Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F100B48916811F1A97A1010CF1D38B0.roa
File:                     5F100B48916811F1A97A1010CF1D38B0.roa (raw, json)
Hash identifier:          zcSNoE5XTPS3p0arVkvgprfCYe8AbZtJEjZGD0R2wTc=
Subject key identifier:   AA:96:6C:49:DB:58:A2:6A:CE:9F:BB:1A:BB:FF:AF:A3:3E:5B:41:59
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C9CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F100B48916811F1A97A1010CF1D38B0.roa
Signing time:             Thu 06 Aug 2026 07:28:08 +0000
ROA not before:           Thu 06 Aug 2026 07:28:05 +0000
ROA not after:            Sat 12 Sep 2026 07:28:05 +0000
asID:                     135222
IP address blocks:        45.195.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117199 (0x1c9cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  6 07:28:05 2026 GMT
            Not After : Sep 12 07:28:05 2026 GMT
        Subject: CN=6a743788-d3ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a9:f1:9d:92:89:72:51:d6:0a:7f:79:55:0c:
                    a9:42:eb:88:ee:0a:76:2d:bc:6e:16:dd:a1:8e:81:
                    83:30:c0:02:e3:8d:77:49:45:3b:d6:95:1e:1e:27:
                    4a:da:6b:af:63:51:ed:4a:a4:34:92:5b:d1:18:c0:
                    4d:fe:71:eb:58:79:90:c8:12:9f:5c:70:8e:14:b7:
                    45:0c:6b:e1:0e:35:94:f1:7a:ec:93:aa:a2:5d:58:
                    31:5f:27:3c:a9:1a:b7:de:a4:f3:82:c5:1f:22:38:
                    33:ee:01:48:f9:a8:5d:08:be:37:71:ee:54:de:d4:
                    b5:fb:95:94:d9:db:ad:be:49:a6:74:23:9a:7c:8c:
                    93:cc:7b:01:a3:e5:2d:3d:57:fd:49:c3:f5:c8:35:
                    8a:df:45:8d:85:c6:92:d7:e6:67:31:76:97:7e:2e:
                    6d:29:03:9f:ec:f8:55:4f:eb:ec:ff:be:f8:20:fa:
                    82:fe:0f:3e:79:59:9c:16:cc:bb:52:90:c8:ff:8a:
                    05:e0:fb:1e:53:48:e5:fb:7f:d9:1b:1c:63:09:9c:
                    0f:d2:73:3c:17:39:bd:a3:f6:f1:4e:d2:90:52:73:
                    47:31:8c:a0:e1:1f:4b:d3:0a:37:d8:79:46:e3:3b:
                    21:5c:aa:a4:af:da:22:cc:6f:3e:a4:e7:e3:cd:d0:
                    38:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:96:6C:49:DB:58:A2:6A:CE:9F:BB:1A:BB:FF:AF:A3:3E:5B:41:59
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F100B48916811F1A97A1010CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:53:00:c1:69:b0:70:d6:13:81:09:92:e9:cc:0b:19:6c:cb:
         a8:ab:2b:76:98:80:57:88:de:c1:cf:50:67:23:99:26:4b:42:
         9b:c1:f0:21:99:72:46:29:b6:44:62:7f:36:9a:de:ab:8c:6a:
         83:b4:4b:e6:13:ed:e2:2f:21:86:93:4c:ea:b8:27:6d:af:fc:
         83:5d:c2:87:07:7a:b3:fa:0b:01:d3:b0:49:1e:95:2f:fc:2f:
         c0:0c:1a:60:77:e0:47:f0:60:36:b6:30:ae:ad:27:c3:7c:0c:
         84:9f:1b:3a:be:99:a9:ee:31:bc:33:3c:93:62:59:ed:d3:91:
         c9:03:93:10:34:00:ae:13:4c:d5:7a:0f:f2:c6:82:1a:e7:8a:
         f3:31:99:77:36:35:6d:2a:a8:b6:25:16:d2:30:f2:e4:a3:cb:
         63:8b:d7:bf:70:37:fd:d1:8e:d0:c9:2b:68:ab:93:be:90:90:
         42:8c:6a:5a:8d:c7:70:f8:9d:f1:f1:b9:75:86:d8:14:56:b4:
         fd:0d:b7:a6:b3:b3:d4:82:c4:48:7d:d6:e1:2e:18:9f:cc:3b:
         bd:cc:3a:ad:3a:89:b4:e9:6b:c7:3a:d7:b4:1e:cd:81:cb:30:
         3b:a0:2a:81:84:24:81:ef:a5:f3:89:dd:d5:f2:e6:79:8f:43:
         da:47:f2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----