Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1D4C7BCAB6E11F1B96D92FACE1D38B0.roa
File:                     C1D4C7BCAB6E11F1B96D92FACE1D38B0.roa (raw, json)
Hash identifier:          ukZ354PMIiWVQwX3MKjcNANslaJMs7CPYJtcQNisA3g=
Subject key identifier:   AF:4E:06:54:C5:44:8D:4C:1E:ED:6D:28:C6:A7:18:15:F5:FD:29:66
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D3F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1D4C7BCAB6E11F1B96D92FACE1D38B0.roa
Signing time:             Tue 08 Sep 2026 10:19:21 +0000
ROA not before:           Tue 08 Sep 2026 10:19:17 +0000
ROA not after:            Wed 04 Nov 2026 10:19:17 +0000
asID:                     395793
IP address blocks:        45.201.21.0/24 maxlen: 24
                          45.201.22.0/24 maxlen: 24
                          45.201.23.0/24 maxlen: 24
                          45.201.24.0/23 maxlen: 24
                          45.201.24.0/24 maxlen: 24
                          45.201.25.0/24 maxlen: 24
                          45.201.26.0/24 maxlen: 24
                          45.201.31.0/24 maxlen: 24
                          45.206.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119795 (0x1d3f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  8 10:19:17 2026 GMT
            Not After : Nov  4 10:19:17 2026 GMT
        Subject: CN=6a9fe129-5a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c3:98:6f:eb:28:13:cb:71:84:81:67:eb:41:
                    8a:8f:bf:ad:9e:4b:5b:0f:c0:62:d5:50:35:37:15:
                    97:5e:d2:e7:a6:f2:48:07:8c:dd:4f:bb:46:4e:33:
                    63:f7:03:cb:d4:41:6b:ec:40:71:15:1b:a4:fb:91:
                    b6:78:b9:70:52:0f:57:8c:be:01:04:e0:f7:6b:3b:
                    df:58:c5:d4:a6:4c:b5:47:66:25:78:19:cf:dd:16:
                    db:b5:39:b5:7f:20:e7:d7:f2:e8:de:f3:a2:2c:43:
                    4f:43:37:a3:7d:dd:81:81:98:28:34:c8:c9:ee:0c:
                    fb:17:e4:c4:7e:9a:0b:fe:1d:78:c7:09:fe:a8:58:
                    42:b6:61:6d:cb:19:5d:f1:3a:ef:95:09:af:ca:62:
                    03:91:c0:44:a1:9c:7f:6b:65:0c:61:9a:40:27:a3:
                    c8:d6:5b:5b:0f:f9:d2:44:45:3d:77:cb:d0:9d:6d:
                    ae:b3:47:a5:ae:e8:c8:50:a9:a5:25:19:27:95:d9:
                    9f:51:6e:a3:df:32:7f:35:2c:6a:84:81:2d:05:84:
                    14:77:66:2e:c5:ab:44:36:7f:38:e9:94:96:12:7d:
                    b3:0a:f9:64:de:36:f7:d5:fc:4d:32:92:52:53:d5:
                    4e:71:60:b6:8d:a0:75:d3:d4:86:2a:04:0f:12:34:
                    af:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4E:06:54:C5:44:8D:4C:1E:ED:6D:28:C6:A7:18:15:F5:FD:29:66
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1D4C7BCAB6E11F1B96D92FACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.21.0-45.201.26.255
                  45.201.31.0/24
                  45.206.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:e4:96:f3:38:3d:8a:5a:71:5f:f6:16:d8:38:0a:8a:7a:1a:
         ba:fe:a1:90:b7:5c:bf:9b:5f:73:ad:26:4e:d7:7e:d2:83:fa:
         7f:1c:7e:98:d7:e8:2a:ee:04:46:94:95:da:3e:41:09:10:79:
         8b:97:f1:36:2d:5f:79:55:e4:f0:44:d9:9d:23:52:df:97:f9:
         bc:0a:cf:5b:81:90:c2:51:dc:26:a4:b2:e0:c3:0a:fc:10:38:
         f2:b8:50:42:c2:d0:3c:8c:ef:61:b5:2e:0a:a0:ca:1a:a5:9d:
         65:d3:2a:dd:1d:c3:1c:41:67:be:4e:87:92:41:8f:0b:90:cc:
         8e:ad:a8:68:e5:48:06:c2:c4:5b:52:4f:fb:35:b7:e4:09:e6:
         1e:6c:8d:ba:a7:d1:10:16:11:0a:5a:a3:10:78:c8:15:ee:70:
         40:08:16:51:a2:28:64:3a:55:c2:8f:23:bf:64:84:66:24:43:
         a2:20:bf:d7:64:3f:04:ea:c3:c1:df:e8:b1:13:73:24:27:0e:
         f8:6b:05:ae:9e:bb:bb:82:ce:f7:15:ac:49:a7:61:8d:29:e7:
         14:bb:43:08:0e:3d:9f:a0:87:f7:4f:f8:a3:a0:8d:05:b8:87:
         96:4e:8c:d3:e2:29:42:6a:2c:eb:ae:9c:fe:3b:62:cc:ad:26:
         a0:b1:73:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----