Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D6BE29CAB6A11F1B91A4CE2CE1D38B0.roa
File:                     4D6BE29CAB6A11F1B91A4CE2CE1D38B0.roa (raw, json)
Hash identifier:          5tSODqY4C9E9NhMxHg6Y7zo/H/eHHjaKDvSk9XMlCQA=
Subject key identifier:   E3:15:C1:5C:96:4C:DC:0A:20:13:02:FA:52:33:47:E1:23:3E:4A:93
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D3E9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D6BE29CAB6A11F1B91A4CE2CE1D38B0.roa
Signing time:             Tue 08 Sep 2026 09:47:28 +0000
ROA not before:           Tue 08 Sep 2026 09:47:24 +0000
ROA not after:            Wed 04 Nov 2026 09:47:24 +0000
asID:                     395793
IP address blocks:        45.192.112.0/24 maxlen: 24
                          45.192.115.0/24 maxlen: 24
                          45.194.0.0/24 maxlen: 24
                          45.194.12.0/23 maxlen: 24
                          45.194.24.0/24 maxlen: 24
                          45.195.133.0/24 maxlen: 24
                          45.195.255.0/24 maxlen: 24
                          45.198.184.0/24 maxlen: 24
                          45.201.16.0/21 maxlen: 24
                          45.201.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119785 (0x1d3e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  8 09:47:24 2026 GMT
            Not After : Nov  4 09:47:24 2026 GMT
        Subject: CN=6a9fd9b0-5c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:82:86:62:c6:20:af:bf:d2:d7:a7:42:eb:
                    dc:d7:7a:a9:5a:84:d1:70:fa:71:1d:b0:0f:83:48:
                    d4:d7:c2:cc:97:47:d7:fc:82:5e:b3:d7:ca:e7:57:
                    4f:0f:08:72:42:76:13:51:09:b6:55:e3:f1:91:20:
                    6b:16:5d:a7:65:f0:3c:42:ec:f1:8e:85:89:93:a3:
                    99:e9:fe:c1:ce:0a:9e:b6:e5:68:76:35:c8:be:21:
                    40:7a:38:2d:f8:8e:05:1b:9b:66:e3:a4:66:02:d3:
                    45:2c:1b:a8:8e:ae:a7:59:a4:e4:64:c0:be:4b:0c:
                    c1:6a:c2:af:55:27:85:5c:23:dc:84:33:d8:89:3b:
                    f0:d5:14:97:65:63:95:41:1d:a7:fc:39:c8:19:e7:
                    20:88:d3:e8:ce:06:50:15:31:1c:96:fc:6d:f7:f2:
                    b9:d0:08:64:36:18:65:23:cc:2f:00:ad:5f:18:47:
                    fb:32:0a:62:8a:57:7b:15:8d:e3:c1:36:54:4e:97:
                    f5:a4:5e:57:0f:87:5f:fe:7a:1a:21:1e:3a:b6:c4:
                    c6:ce:ed:15:aa:43:2b:04:21:c5:7e:14:9f:ef:48:
                    e9:ad:d6:88:21:80:07:b4:3c:f8:68:0e:81:50:81:
                    f9:9a:ba:75:15:f5:1f:15:fc:b4:25:6f:4c:2b:de:
                    5a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:15:C1:5C:96:4C:DC:0A:20:13:02:FA:52:33:47:E1:23:3E:4A:93
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D6BE29CAB6A11F1B91A4CE2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.112.0/24
                  45.192.115.0/24
                  45.194.0.0/24
                  45.194.12.0/23
                  45.194.24.0/24
                  45.195.133.0/24
                  45.195.255.0/24
                  45.198.184.0/24
                  45.201.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0b:8c:c5:38:44:95:b5:54:0a:b6:b7:04:d1:c1:05:57:f0:03:
         d0:f2:5c:3b:9e:d6:82:90:a3:ed:41:d8:47:f5:a8:4e:8a:a9:
         26:fd:80:e0:e0:32:96:5d:c2:8c:18:35:a8:c8:e7:53:d9:0a:
         ca:5d:6c:26:14:50:b0:77:b6:f2:32:48:c5:d7:b1:d0:28:bf:
         fd:05:72:6d:dd:79:0f:e1:82:13:16:3c:e0:d1:db:ac:c0:a8:
         cf:fc:10:af:e2:59:c4:ed:1d:ea:58:a4:f8:4d:00:71:d5:a4:
         52:91:3d:69:ae:9f:bc:94:0f:cd:0d:da:ec:07:e3:a8:d0:2a:
         a1:9b:d5:d5:90:45:53:a6:06:ac:34:51:41:36:8d:5c:07:d8:
         b0:e6:52:96:43:1b:72:e0:f7:f6:79:eb:0f:35:0c:5c:cc:61:
         e2:22:49:4a:82:dc:c5:fd:09:41:fc:51:e5:f9:4b:e7:08:ba:
         ae:3d:f0:38:1c:1d:70:00:b2:9a:77:f6:b6:8d:1a:0c:42:3b:
         17:51:49:58:0b:3f:57:35:5e:4c:9a:fe:63:67:4c:c5:f0:39:
         15:fe:13:5e:6b:1b:10:ef:a5:79:07:49:ee:5c:fc:4c:e1:8f:
         48:73:05:2d:29:56:a6:15:47:77:17:a2:29:ac:bc:82:be:ed:
         45:34:1d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----