Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1488BA16ADB011F1A5E611ADCE1D38B0.roa
File:                     1488BA16ADB011F1A5E611ADCE1D38B0.roa (raw, json)
Hash identifier:          Ok80THebB3BxPS1PBaJwIwJUoA2U2qGqn7DT3UHQbpg=
Subject key identifier:   FF:95:FD:EC:99:AF:D1:65:C1:C6:83:9D:78:38:75:32:41:99:AF:96
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D51B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1488BA16ADB011F1A5E611ADCE1D38B0.roa
Signing time:             Fri 11 Sep 2026 07:12:00 +0000
ROA not before:           Fri 11 Sep 2026 07:11:56 +0000
ROA not after:            Sat 10 Oct 2026 07:11:56 +0000
asID:                     61112
IP address blocks:        45.192.240.0/22 maxlen: 24
                          45.202.245.0/24 maxlen: 24
                          45.202.248.0/22 maxlen: 24
                          45.202.249.0/24 maxlen: 24
                          45.202.254.0/23 maxlen: 24
                          45.202.254.0/24 maxlen: 24
                          45.202.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120091 (0x1d51b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 11 07:11:56 2026 GMT
            Not After : Oct 10 07:11:56 2026 GMT
        Subject: CN=6aa3a9c0-4f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d0:5b:1e:17:8a:ef:de:8b:f5:be:dc:6e:d2:
                    a7:90:12:c2:0b:83:2a:bd:da:0d:92:8e:8e:d4:c1:
                    08:85:99:e9:63:11:c5:f0:d2:49:df:36:e8:e9:44:
                    93:06:f1:e7:7c:31:86:7a:05:ae:15:7a:0f:cc:41:
                    0c:dd:fc:ff:e2:47:2b:73:b4:57:00:7b:2b:16:ef:
                    a1:ea:e8:15:e6:39:0c:ee:6f:de:bf:46:bc:72:c3:
                    21:81:0b:c0:b4:f1:0d:4a:76:5b:e6:fe:ff:42:65:
                    85:69:45:2c:8c:eb:1d:d9:be:33:32:58:b9:63:1d:
                    b6:b7:d5:d0:85:af:e6:74:82:28:d5:7f:29:4c:b6:
                    6b:ce:6f:b2:9c:50:68:d0:34:fb:6f:1a:50:79:93:
                    94:6d:d3:85:d1:ad:47:72:56:b1:48:81:ff:9b:f3:
                    f3:18:67:d6:b5:6e:d2:a0:b8:9b:e8:5e:fb:79:a3:
                    ae:f8:b0:e1:e9:fd:af:de:dc:4c:37:af:02:d3:6f:
                    17:1d:6a:b0:35:1c:99:a2:b1:b7:1f:82:5f:c2:64:
                    f8:0c:00:7f:da:a2:7e:0a:e6:95:ea:74:6e:07:b7:
                    4d:62:36:27:02:36:df:88:16:e9:34:63:33:11:69:
                    07:88:d1:e8:22:cb:9d:41:8e:8e:35:24:83:55:97:
                    f6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:95:FD:EC:99:AF:D1:65:C1:C6:83:9D:78:38:75:32:41:99:AF:96
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1488BA16ADB011F1A5E611ADCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.240.0/22
                  45.202.245.0/24
                  45.202.248.0/22
                  45.202.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:fc:e4:d8:0e:cc:c4:12:fa:45:e6:49:23:b3:0a:61:9d:e9:
         6d:06:6e:62:30:25:24:5e:ad:af:fa:54:59:42:83:19:ba:8a:
         d3:12:b3:02:7d:31:fb:cf:57:f8:55:00:68:27:e7:a4:7e:ab:
         c7:48:5a:d9:fd:86:0f:dd:1e:6a:34:9a:55:11:94:8a:2d:43:
         b2:90:00:6b:d5:69:39:5e:58:2b:7b:57:af:78:79:aa:63:ca:
         bb:dc:77:ea:9c:8d:b7:04:f7:7a:4a:cd:ee:49:01:dd:0b:33:
         aa:36:a3:f8:49:94:b8:11:68:b6:80:50:19:87:9c:5b:5e:23:
         f6:a6:23:f7:4f:24:01:27:a8:73:3b:0a:6b:82:c7:88:de:55:
         36:99:1b:11:d4:06:45:c4:89:9a:1b:08:a5:81:fe:17:87:03:
         19:fe:08:a5:20:0c:0b:de:2b:94:88:74:0b:5f:03:49:00:41:
         36:76:30:26:2d:16:ea:f9:c5:1a:fa:2e:4e:ea:a3:85:40:84:
         df:a3:57:8d:7d:c8:06:54:0a:c0:ce:c5:13:6d:a9:80:44:24:
         b0:95:a2:b2:79:0c:a2:bd:86:31:bf:f2:0c:41:6a:6b:4e:a8:
         f4:d5:43:90:1f:55:68:13:b3:32:6b:c8:4c:60:6b:6f:3d:d5:
         ec:5a:59:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----