Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40909CF2AB5B11F18FB55507CF1D38B0.roa
File:                     40909CF2AB5B11F18FB55507CF1D38B0.roa (raw, json)
Hash identifier:          eHNQHrDP4sdtWc2i7EHOpiNqkh7vTCakX38YoAszLbA=
Subject key identifier:   64:B1:17:87:9A:D1:76:9D:5D:C8:89:9C:16:31:10:AD:B0:E9:C6:25
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D3D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40909CF2AB5B11F18FB55507CF1D38B0.roa
Signing time:             Tue 08 Sep 2026 07:59:44 +0000
ROA not before:           Tue 08 Sep 2026 07:59:40 +0000
ROA not after:            Thu 15 Oct 2026 07:59:40 +0000
asID:                     152711
IP address blocks:        45.202.64.0/24 maxlen: 24
                          45.202.65.0/24 maxlen: 24
                          45.202.66.0/24 maxlen: 24
                          45.202.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119769 (0x1d3d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  8 07:59:40 2026 GMT
            Not After : Oct 15 07:59:40 2026 GMT
        Subject: CN=6a9fc070-a776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a1:ca:77:48:47:a1:0d:20:8a:b8:dc:a7:6a:
                    ea:40:e0:0b:bb:a2:1d:92:ff:a1:84:3d:94:f2:0a:
                    d1:89:5f:a9:2b:21:49:55:7a:6c:fc:2a:cb:f4:a3:
                    01:ce:13:ad:26:f4:70:e5:5e:43:45:46:13:f3:a4:
                    fd:b2:d9:46:51:9b:3b:34:c4:4c:b2:02:ff:ef:e3:
                    36:48:b5:73:bb:65:58:f6:3e:a5:eb:0a:83:20:2a:
                    2e:e6:5a:5b:5e:25:4b:38:ee:e8:77:54:a4:bd:7e:
                    3f:d8:6b:b8:87:54:eb:e6:7b:c3:0d:0d:59:a2:f8:
                    3c:77:7c:ee:df:90:9d:1d:36:a9:19:48:55:c6:b0:
                    a1:f9:05:df:60:90:24:77:5c:30:e7:0c:f8:5f:37:
                    c5:8b:3e:6a:07:71:12:12:25:8e:12:61:87:da:a0:
                    b5:df:f8:1f:ae:fc:13:a5:b6:c2:43:fb:aa:9c:60:
                    c8:e1:84:99:21:db:c0:fe:de:72:c4:24:46:cd:8f:
                    88:5f:3a:9d:d9:73:27:12:8d:27:a7:1a:70:57:0c:
                    e6:8a:88:0b:46:f7:d4:cf:7f:7f:ad:15:86:9d:b1:
                    b7:d6:a2:9d:14:55:49:34:8f:ea:a1:f6:4a:c6:e1:
                    6b:7f:ff:f5:35:19:62:06:e4:0b:41:f8:0e:94:89:
                    c3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B1:17:87:9A:D1:76:9D:5D:C8:89:9C:16:31:10:AD:B0:E9:C6:25
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40909CF2AB5B11F18FB55507CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:e1:27:7f:10:a4:9a:f8:fd:90:f0:a2:00:21:06:e3:eb:26:
         40:e5:8d:11:42:01:90:80:a0:d4:6a:24:ac:e3:c1:1f:ba:34:
         90:b6:31:e8:1e:d3:00:06:7f:8f:c9:f4:a4:36:48:92:79:6a:
         8c:7c:98:b9:58:f1:f3:d4:a1:66:62:47:77:4f:6f:c6:28:e6:
         da:5f:a7:3c:ef:2f:40:65:6e:4e:01:61:a2:8e:51:b2:08:7b:
         71:92:50:22:f7:8a:e9:53:7b:01:f2:96:f2:1e:ea:34:8c:12:
         dd:a9:e6:01:d2:84:c5:c4:33:42:ae:b1:19:60:03:9c:ae:be:
         a5:3b:d2:3d:b8:b1:cd:8f:e4:5e:d2:d1:72:9f:9e:69:60:5d:
         04:e2:65:54:d6:3f:df:21:a8:2d:1a:f4:94:43:33:48:e7:4d:
         5a:c3:e3:49:fb:8c:59:fc:a3:ed:8a:a9:ed:3a:34:70:75:f8:
         03:bd:9d:f7:8f:3d:e9:4f:7f:6b:8e:47:67:ad:70:de:ac:a8:
         87:07:e5:6d:3c:55:79:74:eb:a0:c7:ca:c3:08:d9:cd:27:0d:
         a1:10:8c:47:68:54:da:46:c0:be:9d:6e:11:a6:5d:f7:95:25:
         1d:9f:e7:87:20:06:86:75:4e:31:30:f2:75:c8:0d:a3:b2:a5:
         20:3d:c8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----