Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0612B36EB32E11F18CED47ECCE1D38B0.roa
File:                     0612B36EB32E11F18CED47ECCE1D38B0.roa (raw, json)
Hash identifier:          XzZSoETJ6TOyAn+0O1m5hgVq8VIqaK4jLY5nQoNndw8=
Subject key identifier:   65:A9:3A:90:A3:F7:D4:F2:08:83:83:D3:48:80:4B:5C:88:59:26:A2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D6D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0612B36EB32E11F18CED47ECCE1D38B0.roa
Signing time:             Fri 18 Sep 2026 06:56:08 +0000
ROA not before:           Fri 18 Sep 2026 06:56:04 +0000
ROA not after:            Mon 28 Sep 2026 06:56:04 +0000
asID:                     151066
IP address blocks:        45.195.48.0/22 maxlen: 24
                          45.195.48.0/24 maxlen: 24
                          45.195.49.0/24 maxlen: 24
                          45.195.50.0/24 maxlen: 24
                          45.195.51.0/24 maxlen: 24
                          45.195.154.0/23 maxlen: 24
                          45.195.154.0/24 maxlen: 24
                          45.195.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120537 (0x1d6d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 18 06:56:04 2026 GMT
            Not After : Sep 28 06:56:04 2026 GMT
        Subject: CN=6aace088-e357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3a:7f:a7:92:19:63:6e:46:b6:38:1e:59:12:
                    29:62:bc:2b:20:81:8c:38:c0:4b:ec:79:32:a6:85:
                    7a:fd:42:8e:fa:de:ac:41:f6:2f:bb:1d:e4:9a:f5:
                    55:af:93:5d:73:41:93:39:78:a5:b9:5f:f6:78:3b:
                    f6:e7:e3:51:2a:69:62:4a:28:60:9e:f8:b1:e7:b6:
                    53:76:7d:56:24:2d:18:a8:ff:b8:24:41:44:89:37:
                    40:45:3c:60:11:b9:e3:40:2f:ce:43:dd:0b:a1:3f:
                    af:ad:c1:c2:a6:0a:5d:35:20:b8:e4:d3:95:cd:e1:
                    33:cb:62:ed:c7:d0:a0:ab:c3:c2:c0:b3:ff:4c:f2:
                    73:65:e5:63:04:2f:07:79:f0:f5:1c:aa:32:37:c5:
                    37:72:7b:46:a6:c1:d8:8b:fa:6d:9f:d7:6b:79:ea:
                    48:12:06:69:2a:6d:5a:da:72:c7:c4:bb:9f:3e:31:
                    6b:2d:0f:a3:8b:02:4c:ad:7e:6c:19:f6:ef:bb:3e:
                    37:d6:bf:ef:b1:32:aa:d7:78:fe:a0:b1:fb:95:e3:
                    12:d1:01:12:91:93:55:e0:a8:a4:6d:8a:8e:c7:25:
                    c3:07:87:3c:8b:fe:66:ff:e0:5b:cb:3f:df:60:f2:
                    7b:0b:1e:67:50:c2:ef:55:4c:0a:5b:3d:5a:4e:7c:
                    bc:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A9:3A:90:A3:F7:D4:F2:08:83:83:D3:48:80:4B:5C:88:59:26:A2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0612B36EB32E11F18CED47ECCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.48.0/22
                  45.195.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:71:07:85:65:78:40:7f:83:56:42:d8:00:2e:d2:d3:7d:1d:
         ed:3d:7f:4c:a2:c8:fc:69:6b:79:35:52:8b:a0:d1:69:37:3f:
         e8:4a:6f:ca:22:46:5a:42:d0:9f:10:a6:79:42:e9:cd:f1:b9:
         4b:fd:b7:ec:f7:f4:74:03:4e:fc:15:25:a6:bb:05:81:28:54:
         e4:53:2f:35:7a:cf:36:fc:81:11:ea:b0:7d:89:c9:4f:58:02:
         88:2a:f1:55:9d:5e:67:95:50:b7:3f:01:7c:94:df:da:80:17:
         29:13:b5:e2:3c:50:fe:57:8d:3e:b8:81:34:48:26:70:06:50:
         11:87:1d:6c:75:17:40:5f:27:82:56:9f:a1:0b:d9:b1:16:cc:
         9d:eb:d0:18:65:c5:75:e8:c4:74:25:ed:79:3b:66:dc:5e:46:
         7c:d4:a7:f7:b0:4c:6e:50:5f:ce:7c:d3:5e:76:b1:6a:28:26:
         48:64:e3:98:fb:aa:a8:f0:53:d4:b0:e7:56:20:90:07:45:5e:
         79:43:46:c7:eb:3b:3d:07:fe:59:3e:94:3d:63:55:35:97:8d:
         76:1b:be:a3:a7:58:99:e4:2a:48:04:81:31:83:bc:0f:f1:40:
         25:01:30:5a:88:d8:5e:2d:97:09:90:42:23:51:59:bc:3d:13:
         c0:90:93:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----