Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DD655729AE911F1BDFEEBAECE1D38B0.roa
File:                     5DD655729AE911F1BDFEEBAECE1D38B0.roa (raw, json)
Hash identifier:          PpfZvE31guAPe/CL5Fdy0bSUVM4HRy5vXleiR3S2g7o=
Subject key identifier:   B1:78:28:49:37:94:AB:C5:5D:39:C2:83:97:C3:5A:52:60:1C:FE:ED
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CD9D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DD655729AE911F1BDFEEBAECE1D38B0.roa
Signing time:             Tue 18 Aug 2026 09:44:12 +0000
ROA not before:           Tue 18 Aug 2026 09:44:08 +0000
ROA not after:            Fri 17 Aug 2029 09:44:08 +0000
asID:                     17561
IP address blocks:        45.192.188.0/24 maxlen: 24
                          45.192.189.0/24 maxlen: 24
                          45.192.190.0/24 maxlen: 24
                          45.192.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118173 (0x1cd9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 18 09:44:08 2026 GMT
            Not After : Aug 17 09:44:08 2029 GMT
        Subject: CN=6a84296c-147e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:34:18:14:07:3f:f8:bb:7a:d9:bd:fc:da:cb:
                    af:11:f4:98:24:22:75:87:84:50:9e:bc:38:60:2f:
                    57:a1:73:92:ec:8b:45:fe:3c:48:29:9f:aa:8c:55:
                    f4:6f:e5:93:c5:38:b4:10:8c:11:dc:19:9c:64:26:
                    43:d1:63:40:a1:fa:b4:00:38:1c:a5:79:16:d3:99:
                    c0:5a:67:7a:fc:07:2e:a0:c7:25:23:13:5f:d1:28:
                    dc:0e:08:fb:79:26:19:7b:01:9a:4e:ed:ee:56:2b:
                    eb:04:ae:e4:a2:5d:15:82:71:b6:2a:4d:3d:63:4c:
                    62:08:23:59:32:a6:40:78:2f:58:cb:b3:87:50:d1:
                    11:28:f6:37:ca:92:91:15:cb:c5:bc:c4:2c:32:27:
                    7e:e6:a3:04:f7:23:c7:fc:16:45:1d:43:12:94:c7:
                    d5:80:05:1a:96:9e:90:0f:a0:4c:83:1d:11:fe:f8:
                    21:44:04:32:ef:73:06:aa:f6:b1:d9:1f:c8:0a:d0:
                    54:b9:21:fc:d4:ec:c1:42:3e:43:a5:17:cd:65:e4:
                    00:1a:ff:32:98:c6:c6:21:50:10:1b:dc:98:89:6b:
                    14:53:ea:31:3e:82:dc:c0:ea:9d:c5:5a:4a:76:18:
                    cb:06:49:88:68:85:84:5d:53:9c:ba:6b:bc:91:23:
                    1b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:78:28:49:37:94:AB:C5:5D:39:C2:83:97:C3:5A:52:60:1C:FE:ED
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DD655729AE911F1BDFEEBAECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:02:66:4d:2a:15:ed:25:61:fd:af:c7:64:15:a3:c2:25:72:
         de:17:8d:ef:d7:c0:3e:a0:bc:35:bb:45:98:4f:24:c1:25:5a:
         a8:32:02:b9:6a:8b:1a:f1:6e:02:a3:bb:ea:6f:5a:3c:7e:e1:
         70:40:8b:24:b5:c9:2d:0b:4c:f6:86:8b:dc:99:47:f6:26:69:
         17:7d:93:f2:36:6f:74:b0:7a:82:e9:88:dd:ca:65:3c:e1:4d:
         eb:bc:b8:cd:9a:42:3e:80:6d:b9:78:17:bf:92:f2:77:5e:e6:
         54:bc:c9:8b:04:d9:d3:98:c0:a3:4d:03:3a:9d:12:86:26:db:
         d3:26:eb:74:f4:15:08:2d:18:fd:58:c1:13:4c:c8:30:99:7a:
         55:db:9b:d4:ba:4f:86:86:ee:0d:18:b6:92:1f:7e:47:f3:43:
         4a:54:0c:87:4c:ef:aa:48:c8:34:02:29:86:3a:b7:d2:59:97:
         cf:30:31:24:3c:1f:dc:97:2f:42:41:77:54:a1:77:ee:e7:86:
         e1:19:bf:1e:b6:2a:5f:e5:83:38:f2:4f:36:25:d0:90:91:d7:
         ba:f2:16:91:e9:b7:19:32:a6:3a:0d:86:98:de:9e:62:7b:84:
         b3:81:d1:f2:a2:ee:91:e2:7c:f6:68:a4:f7:6d:16:7d:89:6a:
         05:2a:d6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----