Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17532DD0AB6C11F1B310BCEACE1D38B0.roa
File:                     17532DD0AB6C11F1B310BCEACE1D38B0.roa (raw, json)
Hash identifier:          33GzUWqG99p5A0fnzXUdhGvcBWTLQpeyiGIPZxDhv/Y=
Subject key identifier:   58:02:AB:7F:E1:51:E5:54:E5:C5:25:3C:B0:32:12:28:1F:FB:71:E1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D3ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17532DD0AB6C11F1B310BCEACE1D38B0.roa
Signing time:             Tue 08 Sep 2026 10:00:16 +0000
ROA not before:           Tue 08 Sep 2026 10:00:12 +0000
ROA not after:            Wed 04 Nov 2026 10:00:12 +0000
asID:                     395793
IP address blocks:        45.192.165.0/24 maxlen: 24
                          45.192.166.0/24 maxlen: 24
                          45.192.227.0/24 maxlen: 24
                          45.192.228.0/22 maxlen: 24
                          45.194.1.0/24 maxlen: 24
                          45.194.4.0/24 maxlen: 24
                          45.194.5.0/24 maxlen: 24
                          45.195.63.0/24 maxlen: 24
                          45.196.194.0/23 maxlen: 24
                          45.196.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119789 (0x1d3ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  8 10:00:12 2026 GMT
            Not After : Nov  4 10:00:12 2026 GMT
        Subject: CN=6a9fdcb0-b2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f1:bf:a7:6e:6f:ac:24:c2:c0:b0:b1:15:59:
                    9c:c0:41:ca:57:d8:45:c0:d2:bb:2d:21:96:df:1e:
                    fa:b0:e3:66:d5:b8:eb:d3:83:a2:c8:23:ab:2c:71:
                    7a:91:5f:55:bf:44:9e:c3:b0:33:3b:a3:bd:4c:82:
                    74:6b:e4:40:67:34:1f:63:e6:96:5b:07:f1:00:0d:
                    1e:f4:19:25:04:3e:89:94:13:3d:c1:7c:c1:12:1d:
                    7e:b9:a8:75:ae:c0:c0:27:db:71:bf:04:76:52:8c:
                    e6:a3:6f:2f:f7:07:da:26:3b:8c:6c:2b:54:fe:a0:
                    39:d3:80:21:7d:67:cf:be:43:f0:1c:f0:80:47:e0:
                    70:18:52:4f:5f:62:f2:b6:39:03:ee:c7:bf:07:76:
                    db:61:7a:54:63:65:ee:ba:f7:f3:80:98:9b:74:77:
                    a2:f2:db:bd:4d:02:32:8d:44:93:82:e3:ac:db:75:
                    7b:20:d6:6e:a9:fc:89:d8:6a:2a:cf:f8:06:96:82:
                    4f:e9:0e:78:70:91:80:33:80:19:cc:1b:39:ad:cd:
                    13:39:1b:3c:82:85:be:50:da:a9:d0:e7:98:5b:3d:
                    60:cc:4d:ab:51:16:08:f6:b1:0a:21:17:b0:43:f9:
                    ae:92:96:ec:1a:91:f8:b3:d7:96:67:2e:2d:04:58:
                    68:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:02:AB:7F:E1:51:E5:54:E5:C5:25:3C:B0:32:12:28:1F:FB:71:E1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17532DD0AB6C11F1B310BCEACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.165.0-45.192.166.255
                  45.192.227.0-45.192.231.255
                  45.194.1.0/24
                  45.194.4.0/23
                  45.195.63.0/24
                  45.196.194.0/23
                  45.196.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:3b:c5:7b:87:05:6e:e1:ff:87:5b:e0:20:1c:1f:bc:bd:78:
         87:63:7e:c4:ad:1c:46:b1:db:61:57:30:68:0c:65:c0:c0:b3:
         fa:56:e7:62:0d:cd:51:cc:f1:70:7a:07:9c:3b:4c:f6:00:fc:
         3b:9e:26:f8:86:8f:a6:d3:02:83:47:41:e5:01:b1:e9:25:80:
         74:c0:55:27:5d:b7:7c:b9:ec:5d:5b:82:28:c2:60:f2:df:de:
         f4:e9:85:b7:dd:a3:43:6e:7d:53:cd:89:e1:e8:9f:ec:fe:57:
         cc:9a:0e:f3:c8:3b:15:0b:a3:10:42:4a:6c:d2:82:23:13:a9:
         4c:33:a5:68:9a:8c:30:54:b6:78:d5:70:bb:2b:b2:d0:67:78:
         bf:72:22:82:f4:2f:7b:ec:00:60:3d:25:74:42:37:e9:93:25:
         fc:91:1b:83:20:67:71:2b:77:29:1f:e0:c8:e8:47:11:42:68:
         4e:f3:f7:ca:ce:a2:05:c0:8d:64:e4:4f:f0:a6:59:a1:11:6d:
         b7:b3:29:cc:36:8f:f4:6d:e4:a2:bb:6d:56:45:37:80:83:46:
         19:46:41:bf:bb:de:cf:85:47:9e:9f:5e:05:9c:31:cd:41:7d:
         b4:91:2f:56:af:57:76:61:36:73:57:cc:94:e3:85:21:1b:6a:
         ea:df:7e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----