Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E4C1F0492ED11F1AB2E3ECCCE1D38B0.roa
File:                     5E4C1F0492ED11F1AB2E3ECCCE1D38B0.roa (raw, json)
Hash identifier:          D0JgXrnHPZzYKQX8l54UI9yIr/gfa3R8cHOyWye4NEs=
Subject key identifier:   6A:29:86:44:19:7A:3A:DB:5E:47:E6:57:63:EF:14:8F:4E:F1:0D:A5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CA64
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E4C1F0492ED11F1AB2E3ECCCE1D38B0.roa
Signing time:             Sat 08 Aug 2026 05:52:41 +0000
ROA not before:           Sat 08 Aug 2026 05:52:37 +0000
ROA not after:            Sun 06 Sep 2026 05:52:37 +0000
asID:                     154383
IP address blocks:        45.197.9.0/24 maxlen: 24
                          45.201.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 29 Aug 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117348 (0x1ca64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  8 05:52:37 2026 GMT
            Not After : Sep  6 05:52:37 2026 GMT
        Subject: CN=6a76c429-6c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6f:c3:d1:aa:d1:85:db:70:6f:3e:9c:68:2e:
                    6a:ca:e3:93:0a:82:53:aa:50:09:7d:20:b0:5c:39:
                    0e:27:34:14:f3:9f:06:a6:e5:4c:3c:a5:c6:e3:a8:
                    83:f4:65:5f:8b:6b:2a:18:77:0e:c1:f1:ed:c0:7a:
                    97:8f:66:94:84:bf:fc:b5:6d:50:0a:fa:4f:91:16:
                    b2:c6:a2:2a:b0:0d:c7:32:6b:fc:7c:92:8e:5e:3f:
                    b6:68:75:b1:e0:07:ce:73:fa:39:26:7e:6e:2a:cd:
                    b3:3f:86:a9:9a:3c:d1:93:51:23:62:78:cd:6e:de:
                    96:f2:4e:b5:f5:95:a1:bd:34:f9:cc:7e:9f:80:85:
                    b9:0c:1c:9e:97:07:66:8f:70:aa:65:85:5e:43:dc:
                    29:80:08:b1:85:77:91:e5:07:f4:79:70:99:0c:9a:
                    83:22:dd:a0:21:60:ca:40:d5:da:f1:9d:33:d9:85:
                    26:c0:b3:b2:de:b9:be:8e:10:da:92:c3:94:15:b8:
                    f4:77:ab:6b:f1:21:38:1f:fd:5d:5f:a5:22:74:4a:
                    cc:9f:3c:72:66:4d:ab:c1:7b:bb:d4:2e:0b:7c:1d:
                    03:7d:11:6a:53:f1:71:21:08:36:9a:0b:e3:a0:91:
                    07:63:84:ed:34:c0:4a:47:8e:96:8f:e6:57:80:ae:
                    35:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:29:86:44:19:7A:3A:DB:5E:47:E6:57:63:EF:14:8F:4E:F1:0D:A5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5E4C1F0492ED11F1AB2E3ECCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.9.0/24
                  45.201.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:a0:d2:6e:64:c3:27:5c:de:7f:03:a2:41:cf:a7:ec:b3:6d:
         9f:ab:d6:b8:f9:ea:05:0f:18:f8:7d:a9:15:34:82:d6:a9:ea:
         9e:29:40:88:07:1c:8e:62:63:74:74:ef:d3:69:a4:40:10:da:
         e4:fe:f0:10:d6:d0:b4:83:e8:f4:8a:b4:71:e9:99:b1:c4:7c:
         c8:ee:fb:35:47:6f:2c:d0:1f:52:c7:cc:1d:1b:44:14:35:4d:
         64:63:72:14:e8:28:ad:cb:6c:b1:40:07:b2:e9:f8:39:aa:6e:
         7e:dd:78:7e:9a:97:d2:81:55:ad:27:67:59:ca:21:72:9e:ad:
         88:18:1d:cc:90:21:c1:da:c0:ea:c6:7b:5f:52:9e:27:5c:38:
         df:bb:bb:19:95:d8:a1:b4:4b:af:14:03:f5:0a:c6:d8:ad:65:
         65:35:f5:20:90:c4:96:dc:01:5a:34:0e:68:c5:3c:2e:6e:28:
         b6:95:35:b1:4d:86:af:6d:98:85:7d:29:33:62:91:cb:c2:95:
         fa:30:1c:7c:d6:86:ad:47:3f:59:cd:32:20:73:d8:36:a2:98:
         3c:5e:f0:a2:4b:02:c7:d1:42:66:8e:7b:39:fc:84:93:42:d9:
         df:cc:ff:f2:ff:72:7a:df:97:6d:3a:ed:2a:f8:52:e2:1b:52:
         ed:64:fe:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----