Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C60A630CAB8511F1A9DECD02CF1D38B0.roa
File:                     C60A630CAB8511F1A9DECD02CF1D38B0.roa (raw, json)
Hash identifier:          Wy1W25mkuEN3aLn28PdKymKDX6ATk14RcQ6rjjmlFyI=
Subject key identifier:   1E:13:ED:B1:FA:85:68:FA:11:90:51:8C:F3:77:96:36:B9:9A:0B:36
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D40B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C60A630CAB8511F1A9DECD02CF1D38B0.roa
Signing time:             Tue 08 Sep 2026 13:04:07 +0000
ROA not before:           Tue 08 Sep 2026 13:04:02 +0000
ROA not after:            Wed 04 Nov 2026 13:04:02 +0000
asID:                     401783
IP address blocks:        45.192.113.0/24 maxlen: 24
                          45.192.114.0/24 maxlen: 24
                          45.192.116.0/23 maxlen: 24
                          45.192.118.0/23 maxlen: 24
                          45.192.235.0/24 maxlen: 24
                          45.192.236.0/24 maxlen: 24
                          45.195.255.0/24 maxlen: 24
                          45.196.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119819 (0x1d40b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  8 13:04:02 2026 GMT
            Not After : Nov  4 13:04:02 2026 GMT
        Subject: CN=6aa007c7-9808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:da:88:ed:f7:1b:ec:33:e0:aa:e0:1e:11:1b:
                    c8:41:b6:ad:a0:ad:44:09:c1:9d:ff:46:8c:b2:56:
                    51:ba:d6:bd:16:93:06:2e:41:df:4a:1f:0f:48:05:
                    a0:84:43:cd:6f:9c:08:53:7d:d9:1a:e4:30:e0:84:
                    8d:e7:06:72:84:51:8c:64:99:05:f7:0e:68:70:f1:
                    f9:1d:7e:da:ec:fe:2e:35:e2:61:42:8c:7d:e5:e9:
                    5e:51:71:28:31:11:55:58:55:96:33:52:29:30:ea:
                    40:69:d7:36:c8:8a:a4:7a:3b:1b:ff:92:c2:43:c2:
                    13:e7:aa:8d:6d:de:9f:b1:4f:7f:4d:bb:db:07:36:
                    8b:2c:67:59:11:9b:16:73:ce:ce:48:36:ba:aa:46:
                    89:81:73:22:7c:8c:53:e1:dc:fe:85:92:c5:43:be:
                    b8:24:aa:6c:7d:38:90:8e:07:61:9e:6f:84:76:8f:
                    16:b7:20:ca:f5:ad:c9:64:c2:c4:63:82:36:02:f0:
                    e5:39:92:fe:bc:be:cd:0c:57:3f:9c:e5:94:bd:7e:
                    b1:79:c2:d5:07:d7:e6:c1:3f:ea:ba:44:a1:86:41:
                    35:d4:13:ef:15:d2:83:e7:96:ad:9e:7b:80:b9:e1:
                    69:b9:23:04:ba:c3:df:38:28:0d:d4:9c:e6:9e:f4:
                    c6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:13:ED:B1:FA:85:68:FA:11:90:51:8C:F3:77:96:36:B9:9A:0B:36
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C60A630CAB8511F1A9DECD02CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.113.0-45.192.114.255
                  45.192.116.0/22
                  45.192.235.0-45.192.236.255
                  45.195.255.0/24
                  45.196.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:6c:e9:15:4d:83:8e:12:45:42:39:bb:ee:cc:d5:05:1b:a0:
         5c:f9:b2:4f:92:a0:fb:d3:f3:c8:5d:9c:1f:eb:9d:eb:63:b0:
         78:7e:75:a3:f8:f1:bc:e9:ec:fa:40:b3:e3:68:b9:05:56:84:
         ae:33:d4:9b:f9:49:96:08:a5:ed:fe:28:fe:13:c7:92:ef:77:
         84:85:a4:a3:ff:66:24:66:e3:ec:b9:5e:cf:9a:84:32:c7:a6:
         70:9f:bc:f8:aa:5c:4e:d0:a8:cc:44:13:dc:aa:9c:14:f8:f2:
         4e:59:d4:84:56:ea:a0:a0:8d:92:29:dc:31:46:74:63:57:ef:
         8e:48:c2:80:04:f3:c7:22:40:09:65:40:3a:ac:b5:59:9d:be:
         a3:4a:09:0b:cf:46:f2:8b:46:8e:7f:33:cd:e9:40:0f:b7:22:
         d1:85:d7:39:23:b3:9c:0c:bc:a9:27:37:52:89:73:69:5c:cb:
         d3:3a:14:f1:7d:c0:a4:60:94:b4:39:ea:40:a4:74:8a:00:34:
         db:45:58:4d:e1:57:11:73:0d:fb:a8:a9:b2:10:df:ed:77:07:
         c9:aa:ac:b4:80:92:40:d3:ef:a4:8c:76:d8:66:75:97:2e:30:
         f8:7e:d3:35:8d:c0:6f:43:59:c3:b0:90:78:71:3d:28:a0:3e:
         db:b2:7b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----