Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC6C949A9C6E11F1AA9134E7CE1D38B0.roa
File:                     FC6C949A9C6E11F1AA9134E7CE1D38B0.roa (raw, json)
Hash identifier:          lwPMv8a9WF68gbREyHYkHQECnZMQXwC0PAaexzxML6g=
Subject key identifier:   FF:1A:79:F1:2F:C7:A5:1E:A8:37:7F:29:5B:9C:61:4B:EA:AC:2E:74
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE8C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC6C949A9C6E11F1AA9134E7CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 08:13:12 +0000
ROA not before:           Thu 20 Aug 2026 08:13:08 +0000
ROA not after:            Tue 22 Sep 2026 08:13:08 +0000
asID:                     22516
IP address blocks:        45.194.128.0/17 maxlen: 24
                          45.196.184.0/21 maxlen: 24
                          45.200.192.0/18 maxlen: 24
                          45.204.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118412 (0x1ce8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 08:13:08 2026 GMT
            Not After : Sep 22 08:13:08 2026 GMT
        Subject: CN=6a86b718-eba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:35:64:4f:bd:c2:01:dd:50:17:3a:1d:8b:
                    12:84:13:11:1e:87:56:f0:15:3b:41:32:7c:1e:30:
                    cb:da:a9:01:1d:a9:6a:a4:e3:99:42:1d:69:3f:2d:
                    9a:3f:ac:e1:a0:56:b9:70:d0:d1:45:a2:40:34:4d:
                    65:6c:4e:03:65:cb:cc:21:21:0e:b7:c9:e9:67:42:
                    59:18:ff:a3:98:8b:d9:0e:7b:e5:c4:3b:c8:71:79:
                    f1:fe:a7:82:ab:c0:da:ff:00:54:2a:50:d8:6a:40:
                    87:78:c7:a3:08:3d:84:05:d5:85:54:de:a6:bf:57:
                    bd:3b:94:ec:b0:d4:df:fe:c7:4f:22:fc:2b:dd:6f:
                    9d:62:d2:c1:66:ac:54:f4:81:a9:f2:04:4d:96:c0:
                    02:fb:83:84:34:1b:fe:62:f0:e0:ce:44:f2:82:4d:
                    a2:c4:62:6e:17:3a:29:fb:a2:98:4f:93:1b:d1:81:
                    30:37:4d:3e:9d:1d:0a:81:0a:ba:75:a0:47:e5:ce:
                    90:ae:1a:80:8d:65:fc:b9:93:24:23:b8:ff:88:7f:
                    e3:f9:37:af:db:e2:0d:ac:c7:61:27:4d:d8:2d:3a:
                    22:60:c6:2a:79:43:87:b1:d3:ab:5d:5c:89:5b:60:
                    68:9a:ea:b3:23:81:f9:00:86:9c:e3:1f:ae:10:0d:
                    42:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1A:79:F1:2F:C7:A5:1E:A8:37:7F:29:5B:9C:61:4B:EA:AC:2E:74
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FC6C949A9C6E11F1AA9134E7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.128.0/17
                  45.196.184.0/21
                  45.200.192.0/18
                  45.204.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         10:12:50:96:97:6f:7c:1b:fa:50:00:e1:92:fc:1a:80:e0:ed:
         38:20:b6:93:58:69:16:69:a6:d7:5d:52:36:fc:8e:9a:2c:0c:
         b5:e5:1a:d3:0b:c6:63:63:49:91:ae:69:b9:76:59:c2:9e:d0:
         3e:6c:0b:d5:b4:0a:30:27:54:2d:9e:9d:4c:bc:65:36:53:b4:
         ed:bd:b9:ef:6c:e9:7d:71:8d:9a:d2:49:f5:72:48:57:1c:ba:
         b4:b0:69:43:d5:fb:f2:16:d7:7a:da:12:c1:29:5a:92:57:91:
         28:52:77:38:4e:c2:16:c9:89:57:70:aa:0e:f6:93:03:34:68:
         b9:19:c7:35:72:df:ce:34:d4:87:5a:b6:cc:c5:5b:a4:f8:1f:
         e1:3b:7f:f4:34:4d:c8:25:56:83:33:f7:3e:bb:7d:b6:bc:6c:
         96:3d:f6:15:f6:71:30:57:14:3b:26:16:33:01:01:d7:dd:ab:
         cd:c3:f7:33:77:0d:a9:91:70:a8:16:18:e1:8f:c0:7e:6b:5a:
         52:d3:f3:9c:19:49:ec:49:55:40:cb:33:d4:64:12:d6:5b:0c:
         0e:49:6d:13:25:f9:c4:4f:82:a5:72:9d:eb:0e:c9:90:ba:3b:
         c5:7e:03:d1:88:6f:75:a4:38:c8:86:99:71:c8:4a:a9:4e:91:
         58:7f:0e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----