Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E532CD70A69C11F1AFF819D4CE1D38B0.roa
File:                     E532CD70A69C11F1AFF819D4CE1D38B0.roa (raw, json)
Hash identifier:          4ihZU/EmF6eGC1KwTnVm9zO+ekUZt21PW5A79F6nw9E=
Subject key identifier:   05:B0:1C:AD:2E:C2:6F:87:EB:DE:E1:F9:CD:1A:F0:78:E3:CD:6D:EC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D248
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E532CD70A69C11F1AFF819D4CE1D38B0.roa
Signing time:             Wed 02 Sep 2026 07:07:02 +0000
ROA not before:           Wed 02 Sep 2026 07:06:58 +0000
ROA not after:            Thu 01 Oct 2026 07:06:58 +0000
asID:                     202656
IP address blocks:        45.195.208.0/24 maxlen: 24
                          45.195.209.0/24 maxlen: 24
                          45.199.135.0/24 maxlen: 24
                          45.199.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119368 (0x1d248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  2 07:06:58 2026 GMT
            Not After : Oct  1 07:06:58 2026 GMT
        Subject: CN=6a97cb16-df90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:15:87:1c:5e:f8:34:e7:04:32:71:df:f1:fb:
                    6c:02:18:06:6d:ca:e3:2a:d3:f2:9c:a3:b3:ab:b2:
                    b1:78:33:e1:f8:ab:13:4c:e1:ab:c3:64:4a:5e:5c:
                    38:84:1e:17:30:6b:3a:b8:9e:55:88:93:b6:7b:e4:
                    c0:4d:7c:f5:84:a2:87:ae:ff:b7:28:6e:25:61:93:
                    56:b6:16:b2:4c:9d:7f:4a:f5:dc:ef:d8:f1:55:64:
                    51:ae:56:26:c2:3d:fa:1a:5f:1c:49:30:cd:8e:74:
                    4c:2d:c9:1e:b9:85:d9:e0:33:61:35:02:39:c8:42:
                    f4:45:a5:cc:6d:df:52:24:e0:2c:18:d0:48:d1:22:
                    11:52:27:30:6a:9c:25:45:bb:dd:0e:72:28:8d:74:
                    67:8c:c8:14:63:82:8c:77:c0:d6:0e:50:ce:9b:2d:
                    2d:85:01:6b:48:77:8c:24:02:6b:91:65:86:79:b9:
                    5e:84:ee:16:4c:30:b2:e7:6a:51:ea:34:be:93:af:
                    d9:0d:02:f5:18:71:b8:9c:e3:f3:cb:90:8a:9c:62:
                    bc:1c:84:1b:d7:98:9b:6b:1a:b3:e6:5f:62:00:f8:
                    8b:8c:af:78:1a:c3:a5:a7:40:85:76:b5:39:50:0f:
                    4e:bf:89:70:01:fa:09:bd:28:56:1b:3d:2d:40:ae:
                    a4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B0:1C:AD:2E:C2:6F:87:EB:DE:E1:F9:CD:1A:F0:78:E3:CD:6D:EC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E532CD70A69C11F1AFF819D4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.208.0/23
                  45.199.135.0-45.199.136.255

    Signature Algorithm: sha256WithRSAEncryption
         19:20:23:cc:29:32:7c:4b:ee:8f:5a:82:2c:b0:33:38:62:33:
         b8:a7:ca:76:c9:80:93:cd:ea:25:ce:b4:bd:7d:4a:3c:91:1e:
         54:a3:c1:fa:f3:c4:2e:b9:7e:d9:bb:b2:e9:49:35:1f:13:6e:
         24:b6:fb:3e:06:b8:09:f2:c6:de:b1:22:b2:fd:ce:4a:8d:31:
         19:2e:a6:d7:03:13:f6:40:89:dc:59:6c:4b:10:2e:79:f0:46:
         ec:b7:f4:65:20:13:74:b2:79:cb:8d:10:8f:97:5a:a0:c2:82:
         10:2d:fd:48:26:f0:0b:6a:d4:c9:3a:a4:28:70:8b:be:ed:40:
         d5:ca:e6:a9:5c:ea:ff:98:11:d0:09:c3:c1:f2:38:d3:65:5b:
         53:94:5c:8f:79:54:ec:51:52:fa:60:ce:f1:23:03:7f:7b:0d:
         96:53:0d:9d:94:55:73:32:b2:f9:7a:6d:73:35:09:31:82:0d:
         40:f9:8d:77:63:ba:07:3b:c7:79:87:b8:52:b6:80:44:ef:b9:
         f0:9e:7d:bf:63:3b:66:96:d5:2f:3f:58:6f:6b:c4:18:d7:7f:
         8f:9f:86:5c:66:b0:f1:ab:a4:92:a5:e5:94:be:52:a2:63:81:
         75:8b:a4:67:f5:a7:33:05:29:ed:e3:15:cd:25:ed:00:41:b6:
         33:d3:59:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----