Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E9E0052ADC311F187FF671BCF1D38B0.roa
File:                     1E9E0052ADC311F187FF671BCF1D38B0.roa (raw, json)
Hash identifier:          EdYX4lnqoskrqq+9AoEYhRTBlws4+3H07z2hJAowk90=
Subject key identifier:   38:3E:B7:B2:0E:A4:E6:23:4E:2C:44:3A:75:ED:D7:06:45:E1:BF:DE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D54D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E9E0052ADC311F187FF671BCF1D38B0.roa
Signing time:             Fri 11 Sep 2026 09:28:17 +0000
ROA not before:           Fri 11 Sep 2026 09:28:13 +0000
ROA not after:            Fri 16 Oct 2026 09:28:13 +0000
asID:                     216211
IP address blocks:        45.192.196.0/22 maxlen: 24
                          45.192.200.0/22 maxlen: 24
                          45.192.241.0/24 maxlen: 24
                          45.192.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120141 (0x1d54d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 11 09:28:13 2026 GMT
            Not After : Oct 16 09:28:13 2026 GMT
        Subject: CN=6aa3c9b1-38e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:16:50:5d:2e:22:68:ff:89:74:36:a5:d0:95:
                    30:c9:0f:5e:81:8a:92:4a:7a:53:1b:ca:28:62:38:
                    d3:0e:a2:dc:c1:2d:55:cd:5d:49:c7:bb:87:09:26:
                    79:b9:50:cf:2e:d6:83:9b:77:73:73:0f:a8:d0:bb:
                    55:1c:36:45:f7:4e:92:1c:85:56:56:66:27:63:ef:
                    b6:35:5d:c5:e3:c3:c0:9d:8f:bd:e3:72:41:63:39:
                    f9:b2:37:2e:4c:ab:46:61:21:4e:5d:bd:9c:e7:5e:
                    67:3e:65:62:a6:a0:a1:a3:2b:3f:32:5f:80:0e:be:
                    88:a8:dc:de:0b:87:c7:a5:2f:0e:e3:5a:02:21:ff:
                    a8:1d:fd:58:e1:b7:10:bb:7b:3e:52:4a:cd:8d:85:
                    80:89:4e:2e:9e:25:67:d5:ee:23:03:54:67:de:c2:
                    9f:a4:88:8f:9f:39:9a:a2:8d:d3:d8:05:b9:0d:df:
                    9a:e6:c2:50:56:85:5b:5b:ad:50:cd:27:55:7a:33:
                    a8:bd:da:c7:b3:54:42:a8:61:4e:86:02:08:1e:cb:
                    44:63:89:e5:3e:94:5b:da:b8:5a:e1:9a:72:df:bf:
                    d0:6b:b7:ce:32:1c:a5:73:73:01:f9:8c:08:60:90:
                    16:b4:3a:10:60:9e:bd:92:fb:ab:d7:ef:e3:c0:7a:
                    a2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3E:B7:B2:0E:A4:E6:23:4E:2C:44:3A:75:ED:D7:06:45:E1:BF:DE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E9E0052ADC311F187FF671BCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.196.0-45.192.203.255
                  45.192.241.0/24
                  45.192.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:2c:9b:9d:1a:3b:a5:c1:a0:36:0e:f7:bf:ab:03:58:0c:30:
         c0:f7:d1:f2:98:39:fa:bd:55:e4:24:54:75:c4:ee:57:c8:11:
         f3:88:4e:21:fa:5e:b3:10:b1:e3:a8:28:57:c8:21:4a:4a:89:
         87:b9:01:d3:ea:5e:db:b1:eb:19:ff:dc:fe:64:70:ce:a4:81:
         50:79:b9:00:53:4d:81:3f:e4:22:dd:3c:fe:dc:6d:e2:ca:c8:
         eb:5b:c3:ca:7d:0c:44:d3:2d:8f:f0:fc:f5:42:00:03:c4:af:
         7d:d4:72:84:cb:43:6c:24:da:38:40:96:e8:9b:45:6c:a7:72:
         7e:6d:6a:d8:86:75:bd:22:4c:22:63:b2:2c:39:ec:0c:c4:fa:
         25:ec:0d:31:ed:37:50:ef:6a:83:6c:3e:5c:e5:87:25:b6:cb:
         f7:45:b5:32:13:a2:dc:6b:46:0b:4c:2b:c1:a4:91:0f:c8:28:
         70:bf:b8:61:34:8c:4f:7e:2b:f4:10:f5:e5:8d:5c:f4:60:39:
         b4:14:cb:9f:fa:54:7c:4b:07:22:04:7e:e5:fa:8c:04:c7:ad:
         be:af:0f:42:44:6c:b6:c0:d9:07:e4:9c:9a:de:a1:dc:c9:03:
         35:35:cf:5b:28:ed:13:9a:2a:7d:9e:ed:ae:93:a4:51:c7:13:
         d7:a3:46:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----