Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1D34946AB5811F1B0FE10FACE1D38B0.roa
File:                     E1D34946AB5811F1B0FE10FACE1D38B0.roa (raw, json)
Hash identifier:          M7fUYHGXhS1Nbz66080gcladmvpsz5hZfVJtchiuwwI=
Subject key identifier:   72:13:5F:1C:B7:DF:AB:05:36:BA:F1:46:49:E7:BD:BC:87:A4:1D:3F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D3D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1D34946AB5811F1B0FE10FACE1D38B0.roa
Signing time:             Tue 08 Sep 2026 07:42:46 +0000
ROA not before:           Tue 08 Sep 2026 07:42:42 +0000
ROA not after:            Thu 15 Oct 2026 07:42:42 +0000
asID:                     135377
IP address blocks:        45.192.10.0/24 maxlen: 24
                          45.192.11.0/24 maxlen: 24
                          45.194.68.0/24 maxlen: 24
                          45.194.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 04 Oct 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119765 (0x1d3d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  8 07:42:42 2026 GMT
            Not After : Oct 15 07:42:42 2026 GMT
        Subject: CN=6a9fbc76-ce57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f9:e9:c7:0e:cc:50:91:b8:64:22:94:fd:6f:
                    da:00:37:19:46:72:cd:8b:1c:0c:c6:ee:25:eb:fd:
                    15:b2:ae:27:b0:25:71:36:6d:51:ed:77:bb:47:d1:
                    fb:30:ad:b9:ea:6d:22:58:92:54:06:35:82:1c:8b:
                    fe:62:d3:fc:df:e1:44:f8:b5:42:60:47:fd:6e:2c:
                    61:24:b3:c1:2e:e9:c5:f8:a3:23:20:3f:1a:ae:14:
                    70:5e:f1:3f:c3:9c:2c:da:d6:0a:0f:56:05:b8:61:
                    5d:88:b5:dd:bf:2b:26:fd:bb:37:a9:92:16:88:c1:
                    d0:43:70:80:fb:19:77:c4:8b:4e:3d:8d:f2:d2:42:
                    3d:e6:83:e0:57:91:72:8b:ba:cc:5a:75:f3:3b:38:
                    56:90:d7:fc:d3:24:8d:80:a3:85:6f:95:0e:b3:fc:
                    2a:2b:0f:4f:b1:0d:75:26:76:01:20:a8:6c:cd:2d:
                    11:10:e6:cb:f5:2a:e6:bd:32:72:ee:4c:db:6c:ae:
                    89:75:37:f5:d7:89:69:03:14:c2:db:bf:38:6d:e8:
                    56:f3:f6:74:f6:f8:f4:ad:ad:3c:d7:dd:bb:32:33:
                    d8:37:4a:47:29:41:10:4f:db:42:11:d0:b5:5c:3b:
                    65:2d:55:7d:34:49:a5:66:fd:ff:50:0c:b1:fd:e0:
                    5f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:13:5F:1C:B7:DF:AB:05:36:BA:F1:46:49:E7:BD:BC:87:A4:1D:3F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1D34946AB5811F1B0FE10FACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.10.0/23
                  45.194.68.0/24
                  45.194.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:3c:25:49:3c:0a:30:2b:50:48:ff:21:23:51:0f:b5:91:18:
         a8:2b:c6:eb:f2:5b:1f:18:dd:c0:c8:27:d8:95:d8:03:0a:fb:
         5e:cd:ec:30:76:2e:66:39:f6:c1:bc:be:27:b3:af:25:36:d8:
         db:8f:fc:4d:e6:36:6f:ce:24:71:5f:3b:6f:64:84:a6:f9:35:
         74:10:ad:ef:95:62:57:1a:6e:24:40:1b:3e:2a:02:11:46:07:
         ff:6a:3d:3f:86:3e:52:31:7b:54:c9:52:2c:01:a9:9a:92:3c:
         e9:44:3d:73:4c:3c:1f:fc:5b:ae:cf:33:09:c5:32:66:95:30:
         17:12:f8:ec:e5:40:b5:7b:31:bf:99:6a:38:c7:4e:f8:cd:fb:
         7d:a5:34:92:19:58:89:4f:90:bd:ee:8c:e8:cd:7a:f8:a4:2c:
         2a:1a:48:cc:87:64:ba:4b:d7:59:3e:8d:54:8f:5f:b1:61:98:
         79:9b:81:54:f0:7f:e5:4b:1a:29:0c:f1:89:6f:03:2f:4d:0b:
         ec:6f:15:8b:75:b9:3d:12:1c:b3:ae:5e:91:5e:81:9b:a0:be:
         25:ec:02:59:0f:69:4f:cd:75:ca:6b:22:fb:19:4b:f7:c3:99:
         b5:f6:b0:21:7a:d9:52:5d:b5:3c:0e:01:50:f4:ee:08:dd:d7:
         30:dc:43:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----