Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/125466A29F9E11F1BB84B9F0CE1D38B0.roa
File:                     125466A29F9E11F1BB84B9F0CE1D38B0.roa (raw, json)
Hash identifier:          yPuJzHSnA9RpT2OwH3fHLPRbUvsyrZPUk9lk4ck/PaU=
Subject key identifier:   6A:53:7F:76:C1:10:D5:26:B1:7D:16:78:21:09:5E:9B:06:F8:9F:99
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D079
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/125466A29F9E11F1BB84B9F0CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 09:27:49 +0000
ROA not before:           Mon 24 Aug 2026 09:27:45 +0000
ROA not after:            Fri 02 Oct 2026 09:27:45 +0000
asID:                     202656
IP address blocks:        45.195.101.0/24 maxlen: 24
                          45.195.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118905 (0x1d079)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 24 09:27:45 2026 GMT
            Not After : Oct  2 09:27:45 2026 GMT
        Subject: CN=6a8c0e95-6f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:22:f4:7a:8e:4e:29:0e:5b:16:de:de:e8:03:
                    69:72:d8:1a:fe:86:c8:5a:f0:4e:04:4c:65:1b:47:
                    b2:32:0c:eb:3e:02:c8:1b:b7:6b:44:3e:c4:53:68:
                    69:55:de:2d:32:f0:94:87:d0:8b:c1:73:60:dc:3b:
                    74:21:0f:cd:34:6e:44:d9:48:7c:02:74:eb:eb:3d:
                    dc:4f:b0:10:04:d7:ac:c8:8e:00:ef:5f:61:3c:a1:
                    7f:6d:7a:24:ca:ba:3d:8e:e9:b8:c4:1b:b5:a4:58:
                    a2:37:26:6f:84:97:2a:fa:2d:34:98:cb:96:5f:ce:
                    c1:28:b8:b3:92:68:d1:8e:95:7d:ec:13:93:43:a1:
                    ef:cf:ba:e1:f4:d7:c5:0a:23:c6:5e:93:b3:c7:57:
                    e5:c5:40:1a:52:1b:4c:21:6c:73:03:2a:be:dd:a4:
                    a3:73:63:99:fc:a4:f9:93:e5:b6:58:91:12:9b:84:
                    aa:43:39:73:15:9d:65:e3:49:4f:14:8f:45:d2:f8:
                    e9:1d:da:0c:eb:7a:be:d0:d0:a8:91:7f:84:8b:0e:
                    44:db:05:4f:ab:cc:f0:f1:f6:64:c6:a6:f6:63:af:
                    3e:3b:7f:f2:58:12:02:fc:05:48:d4:93:5f:7a:b9:
                    2c:b8:91:5c:3c:56:1c:b1:56:80:48:7e:6a:6e:6d:
                    ad:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:53:7F:76:C1:10:D5:26:B1:7D:16:78:21:09:5E:9B:06:F8:9F:99
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/125466A29F9E11F1BB84B9F0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.101.0-45.195.102.255

    Signature Algorithm: sha256WithRSAEncryption
         ad:e6:65:75:d2:63:fd:8d:7f:02:5e:11:78:c3:99:db:18:9d:
         bf:8b:ae:f8:2f:91:99:ac:e0:01:e7:12:4c:18:40:58:d0:a1:
         3d:5c:11:a4:e2:1b:4c:69:27:82:6d:a4:e0:57:a1:5d:67:08:
         75:74:06:9e:39:6d:94:e0:1c:10:de:4e:93:19:b1:90:f1:f4:
         8f:80:f6:9c:98:92:69:3f:a9:1f:01:e0:98:b0:d9:91:6b:30:
         13:03:ef:4a:87:eb:93:9a:8c:69:14:6b:52:6e:5e:f2:7e:62:
         c3:3c:ac:2b:43:f4:b8:6e:0c:b5:1f:0e:7b:a1:42:06:7a:34:
         6c:ac:29:8f:65:f6:13:96:ec:50:c8:b5:b3:97:ea:6f:1d:09:
         9e:d7:db:fb:19:0e:a7:12:dc:bc:87:56:9b:5a:8c:f9:16:af:
         5e:cd:6c:68:59:7e:1c:91:9b:2a:aa:51:27:23:60:f6:cc:62:
         4c:b9:84:2d:0c:01:a6:d1:7a:49:ea:8b:fa:b7:90:aa:87:8c:
         5c:29:50:45:f3:f3:4c:f6:7a:87:20:ab:4d:7d:18:29:b2:b1:
         81:69:ee:90:18:cd:86:a9:f4:bb:43:2a:15:f4:08:5e:e0:41:
         82:4e:d8:ca:af:2c:7c:ea:24:33:aa:88:ee:86:81:26:83:bc:
         e9:de:67:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----