Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A71A04EB99F11F18A485B02CF1D38B0.roa
File:                     3A71A04EB99F11F18A485B02CF1D38B0.roa (raw, json)
Hash identifier:          3lJi08uEL501lr4HlwEvK35DnHWIRq5l+TW8z8rzPUc=
Subject key identifier:   72:54:48:EF:67:C4:A1:74:76:C7:31:A5:3F:4F:90:B0:A6:06:19:5B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D908
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A71A04EB99F11F18A485B02CF1D38B0.roa
Signing time:             Sat 26 Sep 2026 11:41:36 +0000
ROA not before:           Sat 26 Sep 2026 11:41:32 +0000
ROA not after:            Thu 12 Nov 2026 11:41:32 +0000
asID:                     135222
IP address blocks:        45.195.159.0/24 maxlen: 24
                          45.195.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121096 (0x1d908)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 26 11:41:32 2026 GMT
            Not After : Nov 12 11:41:32 2026 GMT
        Subject: CN=6ab7af70-bbf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:56:7d:ed:64:50:47:50:85:0b:83:ca:75:1d:
                    e0:ce:32:70:47:fa:07:d9:16:43:c4:6f:d0:d7:53:
                    53:0f:56:b4:0b:bc:07:f8:f5:45:b4:82:e3:e4:f8:
                    b3:ab:79:65:2e:64:e9:36:95:66:51:66:42:dc:72:
                    78:98:0c:ea:0f:11:cc:aa:d6:3d:8a:78:23:6c:85:
                    e8:70:5f:47:6a:35:45:ff:7f:f5:e3:ef:3e:a6:41:
                    42:21:2a:0a:e2:85:c2:f8:b9:93:be:31:d3:62:19:
                    ec:ea:4a:dd:de:25:ab:96:87:d1:c2:fe:e3:d2:7f:
                    37:37:2f:97:1f:2a:82:8c:2f:9b:40:34:63:4c:3f:
                    4f:26:ba:56:4d:f3:05:cc:6a:dc:42:bf:35:89:ec:
                    f6:94:ed:b1:a8:a7:2c:4d:13:02:53:72:9d:5d:7a:
                    38:d0:c8:ea:cc:37:18:e8:ff:71:b2:28:a4:f8:80:
                    03:57:3a:b7:8e:72:99:46:72:cb:06:46:f2:4b:74:
                    d6:ab:61:92:d3:e1:45:dc:29:ff:a4:47:bc:dc:99:
                    6b:11:f7:f6:52:b3:5a:0e:33:26:ce:94:e6:94:09:
                    c3:df:53:27:f6:ba:0b:c9:72:57:42:0e:92:1c:63:
                    51:83:0f:ae:69:cb:da:bf:38:22:6c:27:c3:9f:54:
                    57:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:54:48:EF:67:C4:A1:74:76:C7:31:A5:3F:4F:90:B0:A6:06:19:5B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3A71A04EB99F11F18A485B02CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.159.0/24
                  45.195.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:a9:37:3e:ba:1a:0b:bd:b1:90:7e:a9:d5:b3:10:94:3c:f0:
         dc:28:42:34:ba:16:90:21:b7:0c:1f:58:b2:a8:35:04:dc:f1:
         2e:90:0e:fb:8a:86:18:8f:fc:a8:40:17:1a:a0:97:30:fb:29:
         27:06:4a:dc:ae:2c:16:e4:aa:41:3e:41:6f:04:2c:af:78:04:
         c1:04:03:55:a1:61:c4:03:57:c4:ea:70:f3:54:98:57:e3:2c:
         d0:f2:09:9f:03:ad:99:65:2b:3d:19:f3:ec:07:2d:dc:e1:e9:
         98:7e:73:5d:09:c4:39:f2:6f:2c:a0:81:29:8e:93:50:bb:bc:
         1d:1c:16:39:b2:78:78:d3:8a:eb:b8:ec:29:cc:1c:13:22:85:
         76:f9:e0:ee:78:94:3d:2e:44:22:17:9b:a5:5a:cd:3d:9f:32:
         bf:19:76:e0:49:f0:73:9f:df:65:d9:7d:9f:7f:d9:31:e9:13:
         0b:83:99:58:71:38:37:fc:a6:8d:36:e0:45:74:ea:09:36:5f:
         e4:e8:88:df:8a:eb:af:7b:19:48:0a:c0:41:82:4c:31:d6:d3:
         30:18:58:64:ee:94:cd:96:8b:d8:78:75:c4:0f:f7:b4:14:78:
         e8:9c:bc:b7:3b:e6:a8:47:f2:1d:44:32:ed:6c:1d:5b:87:f7:
         d6:b8:1a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----