Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/553C60868F1411F1846FB8F3CE1D38B0.roa
File:                     553C60868F1411F1846FB8F3CE1D38B0.roa (raw, json)
Hash identifier:          9ohfKq2et5dbO2cUSvi+GBcX4DO8vPetB0a1mhOlPfc=
Subject key identifier:   45:DA:78:36:48:DC:AD:25:EA:D5:0C:AA:12:4C:A4:CF:94:D2:A4:5C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C96C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/553C60868F1411F1846FB8F3CE1D38B0.roa
Signing time:             Mon 03 Aug 2026 08:21:32 +0000
ROA not before:           Mon 03 Aug 2026 08:21:28 +0000
ROA not after:            Wed 09 Sep 2026 08:21:28 +0000
asID:                     202656
IP address blocks:        45.202.192.0/24 maxlen: 24
                          45.202.193.0/24 maxlen: 24
                          45.202.213.0/24 maxlen: 24
                          45.207.2.0/24 maxlen: 24
                          45.207.3.0/24 maxlen: 24
                          45.207.6.0/24 maxlen: 24
                          45.207.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117100 (0x1c96c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  3 08:21:28 2026 GMT
            Not After : Sep  9 08:21:28 2026 GMT
        Subject: CN=6a704f8c-db0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:57:5f:09:ab:23:dd:32:3a:f3:c9:5f:e4:41:
                    50:60:1e:ad:67:de:67:5c:10:ad:5d:1c:44:92:59:
                    22:06:0d:9e:68:b2:da:5f:0e:bb:97:9c:96:65:f7:
                    28:b5:a0:44:0e:60:06:af:ab:48:07:01:54:06:e4:
                    85:af:e9:7e:5e:a4:21:e6:06:6e:c7:48:c5:d7:a2:
                    c9:7a:2d:62:0d:8e:95:95:2f:0e:99:da:90:01:f1:
                    bb:fc:d8:fa:ee:d6:89:e8:59:51:4a:b3:5d:96:9f:
                    10:f7:1b:95:0d:22:2a:1f:25:d1:df:8a:7e:c8:2d:
                    82:a2:ee:13:b2:6b:7a:f1:d3:3f:d5:f9:cc:47:d4:
                    42:dd:06:98:dc:a1:6f:92:08:73:75:e6:00:c1:ed:
                    e3:af:c2:89:f3:48:4e:da:d1:42:9c:d1:55:e1:f2:
                    c9:c8:16:60:a2:6e:2e:50:96:f2:e5:b3:56:3e:fd:
                    e7:fa:50:47:95:15:c3:8b:4d:1f:9b:c9:8a:9d:19:
                    52:67:7a:64:b4:1d:86:2a:7e:72:5d:de:39:aa:17:
                    00:8b:47:78:80:68:83:3b:05:4e:8c:e0:64:36:c0:
                    ac:e4:7d:d7:1e:27:f3:27:d7:29:ee:83:c4:23:03:
                    0e:f2:35:1e:51:cf:84:d2:0f:37:a9:ce:e7:c7:b6:
                    aa:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DA:78:36:48:DC:AD:25:EA:D5:0C:AA:12:4C:A4:CF:94:D2:A4:5C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/553C60868F1411F1846FB8F3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.192.0/23
                  45.202.213.0/24
                  45.207.2.0/23
                  45.207.6.0/24
                  45.207.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:a5:e2:5d:7b:d5:01:81:bd:88:35:f3:60:84:88:6b:18:08:
         0e:64:dc:ff:54:89:62:61:ae:83:bb:5d:dd:41:d9:f9:a2:2b:
         a7:15:dd:db:f2:94:4e:45:95:cf:5d:ec:ee:45:ff:17:c0:de:
         ae:df:ca:ce:6e:53:a0:aa:29:72:b5:44:3c:8d:c6:f4:c5:37:
         2b:d4:dd:22:a0:b6:90:72:68:de:cd:72:3e:eb:da:3f:fd:a7:
         d9:f0:67:8c:af:f9:40:df:21:c6:27:fc:b5:29:c1:50:85:f7:
         4d:a2:06:0e:bc:f7:6e:66:b2:29:ba:67:27:d7:66:15:40:77:
         69:18:57:1c:64:8a:d2:44:93:b0:47:d9:8b:26:6b:e8:a2:b6:
         57:e7:6c:8c:cc:11:5b:c5:59:76:39:c3:ad:88:4b:d5:95:eb:
         cb:ec:63:2e:86:d3:8b:f7:8d:54:7d:5c:d2:31:ba:46:d7:74:
         b8:d9:16:40:93:11:67:57:cd:5c:e3:22:18:9a:7f:0e:73:be:
         d0:47:0b:99:45:78:5c:7e:22:a7:27:58:e6:bb:2c:de:14:b0:
         7e:f0:85:a6:52:fe:ee:49:bd:8a:e4:16:b7:6b:62:41:e4:65:
         b6:25:38:a8:c7:56:b1:58:c4:e2:ac:02:63:95:40:b6:29:97:
         b3:e0:90:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----