Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A22C2F20B58911F1AA576CE3CE1D38B0.roa
File:                     A22C2F20B58911F1AA576CE3CE1D38B0.roa (raw, json)
Hash identifier:          b59Ci0m/Z654spZxiHcKWYWtgnygC0MucXt5SxCwXTI=
Subject key identifier:   19:7A:38:E7:47:86:6E:2F:74:0F:23:6C:39:F2:EA:E5:6A:8F:17:7B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D753
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A22C2F20B58911F1AA576CE3CE1D38B0.roa
Signing time:             Mon 21 Sep 2026 06:56:56 +0000
ROA not before:           Mon 21 Sep 2026 06:56:52 +0000
ROA not after:            Mon 28 Sep 2026 06:56:52 +0000
asID:                     134365
IP address blocks:        45.197.144.0/21 maxlen: 24
                          45.197.144.0/24 maxlen: 24
                          45.197.145.0/24 maxlen: 24
                          45.197.146.0/24 maxlen: 24
                          45.197.147.0/24 maxlen: 24
                          45.197.148.0/24 maxlen: 24
                          45.197.149.0/24 maxlen: 24
                          45.197.150.0/24 maxlen: 24
                          45.197.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120659 (0x1d753)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 21 06:56:52 2026 GMT
            Not After : Sep 28 06:56:52 2026 GMT
        Subject: CN=6ab0d538-0074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:a0:cb:32:2b:ef:78:e2:a4:6b:57:f8:91:
                    4f:cf:6d:c7:7a:e9:54:64:82:64:55:b5:ff:28:00:
                    da:a1:5c:ca:48:b0:90:0b:09:c8:33:87:70:79:bc:
                    ae:9d:0a:d4:f0:b0:7e:d6:e5:ee:cf:93:6c:6c:ff:
                    f7:d9:8b:37:7d:44:85:ec:32:85:eb:e5:50:89:f2:
                    9f:58:ab:8c:dd:30:f8:91:af:2e:36:71:3a:6f:57:
                    18:4d:c5:95:7c:9c:8d:56:7a:be:03:56:0c:64:81:
                    fe:dd:ca:0e:27:cd:81:3c:8b:51:0e:85:dd:5f:07:
                    18:11:27:96:b5:5c:fc:82:dd:1c:b0:7a:26:81:75:
                    39:f9:cf:5c:22:4f:d4:46:ef:88:14:92:35:35:2f:
                    5f:ca:6f:3c:6b:c2:3c:3b:35:a6:55:a1:38:fd:6d:
                    5e:9f:80:f1:f1:f3:e9:c9:d0:b1:9e:c2:04:c0:29:
                    f7:db:34:e1:b9:1f:64:a5:be:cc:ec:75:4c:3f:99:
                    e6:1b:b5:e9:b4:7a:8b:69:03:b7:fa:26:69:43:6b:
                    22:f5:15:05:bd:d0:53:51:c4:d6:64:9c:3a:bb:8d:
                    eb:a7:34:4a:c3:8e:7e:7d:5c:04:bd:f4:6c:c7:3a:
                    b3:14:e9:7b:c9:7d:2f:4c:f3:93:8b:69:12:5b:29:
                    e1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7A:38:E7:47:86:6E:2F:74:0F:23:6C:39:F2:EA:E5:6A:8F:17:7B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A22C2F20B58911F1AA576CE3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0f:77:95:ba:d5:92:42:d1:83:f1:ac:7d:37:3e:d5:dd:27:d2:
         9b:15:ac:3d:ed:38:59:bc:9c:c3:4e:57:c1:b9:64:28:88:10:
         83:bb:df:61:4a:6a:71:76:b2:46:f6:0d:fb:63:da:ca:4b:14:
         cc:60:6f:09:70:96:a7:9f:42:ee:00:b2:fa:7c:a6:e7:29:43:
         d3:ee:0b:ba:41:b5:f0:74:38:1c:95:02:0e:3d:b7:3b:12:96:
         22:bb:c1:2c:88:54:2c:8c:bf:97:80:2e:b1:f7:0f:0b:37:e5:
         4e:48:ef:5e:15:7c:2f:22:d4:1c:da:0e:21:13:0b:52:99:d8:
         fa:ac:1b:5d:38:88:8a:7c:fc:7b:6c:bb:db:4a:84:ba:5d:5e:
         5c:7c:ff:32:03:6d:ab:50:fa:a8:4d:0f:a7:87:e5:71:6c:53:
         f3:20:df:98:00:8b:90:63:29:df:30:a5:29:83:e7:43:06:9b:
         79:d0:d4:94:11:b5:74:0f:a0:65:b1:26:9d:a8:62:21:b9:ce:
         5a:b1:94:6e:e5:c9:53:07:9c:6c:73:f9:f4:91:13:8e:70:a2:
         7b:4f:f8:7a:57:e6:72:1b:1a:83:04:62:75:5d:4c:8e:94:a1:
         5b:b1:7b:f8:ce:1a:c7:7f:0e:c1:ff:a7:dc:dd:96:b9:b3:95:
         6e:c5:e3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----