Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F4530C8CEAC11F1BC1F3EB7CE1D38B0.roa
File:                     3F4530C8CEAC11F1BC1F3EB7CE1D38B0.roa (raw, json)
Hash identifier:          BerO9BelhoYr490dAVfwwXOe/YTATtiR3zPVpSyA7NY=
Subject key identifier:   87:5E:25:84:33:87:CA:7D:F9:14:F3:26:F1:F7:2E:1E:CD:35:DA:31
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DFD0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F4530C8CEAC11F1BC1F3EB7CE1D38B0.roa
Signing time:             Fri 23 Oct 2026 06:37:42 +0000
ROA not before:           Fri 23 Oct 2026 06:37:37 +0000
ROA not after:            Mon 23 Nov 2026 06:37:37 +0000
asID:                     138590
IP address blocks:        45.194.14.0/24 maxlen: 24 (superfluous maxlen)
                          45.194.15.0/24 maxlen: 24 (superfluous maxlen)
                          45.194.25.0/24 maxlen: 24 (superfluous maxlen)
                          45.194.26.0/24 maxlen: 24 (superfluous maxlen)
                          45.194.80.0/24 maxlen: 24 (superfluous maxlen)
                          45.194.81.0/24 maxlen: 24 (superfluous maxlen)
                          45.194.88.0/24 maxlen: 24 (superfluous maxlen)
                          45.194.89.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122832 (0x1dfd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 23 06:37:37 2026 GMT
            Not After : Nov 23 06:37:37 2026 GMT
        Subject: CN=6adb00b6-378d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6d:f3:1d:8f:43:89:4c:db:e7:74:1f:48:90:
                    e1:bb:4e:18:fd:13:84:19:15:6b:4e:29:5a:06:03:
                    40:13:43:a9:0a:a0:03:bc:65:62:3e:38:31:97:03:
                    b0:b2:11:f2:5c:25:dd:29:7b:65:b8:bb:9e:b4:91:
                    ad:a0:cd:e6:8a:36:8e:5a:e1:f4:f0:cc:42:eb:dc:
                    e1:0d:10:08:a9:9a:d6:ce:7f:b8:10:10:8e:66:75:
                    9f:3f:f4:ac:74:12:c1:06:42:7f:03:c4:b6:54:c2:
                    e4:6b:19:59:83:b1:c2:f6:ee:5e:24:31:f5:8b:23:
                    d3:f2:3d:c9:76:23:a8:52:7f:0c:61:6b:7a:3a:26:
                    5b:63:6e:38:91:a0:1e:bb:ae:67:ff:4d:a2:cb:04:
                    bd:a0:aa:fe:c4:95:ca:9e:fe:06:81:38:3d:67:33:
                    bc:e2:84:9d:d0:3c:14:e3:c0:a9:5f:7f:71:c7:45:
                    2c:1e:9d:f2:9d:bb:b1:a2:1b:03:c1:e3:9e:3b:51:
                    3b:ec:6d:f4:0a:ba:df:2e:f0:53:0d:bf:f0:f4:ce:
                    f5:29:1c:93:21:64:a8:97:c0:50:a7:dd:89:13:b0:
                    e3:d9:61:48:63:79:65:82:05:19:e0:f3:cd:4e:b5:
                    4b:0c:92:92:8b:d3:e3:85:bc:9d:53:ae:7a:6f:34:
                    d3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5E:25:84:33:87:CA:7D:F9:14:F3:26:F1:F7:2E:1E:CD:35:DA:31
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F4530C8CEAC11F1BC1F3EB7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.14.0/23
                  45.194.25.0-45.194.26.255
                  45.194.80.0/23
                  45.194.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:3f:f6:31:a4:42:14:47:02:8f:e4:8e:27:50:66:e8:bf:ff:
         74:98:16:86:02:7a:a7:8d:29:b9:a2:41:09:3b:78:f4:37:85:
         fe:1e:0f:96:d7:f0:ff:22:5c:38:ef:4c:57:47:86:2d:85:e2:
         59:aa:40:28:9c:f4:d8:18:08:51:c5:c5:2d:50:07:19:51:a3:
         ae:b2:69:c7:f1:68:ef:9c:fb:cf:72:69:6e:65:a9:4c:e4:d3:
         2c:3c:5c:cd:5a:67:14:a6:3c:1b:ea:26:e8:89:d0:02:57:f7:
         58:ba:95:cc:b2:1c:63:17:bd:24:2b:c1:ed:dd:48:cb:33:f5:
         41:4e:af:1c:33:cf:6c:a0:a4:9b:1b:6e:4c:f8:ca:bf:ac:6d:
         d5:dd:0f:b9:9a:7c:ad:11:d7:87:19:14:66:da:b9:81:48:f3:
         11:81:70:c8:dc:ab:f0:d4:f7:80:19:1b:b6:98:2d:33:1e:41:
         23:34:5a:52:e9:dd:a5:a2:27:6d:11:7a:c6:a0:ea:ce:ba:7e:
         b0:93:ed:d0:25:57:69:4e:53:1e:56:6d:54:f6:b4:9b:49:6b:
         9e:a6:36:11:f8:57:af:c3:6b:dd:d9:2c:17:56:2e:61:19:8e:
         13:5e:d6:76:1e:4a:28:ca:b2:a2:51:74:8b:fe:3a:a4:d7:75:
         75:e2:73:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----