Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93AFD16EDB4411F1BDB04AF6CE1D38B0.roa
File:                     93AFD16EDB4411F1BDB04AF6CE1D38B0.roa (raw, json)
Hash identifier:          XlyrqUv1QYS5Cm8A29GGYccRxYwcvpy/CSP5GXaYMKA=
Subject key identifier:   D9:6D:EB:A4:62:22:AB:2A:57:1D:DA:8E:76:6F:0D:CB:6C:0B:0B:46
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01E3DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93AFD16EDB4411F1BDB04AF6CE1D38B0.roa
Signing time:             Sun 08 Nov 2026 07:18:21 +0000
ROA not before:           Sun 08 Nov 2026 07:18:16 +0000
ROA not after:            Tue 15 Dec 2026 07:18:16 +0000
asID:                     135377
IP address blocks:        45.192.10.0/24 maxlen: 24 (superfluous maxlen)
                          45.192.11.0/24 maxlen: 24 (superfluous maxlen)
                          45.194.68.0/24 maxlen: 24 (superfluous maxlen)
                          45.194.70.0/24 maxlen: 24 (superfluous maxlen)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123870 (0x1e3de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  8 07:18:16 2026 GMT
            Not After : Dec 15 07:18:16 2026 GMT
        Subject: CN=6af0223d-dfa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ab:03:be:89:6b:e3:36:b8:f5:e7:2b:98:fc:
                    7a:b4:0e:4f:be:4a:fa:f5:d5:21:62:74:9d:b7:1b:
                    9a:33:d4:5e:95:73:5b:95:3d:96:0a:ac:4f:9b:c7:
                    1c:6f:46:eb:99:15:57:64:1c:a9:a0:a0:f1:81:41:
                    a9:62:1c:3a:6c:15:36:56:a2:3f:96:74:79:bf:1f:
                    eb:81:12:c9:5c:7b:29:6d:45:6e:81:af:f3:96:a3:
                    03:0e:4e:a8:df:20:60:9e:f3:1a:7c:fd:aa:87:c3:
                    b3:67:32:7d:74:f7:9d:5b:be:6b:24:28:7b:5c:cb:
                    59:8c:20:d1:62:0b:0d:dc:c3:df:bf:53:7c:fa:01:
                    67:e6:00:94:09:f1:30:ba:1d:38:40:e0:47:fc:33:
                    4b:e2:64:0e:ce:5c:11:b7:8f:6e:69:fd:c1:fb:b9:
                    a8:19:e8:80:cd:cb:91:f4:80:a0:b6:fd:26:32:0a:
                    40:21:2c:92:c7:fd:5c:39:4b:e6:a3:c0:0b:d8:c6:
                    6b:5f:eb:66:ca:f4:55:b8:f7:69:b2:3d:b3:18:62:
                    18:5f:88:9d:cc:5a:b9:c6:4c:1a:98:64:da:4a:9c:
                    e0:33:c7:be:71:06:60:86:bd:6b:f4:de:46:02:94:
                    ab:dd:ab:26:5a:13:73:cf:e2:ae:a7:4a:17:27:ed:
                    43:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6D:EB:A4:62:22:AB:2A:57:1D:DA:8E:76:6F:0D:CB:6C:0B:0B:46
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93AFD16EDB4411F1BDB04AF6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.10.0/23
                  45.194.68.0/24
                  45.194.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:97:87:ea:78:c6:9c:9d:aa:0e:b2:96:e7:0e:05:67:ea:b0:
         87:7f:48:ae:49:92:2b:a2:2b:f4:fb:34:db:9d:e9:0c:97:7d:
         c8:05:f8:06:81:5e:08:56:4c:90:d6:16:6b:f9:67:43:c7:3e:
         8f:7a:9e:9c:8f:c5:32:70:72:91:70:33:c5:cc:5d:d4:8f:42:
         62:01:d6:3c:33:3b:1e:db:93:8d:84:c7:a7:93:ed:b5:26:fc:
         58:f7:49:1e:a3:5b:9c:33:04:0a:20:3c:00:69:50:6c:33:7d:
         eb:8d:a5:f6:81:61:e9:62:22:42:4c:27:af:9b:44:e7:e9:51:
         90:d3:ac:0e:c7:73:1d:7b:cf:5f:e9:58:00:b7:9b:d6:1c:9f:
         93:81:a3:9e:e5:32:0d:7e:4b:74:66:63:9e:9b:fb:58:ba:40:
         8b:aa:f6:c2:1d:ab:e9:c8:af:fd:f5:71:0b:48:62:61:38:83:
         27:8d:27:05:db:a0:9a:f5:6f:dc:75:a1:e9:8f:f5:33:52:8c:
         3d:2b:49:6d:6a:0e:ba:dd:7a:5c:e6:e0:ae:ad:28:e7:7a:8d:
         77:93:df:f4:0e:6b:e8:33:4f:7d:b0:e0:59:06:1a:d3:2e:27:
         95:fe:7c:c2:01:17:a6:2b:dd:60:20:fd:bc:06:a6:ea:7f:9d:
         f1:a8:6d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----