Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F580A5E6C86911F18491B4A2CE1D38B0.roa
File:                     F580A5E6C86911F18491B4A2CE1D38B0.roa (raw, json)
Hash identifier:          lfUyPc+egz9eijTjKVfAWsmCPK4Gkw8uzZGO9xkkP4w=
Subject key identifier:   F0:93:63:85:28:A9:05:73:AE:D9:E1:CB:60:4D:5A:19:3D:5D:87:7F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DD88
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F580A5E6C86911F18491B4A2CE1D38B0.roa
Signing time:             Thu 15 Oct 2026 07:28:04 +0000
ROA not before:           Thu 15 Oct 2026 07:28:00 +0000
ROA not after:            Tue 24 Nov 2026 07:28:00 +0000
asID:                     401783
IP address blocks:        45.192.13.0/24 maxlen: 24
                          45.198.227.0/24 maxlen: 24
                          45.207.138.0/23 maxlen: 24
                          45.207.140.0/23 maxlen: 24
                          45.207.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122248 (0x1dd88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 15 07:28:00 2026 GMT
            Not After : Nov 24 07:28:00 2026 GMT
        Subject: CN=6ad08084-4cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:63:68:3b:11:7e:4e:15:5f:65:fd:02:2a:02:
                    6a:aa:a7:d7:46:97:43:89:69:ed:36:c3:3c:96:82:
                    20:fc:c5:9f:52:5f:3d:b1:1d:59:02:63:c3:ab:e6:
                    d2:a7:da:0c:2c:32:12:c7:b1:d9:2f:23:85:fa:e8:
                    c1:68:dd:84:42:01:90:a1:54:73:90:4a:0f:c0:6e:
                    b4:d7:c5:55:a7:40:3d:a4:af:d7:3f:07:9a:99:0f:
                    23:0b:a5:ef:65:13:e5:0a:31:26:e7:de:bc:d4:2d:
                    12:83:55:5d:6d:d8:df:69:e0:c1:a7:fb:6d:28:5f:
                    c9:1b:10:5b:c0:9a:89:c0:35:e3:ea:b3:e0:58:fa:
                    9a:73:0e:8c:80:af:23:be:cf:e8:0b:05:c4:1b:64:
                    60:6d:e2:65:c0:2d:bf:b8:9d:77:f8:81:9e:12:c9:
                    d8:31:28:c8:67:f1:6c:6b:4f:1b:a7:d2:45:91:89:
                    92:c7:13:64:95:d5:50:15:a9:a8:15:6f:40:fe:58:
                    81:3b:09:a9:a2:fc:6b:ab:f3:86:c3:a7:50:e3:5c:
                    08:6a:ec:43:06:2a:e6:26:33:88:6e:9e:9b:a9:12:
                    61:23:a5:78:5d:23:9e:93:28:c6:f0:d7:98:8d:34:
                    db:6a:50:7b:e9:39:95:bc:2a:e3:e4:3c:5d:08:f8:
                    5c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:93:63:85:28:A9:05:73:AE:D9:E1:CB:60:4D:5A:19:3D:5D:87:7F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F580A5E6C86911F18491B4A2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.13.0/24
                  45.198.227.0/24
                  45.207.138.0-45.207.143.255

    Signature Algorithm: sha256WithRSAEncryption
         0a:49:d5:ab:7e:32:71:fd:47:0d:0b:91:eb:d4:42:d3:d5:39:
         d9:e2:bb:f2:19:37:ed:9a:e1:c2:84:f3:52:08:39:20:fc:92:
         28:55:41:5f:2d:d8:b5:69:36:67:61:14:4c:75:55:63:00:0a:
         22:5b:98:14:36:20:cd:39:f3:e3:0d:1c:b9:41:ab:ba:5c:4a:
         a4:1e:a4:d9:b9:5f:b6:f0:61:50:21:2f:81:bf:9c:1d:d5:b7:
         ac:7d:36:4c:2f:db:ec:cd:ca:7f:80:53:b8:27:27:52:aa:73:
         a6:fc:c9:1a:f7:c0:32:7d:b6:72:8e:23:51:0e:9a:6c:12:68:
         11:9a:ce:95:5b:25:53:bd:87:7c:e7:dd:1f:69:02:0a:42:73:
         f7:c2:e8:13:6d:4b:38:99:06:f6:d9:9e:89:e7:88:c6:4e:67:
         4b:88:a1:87:5e:09:f1:8f:5f:f3:43:28:af:f1:6e:fd:1d:ca:
         49:6c:1f:f9:0f:60:ce:61:46:9e:00:0c:ba:35:c5:a7:f0:04:
         66:99:17:a7:9e:23:91:e6:8c:82:19:cc:27:e6:f2:1e:5a:ee:
         19:01:93:bd:e1:99:b3:65:e2:38:66:53:9c:79:a7:d6:31:62:
         f7:e8:f4:3c:62:69:72:2a:b1:42:7a:3f:90:6a:3b:2c:85:58:
         ed:1c:2a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----