Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C88D7592B50811F19E4BCA0DCF1D38B0.roa
File:                     C88D7592B50811F19E4BCA0DCF1D38B0.roa (raw, json)
Hash identifier:          +X+vf+7Eev9i4MiKtJnpbl7U5lO1uDA3hfQRgs8Nmzk=
Subject key identifier:   30:AA:32:9D:94:91:14:ED:EF:D5:41:44:2B:2D:7C:47:92:2A:B3:3F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D734
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C88D7592B50811F19E4BCA0DCF1D38B0.roa
Signing time:             Sun 20 Sep 2026 15:34:36 +0000
ROA not before:           Sun 20 Sep 2026 15:34:32 +0000
ROA not after:            Tue 27 Oct 2026 15:34:32 +0000
asID:                     6079
IP address blocks:        45.203.210.0/24 maxlen: 24
                          45.203.221.0/24 maxlen: 24
                          45.203.222.0/23 maxlen: 24
                          45.203.244.0/24 maxlen: 24
                          45.205.85.0/24 maxlen: 24
                          45.205.110.0/23 maxlen: 24
                          45.205.132.0/24 maxlen: 24
                          45.205.151.0/24 maxlen: 24
                          45.205.154.0/24 maxlen: 24
                          45.205.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120628 (0x1d734)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 20 15:34:32 2026 GMT
            Not After : Oct 27 15:34:32 2026 GMT
        Subject: CN=6aaffd0c-4c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:76:dc:c8:80:58:f3:c6:e0:40:3c:51:e5:09:
                    d9:39:a2:f3:2c:61:60:7d:ac:11:ed:b5:cc:98:c7:
                    3c:39:25:61:f9:ab:3a:83:1c:8b:95:7a:12:0b:4a:
                    38:ae:bb:04:81:76:97:cd:3e:66:a5:3c:ba:fa:8c:
                    e1:ce:bc:e8:de:74:4d:b0:ac:43:56:cf:9a:60:3c:
                    34:48:d1:25:32:2b:60:f0:1e:16:e4:6e:7e:50:19:
                    ca:21:0f:46:77:12:88:a1:0a:24:3c:a5:d9:e0:18:
                    44:ef:ee:20:01:34:3a:36:3e:13:41:a9:d0:6a:5d:
                    5c:4c:2c:0f:b4:0e:a5:5d:48:3a:a2:a4:2f:d4:c7:
                    bc:c7:32:44:6f:aa:a0:4b:22:d2:ae:e1:6d:f2:25:
                    71:d3:99:f4:ea:d0:71:52:9a:cf:0e:1b:71:c4:47:
                    ce:33:4f:12:0f:70:a9:d6:8d:24:38:9f:ff:3b:ad:
                    e4:2e:92:fb:f3:01:b9:d5:b7:68:43:9f:7f:e5:95:
                    84:64:62:a2:6f:fd:e7:87:c7:a4:8a:c8:30:9c:cf:
                    07:41:0f:5d:fd:8e:6c:67:f2:df:9e:d1:fb:26:99:
                    38:ba:9c:49:be:eb:19:9e:96:c2:2d:06:c1:23:b3:
                    b2:6e:b6:ff:72:b6:3a:82:4a:d4:04:65:db:1b:13:
                    b4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:AA:32:9D:94:91:14:ED:EF:D5:41:44:2B:2D:7C:47:92:2A:B3:3F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C88D7592B50811F19E4BCA0DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.203.210.0/24
                  45.203.221.0-45.203.223.255
                  45.203.244.0/24
                  45.205.85.0/24
                  45.205.110.0/23
                  45.205.132.0/24
                  45.205.151.0/24
                  45.205.154.0/24
                  45.205.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:ea:91:e4:e9:ba:9b:07:33:33:4e:29:c1:81:86:b2:fd:fb:
         42:14:46:ac:70:cd:6b:4e:c5:01:4a:18:8e:7c:36:ca:00:10:
         4b:2a:f7:5d:58:87:0f:ee:10:94:80:23:71:d7:27:a0:55:ff:
         4b:07:87:4b:4b:61:0b:2c:f1:b8:0a:35:3e:18:17:ef:3e:6d:
         bc:af:b6:63:37:9c:89:a8:7b:48:c6:40:1f:bd:24:58:3a:8b:
         4f:5e:ca:be:af:77:0d:1d:b4:ee:99:98:fe:71:1c:9f:4b:66:
         bb:38:84:2e:fc:0c:c7:d4:40:cc:72:38:37:43:5d:a7:07:a2:
         59:32:25:e3:87:64:e7:34:94:c5:33:a9:8e:f1:77:6d:a4:d8:
         e0:94:a7:93:00:fa:a4:61:dc:42:9c:cd:69:be:e6:3d:43:76:
         b3:27:7b:55:d1:1f:c1:2a:da:01:c4:76:7f:4b:e4:62:55:3b:
         22:8a:53:56:70:d9:b2:a3:ed:80:10:b1:d8:29:2b:8c:ad:72:
         1a:b5:0b:83:52:41:9c:1e:68:0b:3f:e1:91:c3:57:75:7e:ae:
         56:a9:21:a3:63:42:a4:cd:28:f6:f4:6a:6e:16:e9:50:9f:d2:
         b0:aa:41:9c:43:75:5f:c0:89:0d:ec:cd:29:80:ba:ea:db:37:
         47:2d:96:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----