Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE2DA04CADAC11F19FA0DA18CF1D38B0.roa
File:                     DE2DA04CADAC11F19FA0DA18CF1D38B0.roa (raw, json)
Hash identifier:          STbpNTxuudLjORnnLZSNPSRxeqQBUKA44QGsrVgGYzU=
Subject key identifier:   A3:3D:24:6D:F6:7B:72:3B:28:1A:6A:EC:F8:F0:41:07:65:83:80:5E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D511
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE2DA04CADAC11F19FA0DA18CF1D38B0.roa
Signing time:             Fri 11 Sep 2026 06:49:00 +0000
ROA not before:           Fri 11 Sep 2026 06:48:56 +0000
ROA not after:            Sat 10 Oct 2026 06:48:56 +0000
asID:                     213169
IP address blocks:        45.192.240.0/22 maxlen: 24
                          45.202.252.0/23 maxlen: 24
                          45.202.252.0/24 maxlen: 24
                          45.202.253.0/24 maxlen: 24
                          45.202.254.0/23 maxlen: 24
                          45.202.254.0/24 maxlen: 24
                          45.202.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120081 (0x1d511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 11 06:48:56 2026 GMT
            Not After : Oct 10 06:48:56 2026 GMT
        Subject: CN=6aa3a45c-2e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:07:6e:3f:46:91:7f:32:ca:13:3c:af:2d:51:
                    87:a6:1a:94:86:c5:18:36:53:12:27:bf:7e:c2:85:
                    18:0d:64:16:50:b3:2f:e6:bc:73:ba:8b:94:81:ae:
                    08:c6:a9:72:2c:97:7c:6f:a3:65:52:24:5e:6a:5c:
                    0c:34:f4:37:4a:00:69:22:5d:9a:85:20:48:0f:cd:
                    6f:a7:d2:33:2e:9c:2f:11:83:5b:d5:f8:16:03:65:
                    30:21:72:2b:9c:a1:68:da:40:49:78:95:17:95:11:
                    dd:bc:4e:ed:8a:4d:e4:f2:d6:14:4c:e3:5e:f4:84:
                    d1:2f:70:db:14:91:31:75:be:aa:85:77:92:a0:34:
                    c5:7a:b6:79:2e:60:c6:a7:0b:4f:e0:bc:99:03:e0:
                    52:ab:b8:af:cf:43:30:c8:e9:28:a7:1f:8e:e4:bf:
                    5e:23:6a:48:c7:29:93:ea:b7:be:50:8c:a2:ed:4f:
                    c9:c5:6a:21:0a:31:be:ce:dd:08:dd:d7:c1:ae:d7:
                    20:66:b7:ab:fe:cb:22:d9:cd:0f:51:ca:e3:d4:fd:
                    03:90:12:c5:f1:13:f3:74:5c:07:79:ed:3e:d5:99:
                    0b:fb:97:d1:1f:37:90:71:b1:8a:61:f9:10:ba:38:
                    95:c7:0b:f9:38:ca:31:15:2e:da:e2:fb:3b:f5:76:
                    cb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3D:24:6D:F6:7B:72:3B:28:1A:6A:EC:F8:F0:41:07:65:83:80:5E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE2DA04CADAC11F19FA0DA18CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.240.0/22
                  45.202.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:0f:59:c1:1c:02:df:54:68:21:56:cd:60:9b:c1:f6:74:ff:
         28:a5:54:fc:a6:e7:3e:51:e6:5d:bf:d4:d2:d9:d4:f0:84:38:
         34:4c:c1:66:36:1e:2a:cb:82:7c:2b:2c:b0:63:c3:29:5d:50:
         95:32:23:0b:50:c2:01:2c:bf:b0:be:06:c6:78:8f:fe:39:41:
         3c:ae:4f:d1:5d:05:b7:a5:47:9a:34:02:94:a3:10:04:e5:ee:
         14:47:91:ca:27:cc:43:9d:c1:20:94:4f:b7:46:54:b0:53:eb:
         37:15:13:25:2a:46:01:97:ab:45:cc:2f:35:65:ee:84:4a:0a:
         63:fb:af:d5:0e:f3:f0:b7:bb:c5:ef:8e:0f:64:63:1c:b3:5e:
         a7:f3:34:a8:e8:82:bf:a6:90:48:31:77:80:49:15:da:39:3e:
         aa:66:2e:03:b9:db:f6:a7:9d:19:4b:2c:1b:ba:3d:78:65:31:
         08:4a:37:9d:ad:03:71:ee:a3:d6:4f:b1:3c:8c:86:4f:aa:0b:
         e6:63:89:28:5b:a9:a8:78:46:61:a6:1f:b9:2f:2c:18:62:57:
         86:9b:06:2d:79:54:9e:7c:00:9b:6a:ef:91:dd:01:f5:82:b6:
         85:22:41:70:97:92:71:21:55:04:c6:4f:cc:83:c3:52:dd:b4:
         45:6e:1e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----