Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/854395A2CE1011F1A77761FCCE1D38B0.roa
File:                     854395A2CE1011F1A77761FCCE1D38B0.roa (raw, json)
Hash identifier:          Ku5ehiPdTy73w202exiCv3go2GOhdLhdxRU3xPEU1bM=
Subject key identifier:   76:46:BE:90:1B:67:B4:25:B9:54:14:21:59:90:FB:9E:DB:26:0F:23
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DFC2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/854395A2CE1011F1A77761FCCE1D38B0.roa
Signing time:             Thu 22 Oct 2026 12:02:58 +0000
ROA not before:           Thu 22 Oct 2026 12:02:53 +0000
ROA not after:            Mon 23 Nov 2026 12:02:53 +0000
asID:                     17497
IP address blocks:        45.192.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122818 (0x1dfc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 22 12:02:53 2026 GMT
            Not After : Nov 23 12:02:53 2026 GMT
        Subject: CN=6ad9fb72-fa00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4e:31:4a:81:ff:88:55:e9:4e:3a:66:f0:21:
                    d3:ab:62:7e:8a:ba:5a:85:2c:51:b0:c2:77:7e:78:
                    14:b2:ad:b3:84:7d:9c:63:b2:9b:96:70:f4:19:b6:
                    dc:26:0c:75:dd:27:fe:1a:4f:39:4f:f4:8e:21:41:
                    81:cf:e6:ad:e3:73:3b:5a:ab:13:39:16:d4:46:97:
                    28:a5:d0:39:05:8a:3b:e1:bd:00:cf:c8:37:24:75:
                    04:2a:44:88:fa:fd:d6:fe:c4:fa:77:99:0c:46:b5:
                    a9:f0:15:f3:2a:00:1d:a1:92:85:c0:3e:8f:4f:74:
                    3f:33:df:87:97:bb:e2:e9:76:70:dc:3b:d4:98:bd:
                    74:78:22:41:15:3a:de:d2:70:37:64:a4:70:a3:57:
                    c4:d1:67:65:f6:04:07:8b:7a:a0:ff:ff:79:0a:95:
                    53:85:b9:7c:0e:00:b5:d4:44:35:2d:32:1c:2b:c2:
                    90:70:d9:46:7c:18:d3:de:d0:b4:46:78:2b:2a:63:
                    6f:de:41:58:41:c0:3e:79:c8:9f:60:4c:bd:43:cc:
                    2b:87:72:a2:68:05:db:03:33:33:1e:7c:32:c3:3c:
                    15:dc:8e:9e:62:04:4f:19:c4:6b:0e:ba:c0:3a:8c:
                    fe:d8:58:a3:4a:f9:5a:b4:2f:c4:69:05:48:aa:74:
                    09:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:46:BE:90:1B:67:B4:25:B9:54:14:21:59:90:FB:9E:DB:26:0F:23
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/854395A2CE1011F1A77761FCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:d8:06:0f:d8:14:09:9e:23:2a:07:ab:b3:b2:05:0c:57:0a:
         f0:b5:55:56:98:5e:22:f1:25:c1:49:84:15:36:97:54:c5:57:
         a9:0b:68:4f:2c:0d:af:5c:99:67:cb:35:50:da:92:0a:38:ec:
         f0:50:e3:fa:73:bc:ca:06:9f:8a:5c:32:99:28:4a:68:b3:f3:
         5a:fc:24:8c:d5:6e:65:b9:3a:88:02:0c:1f:39:b5:23:b7:47:
         20:56:3e:4b:7e:d2:47:07:b4:66:0b:91:81:e1:a6:76:4a:36:
         53:0d:7d:51:f9:a2:c2:89:d5:40:10:15:53:15:ce:3b:a8:f5:
         a6:e4:a0:c7:59:e6:8f:4a:2c:2b:e0:d5:68:ef:ef:5c:6c:aa:
         79:d2:b9:a1:90:d7:49:cf:22:34:6d:c6:7e:c8:23:be:b4:da:
         f6:6f:f9:42:49:e0:50:1b:15:6a:e5:b3:72:14:80:e2:4d:1e:
         fc:c1:03:27:d1:e0:44:9b:f8:26:ec:c8:03:9b:a6:01:6a:a5:
         f8:b6:36:24:ab:b6:b7:ea:2d:b1:d0:48:ba:bd:d7:71:57:a6:
         55:ed:bd:99:bb:5d:40:93:e7:6c:c0:2a:c7:fb:67:fb:84:f2:
         30:4b:a2:8e:db:52:77:55:c6:b9:41:76:2d:24:b1:49:ad:4a:
         c7:ad:b7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----