Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BE29AB29BB811F193CAE612CF1D38B0.roa
File:                     5BE29AB29BB811F193CAE612CF1D38B0.roa (raw, json)
Hash identifier:          l7OLa/aBBj/cWbT+9/oiB03cYqq53QYVrXxrIJQoaHs=
Subject key identifier:   9A:05:62:D9:AE:BA:54:A4:97:79:58:07:29:79:46:78:94:3A:67:07
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE67
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BE29AB29BB811F193CAE612CF1D38B0.roa
Signing time:             Wed 19 Aug 2026 10:25:55 +0000
ROA not before:           Wed 19 Aug 2026 10:25:51 +0000
ROA not after:            Thu 19 Nov 2026 10:25:51 +0000
asID:                     55020
IP address blocks:        45.195.112.0/21 maxlen: 24
                          45.195.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118375 (0x1ce67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 19 10:25:51 2026 GMT
            Not After : Nov 19 10:25:51 2026 GMT
        Subject: CN=6a8584b2-683c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8e:4b:a4:00:9b:8e:8e:f0:4f:30:68:7e:44:
                    79:02:4f:98:8f:b2:12:32:8e:a1:2f:2e:b8:15:f4:
                    81:69:93:d8:a8:88:05:b3:38:32:be:c0:28:46:c8:
                    88:e8:08:97:0a:88:c4:38:18:65:75:e8:99:63:e4:
                    a3:97:55:f2:b6:2e:76:19:03:92:59:f3:87:b7:2e:
                    1d:5d:c1:ba:b6:80:2b:2a:57:67:b7:bc:7d:58:09:
                    35:d3:d9:4c:c8:33:44:d3:88:3b:67:89:26:47:76:
                    b9:e3:30:08:ed:36:69:b1:08:b9:5c:57:3d:c2:48:
                    5d:27:3a:b4:46:61:84:a0:22:2d:f5:da:44:ca:09:
                    41:e9:9c:9e:0b:1d:78:43:08:6e:b8:d9:6e:67:ac:
                    e5:9c:88:21:fe:a6:3d:b4:23:6e:68:46:ed:ec:c2:
                    b6:30:9f:81:2f:54:18:83:20:d9:f2:0d:fe:90:f8:
                    9e:26:68:bf:14:f0:80:cd:ba:ec:06:e1:20:0c:68:
                    45:f6:e9:42:8f:4d:1f:a9:d5:d4:fc:cc:10:32:27:
                    8c:b8:d6:b8:a5:3f:6e:80:0d:0f:70:d3:b3:79:a9:
                    5c:a7:95:96:e1:4d:78:1f:8d:04:e4:a4:21:5f:66:
                    61:a1:98:73:b4:24:bd:d5:18:af:68:fd:32:9a:6e:
                    8f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:05:62:D9:AE:BA:54:A4:97:79:58:07:29:79:46:78:94:3A:67:07
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5BE29AB29BB811F193CAE612CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8b:2d:fa:a1:6a:e0:65:6f:e6:81:ab:84:75:81:ec:d7:29:a4:
         80:47:3e:b3:27:59:6a:a1:fe:5a:95:bf:94:21:25:1d:aa:8d:
         ec:89:c7:93:3b:91:79:fb:ec:aa:f8:e2:38:c9:fa:01:1e:9a:
         ae:f2:f8:c5:69:a1:1c:35:0b:f2:1d:9a:44:a3:fc:28:b0:07:
         ae:d4:d9:ca:eb:5f:25:36:bd:5a:93:b4:fc:8f:6b:a5:06:0c:
         6c:cc:fd:60:b9:49:5f:dc:8e:66:6b:bf:09:3f:3c:80:cc:80:
         e1:a3:0d:80:6f:6e:4d:78:e2:78:de:86:e6:e4:9d:12:f3:ba:
         f5:79:24:d9:4e:c1:19:17:d3:77:e4:e2:f2:45:e8:6f:a8:30:
         06:88:16:ad:a7:25:07:d8:36:05:0f:88:85:11:85:6f:95:c6:
         f2:e1:03:2e:12:28:6c:d4:11:8a:72:ba:e4:45:57:37:71:92:
         4e:24:11:aa:d8:ad:89:20:77:d9:4a:24:1d:77:7e:95:60:71:
         cf:25:3d:55:fb:00:dd:e4:68:ea:27:0b:ff:a1:e9:99:1b:5d:
         ee:d5:7b:b4:3f:4e:da:ec:ab:a0:e8:35:36:f2:11:d0:e4:75:
         4b:35:fa:9c:aa:75:d0:9c:34:e3:cf:93:19:bf:c2:78:71:89:
         be:fb:da:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----