Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5442E208970D11F193B3E0C7CE1D38B0.roa
File:                     5442E208970D11F193B3E0C7CE1D38B0.roa (raw, json)
Hash identifier:          fDEysqtETyfoCbpWkc1A0q/T0iFpo9ix9xGyZhPNrBc=
Subject key identifier:   54:31:56:46:99:46:55:35:2E:39:56:B8:47:4F:B6:02:E4:4A:F7:C3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CCA8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5442E208970D11F193B3E0C7CE1D38B0.roa
Signing time:             Thu 13 Aug 2026 11:51:33 +0000
ROA not before:           Thu 13 Aug 2026 11:51:29 +0000
ROA not after:            Thu 24 Sep 2026 11:51:29 +0000
asID:                     202036
IP address blocks:        45.201.36.0/22 maxlen: 24
                          45.201.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117928 (0x1cca8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 13 11:51:29 2026 GMT
            Not After : Sep 24 11:51:29 2026 GMT
        Subject: CN=6a7dafc5-2acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d2:1d:02:d8:52:b7:28:d9:63:70:d6:c0:0e:
                    76:99:3d:c2:d7:95:37:ab:3e:27:62:e5:28:84:a7:
                    82:bf:b5:55:12:77:e9:e7:66:19:da:52:fa:f7:09:
                    b6:b2:57:52:bf:0e:c7:2a:6c:3c:d7:27:71:bf:f5:
                    e2:5d:ff:59:de:9e:c8:a3:43:9a:1d:09:b4:25:fe:
                    a8:1f:34:b6:f1:d6:8f:be:e0:3c:69:55:11:37:ce:
                    59:19:22:64:7a:36:ad:0a:78:2d:6a:5f:5b:2d:bb:
                    43:62:14:48:a2:2b:51:24:54:5d:b0:65:79:af:fb:
                    6c:61:44:ee:14:d2:c8:5d:67:8c:05:5c:14:89:3e:
                    42:31:83:f0:e9:e8:10:25:74:6d:d7:ca:66:78:84:
                    18:f9:16:f3:47:5e:a7:72:36:78:31:90:3f:da:03:
                    01:70:b3:70:f5:cb:b1:de:8c:a3:87:bd:40:a6:60:
                    c8:6e:02:13:87:4b:6c:76:13:6c:3a:45:37:a9:94:
                    6f:b3:a0:54:f8:1a:cf:e1:68:25:29:59:7f:5b:51:
                    f7:a9:1f:c5:77:c7:10:e4:54:18:1b:bc:aa:8b:40:
                    62:0f:ce:60:b3:33:cd:cd:c6:83:df:8b:4b:c7:a9:
                    a7:98:bc:e9:95:b3:8e:39:55:03:3b:67:35:0f:3b:
                    f8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:31:56:46:99:46:55:35:2E:39:56:B8:47:4F:B6:02:E4:4A:F7:C3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5442E208970D11F193B3E0C7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.36.0-45.201.40.255

    Signature Algorithm: sha256WithRSAEncryption
         ba:9d:9d:13:e2:1b:38:bf:52:2d:9f:f4:49:69:5e:cd:e0:ec:
         aa:56:be:fa:fa:9b:b3:98:a7:0b:e8:c2:77:b3:7b:e7:18:32:
         0f:6c:35:49:76:17:68:85:0e:a3:f7:71:e7:f1:15:f2:88:ad:
         9d:41:a0:4d:59:04:cb:57:99:dd:93:20:c2:b1:a5:06:97:4d:
         8d:69:8a:35:f0:74:eb:92:b6:b1:7b:cd:de:96:e9:b4:ca:82:
         2d:a7:cb:da:17:df:c5:33:90:95:91:37:c8:2c:7c:fe:06:21:
         59:7d:5c:f5:18:48:12:90:67:44:09:b8:3f:04:1c:c6:3a:de:
         45:a5:aa:80:f0:75:95:dc:0f:1f:5d:54:0e:e3:9e:85:b6:1a:
         40:91:62:d9:17:fb:83:d1:fd:55:59:bf:a3:72:b5:f7:ed:76:
         29:69:7d:82:f7:04:74:d0:f9:4c:5c:e6:7f:b4:38:f1:cf:48:
         49:33:4c:ac:a3:81:23:3d:28:b7:e4:19:dd:29:6b:48:08:b8:
         1a:5d:3e:2f:9c:3a:70:47:a4:94:49:69:e6:f0:ae:7e:a4:df:
         35:14:80:bf:76:e4:c8:60:41:ea:b1:a4:d9:c8:0a:11:14:23:
         42:29:f4:b4:e5:a0:8f:03:02:cb:0d:a1:9a:2c:42:3a:e7:78:
         45:27:3a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----