Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85501958ADD611F189E3CB0FCF1D38B0.roa
File:                     85501958ADD611F189E3CB0FCF1D38B0.roa (raw, json)
Hash identifier:          bOFVAOHdEUBEMNbwGSnPITOmSOeHDAy6GtSF0j+K6vc=
Subject key identifier:   49:6A:77:EC:03:1E:1F:5B:74:49:AE:0D:4D:C7:83:60:00:20:FD:35
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D567
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85501958ADD611F189E3CB0FCF1D38B0.roa
Signing time:             Fri 11 Sep 2026 11:47:10 +0000
ROA not before:           Fri 11 Sep 2026 11:47:06 +0000
ROA not after:            Mon 21 Sep 2026 11:47:06 +0000
asID:                     200283
IP address blocks:        45.195.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120167 (0x1d567)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 11 11:47:06 2026 GMT
            Not After : Sep 21 11:47:06 2026 GMT
        Subject: CN=6aa3ea3e-541e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4f:f4:4e:ad:f0:cd:b9:28:4b:1e:fa:2a:7d:
                    53:e7:d6:c9:53:93:20:83:5d:0d:18:03:3a:61:65:
                    d1:f1:34:0c:f1:6b:54:e6:54:c3:eb:ea:11:8f:2f:
                    2b:c5:2e:c1:71:79:aa:93:e4:54:85:5a:f3:87:f9:
                    7e:90:a8:1b:b5:44:bd:58:06:95:cd:05:66:d0:d3:
                    88:c3:67:79:2b:25:c9:3a:a4:ba:18:d4:ff:1a:1d:
                    9d:02:9e:be:1c:02:9f:51:06:b1:ef:c2:ea:01:02:
                    e4:83:9e:0d:9f:8e:37:25:e7:70:cd:a3:72:3b:0e:
                    bf:97:31:19:98:72:02:af:f6:75:9c:9f:a6:a0:f9:
                    bd:16:1e:90:84:f5:48:93:32:ed:48:cc:c2:4a:73:
                    22:d4:a3:34:79:d2:0f:43:e6:20:1c:3c:8a:d2:95:
                    d4:2d:77:6c:b9:df:21:45:af:ee:7b:46:1c:44:59:
                    76:5c:44:a2:92:5a:14:4b:6d:b9:f0:ec:73:83:68:
                    21:96:63:37:e9:32:ba:16:0b:35:e8:12:cb:6a:90:
                    57:5e:a4:1f:c8:17:90:4a:d3:3e:60:36:20:ab:65:
                    e9:8e:0c:20:09:a7:ee:52:e6:4a:e8:22:6d:3f:79:
                    79:b0:97:7f:f1:8b:97:f9:6e:d1:41:95:87:9a:40:
                    36:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6A:77:EC:03:1E:1F:5B:74:49:AE:0D:4D:C7:83:60:00:20:FD:35
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85501958ADD611F189E3CB0FCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:d2:c4:07:b9:a9:3b:70:5c:05:ac:25:f7:ab:47:9e:82:a1:
         f4:fd:e4:6b:95:4b:0d:3d:43:e6:a1:98:d0:61:d9:bd:d9:5e:
         62:07:61:11:c0:73:ad:f8:42:ef:79:ea:4b:75:1f:90:7c:bb:
         48:c8:1c:f1:28:d5:f0:e4:2a:31:e9:63:68:36:d4:29:a1:a9:
         b8:01:f8:d2:24:e8:6f:0e:55:b6:f7:e4:4e:d1:c0:52:b8:cf:
         2f:67:6c:43:9b:38:cc:1d:88:72:26:4e:2a:5d:ab:03:7c:b4:
         57:93:57:92:db:be:5d:a8:3f:5a:8a:14:d9:df:51:cf:f7:b3:
         28:86:31:15:31:ad:86:85:a1:5a:a2:c9:ff:d6:99:28:64:c3:
         24:3b:4c:fb:bc:3c:01:74:e3:66:36:09:40:bd:b1:4e:74:a7:
         0a:55:b6:62:89:1b:cf:a4:78:c1:0c:e0:32:00:f2:c2:13:ff:
         40:aa:1e:4e:39:d5:7e:4c:5e:55:d4:94:cb:5c:87:0c:e7:4e:
         f8:14:25:b7:f1:81:91:8a:ee:65:2b:ab:ab:99:e7:28:29:c1:
         45:46:df:41:34:76:e1:1b:4a:7c:16:7e:1e:b9:e2:49:5b:6f:
         86:5c:4a:17:2d:6a:32:68:21:9b:b2:7a:71:e9:6c:f2:53:6f:
         95:7b:45:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----