Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9259886962411F1BA4580BFCE1D38B0.roa
File:                     F9259886962411F1BA4580BFCE1D38B0.roa (raw, json)
Hash identifier:          noR4rMpyeVPrdkBI+YUdae8R4fr8rn5Zh+oc9erPaN8=
Subject key identifier:   EB:E6:FF:2B:11:D9:7A:22:AC:5D:59:60:39:AF:CD:11:6D:45:4F:77
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CBC5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9259886962411F1BA4580BFCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 08:08:17 +0000
ROA not before:           Wed 12 Aug 2026 08:08:13 +0000
ROA not after:            Sun 12 Aug 2029 08:08:13 +0000
asID:                     17561
IP address blocks:        45.194.237.0/24 maxlen: 24
                          45.194.238.0/24 maxlen: 24
                          45.194.239.0/24 maxlen: 24
                          45.194.240.0/24 maxlen: 24
                          45.194.241.0/24 maxlen: 24
                          45.194.242.0/24 maxlen: 24
                          45.194.243.0/24 maxlen: 24
                          45.194.244.0/24 maxlen: 24
                          45.194.245.0/24 maxlen: 24
                          45.194.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117701 (0x1cbc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 08:08:13 2026 GMT
            Not After : Aug 12 08:08:13 2029 GMT
        Subject: CN=6a7c29f1-3b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6a:a2:5f:4b:b6:00:3c:4f:12:02:c2:b0:4a:
                    72:d2:41:45:bd:84:31:ea:69:94:a5:37:7d:21:71:
                    7a:e7:60:82:f9:3a:c0:f4:48:8a:f9:2e:a4:81:cc:
                    f2:3e:c5:f6:a5:ad:93:d4:c9:c4:a0:0d:b2:40:3d:
                    a4:df:28:e7:62:33:18:08:33:25:01:88:3e:ae:9d:
                    d5:8f:8e:2d:d2:96:61:0a:84:e1:a4:94:df:1a:e4:
                    79:86:be:5e:4d:ba:f9:65:98:ea:4c:72:fa:da:fe:
                    ab:f9:08:4e:ce:0f:0f:78:9b:74:06:df:77:44:b1:
                    26:6e:81:33:56:e4:8a:13:10:36:1e:1c:0a:ce:ed:
                    02:e8:c7:2a:93:8b:83:21:aa:69:d7:86:a5:50:98:
                    a0:e1:13:dc:b6:a3:16:5d:d5:e9:c2:dc:8f:8b:18:
                    9f:23:f3:8e:36:08:77:f0:b2:b9:c6:ef:18:dd:4b:
                    05:78:0b:f3:87:74:ec:fb:5a:60:df:97:b6:92:ed:
                    7e:9a:60:f9:8b:c2:58:8e:b6:13:68:c7:15:cd:10:
                    04:04:5f:c1:17:d5:1f:e7:19:81:ca:91:d5:b0:56:
                    5d:d1:f3:86:e9:6c:15:33:c7:ba:ec:e3:a6:8e:4a:
                    73:63:c0:cc:52:33:54:dd:cc:47:7d:4b:28:30:08:
                    9a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E6:FF:2B:11:D9:7A:22:AC:5D:59:60:39:AF:CD:11:6D:45:4F:77
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9259886962411F1BA4580BFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.237.0-45.194.246.255

    Signature Algorithm: sha256WithRSAEncryption
         0e:4e:4a:d0:82:78:6b:2c:53:31:5c:31:c0:ac:47:3e:4b:63:
         02:41:6c:1a:5a:7e:e0:8e:fe:1c:9a:b6:1c:2f:23:b3:4a:19:
         40:27:78:73:f8:39:16:2d:b9:1e:80:69:14:cd:ef:84:d3:ee:
         3f:ef:c1:82:79:d9:95:33:54:a3:86:07:0e:4c:44:a4:7a:fc:
         28:75:65:2d:be:4f:4c:e1:11:0f:31:65:12:96:09:b8:f4:f3:
         ca:e0:e6:23:e7:88:ac:85:f6:47:c8:dc:3b:2e:d3:a0:75:9b:
         ad:22:3a:fb:9b:f5:78:db:2c:84:0e:75:68:d2:ac:b2:65:fe:
         35:f9:c0:56:1a:74:1f:c8:b3:48:f1:21:be:fa:08:b9:e1:8e:
         a1:3e:d9:f4:97:5b:be:20:dc:50:9c:cc:4a:7e:ae:1c:f5:f8:
         4c:68:23:b1:a6:7e:f8:3e:64:67:2e:0b:00:07:e4:85:cd:e3:
         92:16:99:e1:47:ea:98:7d:25:30:87:87:5e:ec:c2:79:66:82:
         54:e7:1a:5d:ea:11:9e:e5:cb:06:0a:33:a4:8e:ed:39:c0:56:
         1b:a0:fd:22:85:46:26:48:28:97:3b:69:85:90:13:f4:db:dc:
         26:2b:49:69:c9:9d:3a:f5:fd:5a:b2:1c:f3:ea:c5:47:1b:2e:
         0c:88:45:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----