Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/548236BEC3C311F18A81C5C9CE1D38B0.roa
File:                     548236BEC3C311F18A81C5C9CE1D38B0.roa (raw, json)
Hash identifier:          j7cUO6flUlfrPp0r5pPAGKWohDD/MyRl/44OcWh0Ssg=
Subject key identifier:   1D:B9:5C:47:5D:B6:57:35:28:A0:82:8C:3B:C8:E3:EE:60:80:85:95
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC35
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/548236BEC3C311F18A81C5C9CE1D38B0.roa
Signing time:             Fri 09 Oct 2026 09:25:13 +0000
ROA not before:           Fri 09 Oct 2026 09:25:08 +0000
ROA not after:            Sun 15 Nov 2026 09:25:08 +0000
asID:                     135222
IP address blocks:        45.195.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 25 Oct 2026 08:20:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121909 (0x1dc35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  9 09:25:08 2026 GMT
            Not After : Nov 15 09:25:08 2026 GMT
        Subject: CN=6ac8b2f9-1cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e5:9a:03:d3:e3:f5:86:74:65:09:6b:4d:3d:
                    ec:cf:12:6d:b9:d5:12:9f:17:e2:49:f5:67:c3:b1:
                    e4:e8:a1:87:d9:1b:66:30:de:3b:79:63:ba:57:bb:
                    07:14:fd:0e:a8:ab:cc:a2:e1:87:c4:79:d9:45:1e:
                    d7:49:99:25:7d:40:f6:44:f5:ab:1b:56:4d:d0:d7:
                    18:6d:7f:08:8e:dd:cd:e1:0f:4e:dd:2c:a8:8f:c0:
                    28:18:3c:eb:de:12:2a:61:56:31:f4:5a:75:08:af:
                    c0:3c:e9:23:62:3e:39:ef:2b:79:e8:e5:10:5b:89:
                    30:0e:3a:a0:4d:32:25:76:7f:d3:d2:02:09:fd:4a:
                    21:93:c5:81:24:78:2c:8d:05:62:ed:6f:ca:6f:c3:
                    77:05:65:d3:b2:cd:f8:97:52:d4:8b:9b:6b:c2:04:
                    2b:a5:62:2b:28:68:39:cf:e6:47:61:29:04:37:5f:
                    61:e8:4b:a0:8d:fb:fc:5e:ef:89:91:12:d6:03:15:
                    c5:1e:f5:3f:d7:a6:4f:26:1b:8b:61:b7:c2:12:01:
                    32:f9:ae:e4:1a:96:ac:b7:a6:05:f3:ee:7e:ac:e7:
                    28:3e:32:7e:de:c1:1b:f5:dc:c5:c6:03:09:eb:f7:
                    90:3a:af:1c:b1:e3:09:bd:fe:a8:b6:de:f0:b2:62:
                    6e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B9:5C:47:5D:B6:57:35:28:A0:82:8C:3B:C8:E3:EE:60:80:85:95
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/548236BEC3C311F18A81C5C9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:22:5e:5c:24:2e:30:c8:7d:ab:10:e1:38:f4:5b:6f:2a:1a:
         e4:d7:32:f5:ec:ee:2a:4d:8d:2f:ee:55:a6:67:d0:eb:93:b5:
         c4:38:f6:cc:b6:dd:4c:19:54:45:65:a5:fa:18:f6:88:65:2e:
         3e:65:cd:31:78:b3:82:19:23:f0:1a:30:a8:15:e9:14:28:c8:
         c0:8a:04:5e:e3:da:a4:37:cc:59:46:9f:18:f6:c3:cd:a9:9a:
         05:8a:a6:c1:d2:0e:fc:97:51:f4:db:1a:53:fd:41:4f:55:98:
         88:4a:a9:dd:84:4b:c1:9a:fd:b0:c3:00:44:59:41:5c:89:9d:
         f0:b8:4e:55:24:6b:41:c9:a9:bc:2c:28:19:1c:1b:b1:52:1f:
         9b:b7:05:8b:7f:fd:99:e8:ae:2c:ea:8e:d4:9b:62:24:32:9d:
         19:4d:bf:f4:9b:89:33:7d:82:22:6a:87:ec:d3:50:c4:eb:e7:
         8a:d8:24:b1:ab:9d:56:35:28:cd:bc:76:1c:72:2c:3c:2f:43:
         e6:0e:42:70:01:1c:a2:37:8f:a9:74:79:14:b7:03:24:33:c6:
         ac:fb:5c:68:ff:1c:80:0e:e3:ac:9b:ea:e8:dd:7e:5c:a7:ff:
         87:a4:7f:92:c5:99:08:96:86:b1:a7:3b:f1:d6:25:35:39:21:
         ab:4e:19:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----