c3:b8:76:d1:e8:e8:0b:87:dd:56:b1:02:8b:76:a6:da:97:f6:
         39:d7:ef:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----