Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD67420EBF0B11F187EFCEEACE1D38B0.roa
File:                     FD67420EBF0B11F187EFCEEACE1D38B0.roa (raw, json)
Hash identifier:          FsH+aqFvLcAAqREPNXErlACHQ2glLEXf/0XOn+Q4RMQ=
Subject key identifier:   B5:3C:39:7F:69:20:38:48:C1:FD:93:AF:C7:C6:4A:30:5D:7E:29:95
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA47
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD67420EBF0B11F187EFCEEACE1D38B0.roa
Signing time:             Sat 03 Oct 2026 09:22:44 +0000
ROA not before:           Sat 03 Oct 2026 09:22:40 +0000
ROA not after:            Tue 10 Nov 2026 09:22:40 +0000
asID:                     63139
IP address blocks:        45.197.65.0/24 maxlen: 24
                          45.197.66.0/24 maxlen: 24
                          45.197.67.0/24 maxlen: 24
                          45.197.68.0/23 maxlen: 24
                          45.197.68.0/24 maxlen: 24
                          45.197.69.0/24 maxlen: 24
                          45.197.100.0/24 maxlen: 24
                          45.197.101.0/24 maxlen: 24
                          45.197.102.0/24 maxlen: 24
                          45.197.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121415 (0x1da47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  3 09:22:40 2026 GMT
            Not After : Nov 10 09:22:40 2026 GMT
        Subject: CN=6ac0c964-42ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1b:3b:eb:42:4a:71:af:3a:08:39:e9:51:b3:
                    7b:12:f8:a0:ba:ca:c1:59:31:b6:85:94:13:ce:18:
                    18:f0:45:69:8b:79:0f:87:46:33:7c:ee:81:5a:9b:
                    1f:81:54:9b:49:41:7d:a3:fb:d4:af:d1:5b:0e:79:
                    df:90:c4:8a:ce:10:f5:6a:4e:11:75:34:ab:db:d9:
                    d1:50:b3:b7:0b:86:b5:32:4b:f7:11:b7:33:73:2f:
                    29:b0:1b:c7:85:57:6a:e0:05:af:28:56:bd:04:09:
                    7c:d5:f4:3b:91:75:88:a6:7e:41:bd:f5:20:1e:13:
                    c4:49:5c:48:17:ff:02:9e:51:57:8d:0d:b5:5e:f6:
                    db:dd:b8:de:19:13:6b:59:7d:77:20:0e:43:cd:2e:
                    3d:d2:85:fb:95:a3:0f:2e:77:ef:27:60:21:a2:d3:
                    2b:24:88:06:18:67:79:67:ee:b1:4a:ea:dc:7c:aa:
                    4a:3d:ff:97:d5:66:29:62:eb:1d:cc:fa:13:70:01:
                    b7:84:d4:33:16:f4:ae:f3:0d:f1:1b:4e:a0:cb:95:
                    d0:3b:ab:4f:49:cb:16:19:e2:56:71:1c:d7:0f:74:
                    b3:51:9c:14:4c:e1:cb:f5:fb:42:c0:c6:29:72:35:
                    be:61:bd:22:a4:1c:ec:b6:7d:ed:ed:3a:80:e7:b9:
                    4a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3C:39:7F:69:20:38:48:C1:FD:93:AF:C7:C6:4A:30:5D:7E:29:95
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FD67420EBF0B11F187EFCEEACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.65.0-45.197.69.255
                  45.197.100.0-45.197.102.255
                  45.197.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:bb:b7:33:28:e8:21:4d:07:c9:0f:86:e8:36:a0:56:e9:c3:
         26:a8:d1:49:8f:bd:cd:46:9d:08:9a:21:54:dd:30:fd:94:c5:
         de:c6:2b:2b:1b:30:a5:ed:d8:d6:51:ba:b7:a5:f2:68:85:18:
         e5:08:51:fa:5e:fd:2d:3c:56:57:42:ad:8e:60:af:3b:da:f9:
         85:32:0f:42:00:fa:80:b1:76:2c:ca:b9:78:92:6c:ae:7c:55:
         11:b4:01:01:2a:b7:a9:73:f5:c8:36:32:62:02:2d:58:70:49:
         f0:bc:18:5c:2f:2c:ae:f1:25:09:8b:d5:6a:2b:3d:8e:85:2b:
         53:51:ed:ac:ab:28:c2:12:87:05:f1:91:37:0d:f0:dd:07:87:
         ae:55:bc:db:7b:42:f0:f6:5d:21:eb:b3:b9:b9:df:54:53:f4:
         35:09:df:42:32:41:96:34:82:50:f6:75:a1:f2:25:77:fb:28:
         35:2e:d3:09:0d:fa:a3:a7:59:7a:7c:e7:8b:11:d4:cb:19:e2:
         d0:36:00:cd:fe:42:1f:2f:d2:aa:bb:1d:30:60:77:ef:ec:12:
         65:c7:dd:64:29:c1:80:34:42:83:72:ec:42:4f:13:c6:97:86:
         3f:61:48:7a:0d:95:c6:45:13:7a:07:ef:ad:68:70:d5:0d:62:
         04:78:17:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----