Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D577DB0989C11F1AB8AE1BACE1D38B0.roa
File:                     4D577DB0989C11F1AB8AE1BACE1D38B0.roa (raw, json)
Hash identifier:          QGek0VLLBNW3OpWgdYDqAtkI2RGzjIWejh9X7a+ttLU=
Subject key identifier:   D9:7D:8C:BD:AE:59:A5:8F:18:6D:8C:6E:74:AF:03:35:03:18:C1:71
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CCF2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D577DB0989C11F1AB8AE1BACE1D38B0.roa
Signing time:             Sat 15 Aug 2026 11:27:31 +0000
ROA not before:           Sat 15 Aug 2026 11:27:27 +0000
ROA not after:            Wed 07 Oct 2026 11:27:27 +0000
asID:                     274320
IP address blocks:        45.194.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118002 (0x1ccf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 15 11:27:27 2026 GMT
            Not After : Oct  7 11:27:27 2026 GMT
        Subject: CN=6a804d23-019a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b2:2c:20:8b:8b:2d:8a:2e:43:2f:cc:71:59:
                    7b:c5:17:9c:52:cf:05:69:67:8f:19:a1:fa:6a:87:
                    ff:46:80:1b:3a:c6:e0:c3:2f:29:1d:b0:7e:12:e4:
                    67:c2:b9:a9:bc:d1:b7:92:f2:0a:74:81:f1:9a:4b:
                    46:8f:83:ba:8a:ee:4b:d6:e0:0f:e2:8b:a1:3e:46:
                    0d:99:5c:19:57:55:8a:58:77:fb:6f:7b:6f:3a:87:
                    7a:26:23:4c:91:1c:2c:6e:dd:fb:09:5c:25:82:97:
                    7c:bf:85:88:21:f4:c4:92:7b:1b:13:af:fc:12:e5:
                    ed:b9:a0:e9:ac:d9:da:10:9e:c2:ef:04:71:fa:b3:
                    09:32:f0:8a:84:7a:c2:bd:bb:86:93:75:19:6f:d3:
                    ce:07:31:59:20:1e:b2:f3:62:d6:f5:30:2c:5f:fd:
                    44:1d:8a:ba:b8:9a:dc:c1:6b:18:f2:fb:d5:23:11:
                    a6:46:7e:f8:41:41:28:fb:d4:67:53:fc:6c:72:f5:
                    92:25:41:9d:21:97:97:94:23:18:fe:37:78:20:4e:
                    1b:fd:82:c0:75:40:14:06:41:cf:70:d6:90:53:fb:
                    d3:48:0c:33:8e:10:6d:1a:1a:f4:d3:7a:e7:d4:fb:
                    cb:53:c2:17:7e:94:09:d0:fa:75:d3:29:60:2c:09:
                    8f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7D:8C:BD:AE:59:A5:8F:18:6D:8C:6E:74:AF:03:35:03:18:C1:71
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D577DB0989C11F1AB8AE1BACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:a9:85:f5:fe:39:5d:b1:42:78:e4:35:85:16:4b:3f:7b:5a:
         61:cb:9d:30:14:4b:6f:d6:b3:f0:8e:35:08:57:02:0b:f2:b4:
         8f:48:0b:b1:8b:36:58:a1:c9:d9:f1:35:91:2d:44:64:90:6c:
         41:32:19:a6:1c:a3:58:ea:0d:3d:33:6d:c4:cd:4e:2b:51:f9:
         be:77:ef:cc:a0:23:50:92:03:1f:e7:93:1a:52:e4:78:0e:25:
         78:65:78:69:3e:43:31:f5:ce:a8:b6:34:51:0a:d2:1e:5d:09:
         5f:70:b8:4d:62:cc:00:30:be:ef:f4:52:ff:c1:4e:3b:77:63:
         c6:68:97:84:9b:50:3a:3d:a1:ff:8c:bc:ae:08:ab:09:c2:87:
         bb:1e:8b:a8:48:72:f4:47:b6:b0:8c:2a:aa:e2:2c:71:6b:30:
         11:2b:99:fd:d4:c0:05:6b:ec:03:43:b4:46:e6:56:d5:86:d7:
         61:67:0a:ea:38:6b:9e:b3:02:60:d1:21:3b:fb:f9:73:03:4a:
         99:3e:48:10:df:e9:aa:7f:c7:43:92:1c:48:88:25:cf:0e:ab:
         e7:31:a8:76:4d:32:c4:ae:57:73:e5:64:1f:18:25:71:4d:08:
         66:20:bb:0f:03:cf:51:36:da:b0:97:52:b9:ca:3f:70:24:70:
         a9:76:f4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----