Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D594D9AA06F11F1B1FC67E8CE1D38B0.roa
File:                     9D594D9AA06F11F1B1FC67E8CE1D38B0.roa (raw, json)
Hash identifier:          lpFCLDBgEBRc7EfZEsCBxq10rcKemlVwbSiYVVgTZQY=
Subject key identifier:   5E:0F:73:32:0B:7A:D8:7F:C9:A7:58:D2:5E:9C:B4:73:2C:AE:76:AF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D0DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D594D9AA06F11F1B1FC67E8CE1D38B0.roa
Signing time:             Tue 25 Aug 2026 10:27:47 +0000
ROA not before:           Tue 25 Aug 2026 10:27:43 +0000
ROA not after:            Sun 27 Sep 2026 10:27:43 +0000
asID:                     138456
IP address blocks:        45.202.194.0/23 maxlen: 24
                          45.202.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119002 (0x1d0da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 25 10:27:43 2026 GMT
            Not After : Sep 27 10:27:43 2026 GMT
        Subject: CN=6a8d6e23-929f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2e:44:27:37:1c:e0:6c:71:d8:7e:f5:47:b1:
                    ed:06:bb:83:08:15:ed:6c:0d:dc:76:27:c3:a3:65:
                    68:9f:5c:84:d6:0d:48:86:91:39:19:a5:16:fe:b1:
                    9f:d9:33:94:bd:e2:01:7a:24:4a:a4:6d:df:17:d3:
                    f9:81:4d:74:0e:6a:1c:b4:b4:e1:23:9b:83:26:92:
                    28:06:e8:e1:b2:4f:8c:4d:75:60:eb:a7:37:1f:c8:
                    b2:87:9e:91:2c:17:f7:6a:41:f9:3e:6c:92:95:41:
                    66:f8:bc:a0:4a:0a:4e:88:1d:ae:13:08:30:fc:8a:
                    ed:af:20:0f:05:88:d7:53:ef:92:04:e8:92:71:5d:
                    33:b5:95:5c:6e:86:7b:70:0e:95:bb:2b:ad:c8:eb:
                    1a:f0:c3:1a:6d:50:99:01:39:d1:4e:d6:dd:eb:de:
                    d7:17:a6:68:c7:91:f4:3e:c2:c4:ad:8d:62:18:b9:
                    6d:83:48:b1:e8:f8:af:0a:91:77:77:f0:1e:8c:1c:
                    62:46:f7:aa:10:7e:7f:cb:e4:6a:05:2a:a0:f9:90:
                    f0:8c:db:71:42:0d:0f:58:bd:09:5d:be:05:6b:34:
                    1e:fd:1b:8e:ef:81:9a:9a:17:16:11:eb:3a:4e:07:
                    b9:51:41:9c:87:a2:0a:f7:dd:58:a6:07:24:bf:89:
                    0d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0F:73:32:0B:7A:D8:7F:C9:A7:58:D2:5E:9C:B4:73:2C:AE:76:AF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D594D9AA06F11F1B1FC67E8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.194.0-45.202.196.255

    Signature Algorithm: sha256WithRSAEncryption
         1b:bb:80:8f:38:6f:00:48:ed:aa:5c:90:c7:35:c6:6b:28:c4:
         7f:49:dd:1a:90:c1:43:a8:ae:62:81:60:fe:18:7f:19:d9:2c:
         15:34:17:33:28:7e:06:aa:2f:31:9f:9d:b8:65:ac:75:21:d6:
         d0:58:6a:c0:56:47:fb:87:72:42:c9:8d:5e:09:1f:08:22:a2:
         59:b8:86:eb:5d:39:f3:eb:d5:33:a0:dd:d9:8f:d6:72:3f:06:
         1c:f4:6b:71:c7:5c:5e:36:c6:61:6b:a6:33:f8:85:d2:18:05:
         36:93:39:25:b4:46:10:54:a3:df:d7:75:99:1b:cb:b8:e2:2e:
         01:f3:24:f6:37:79:2f:5f:43:13:18:66:a7:b8:34:b0:f3:b3:
         b8:61:8f:26:2f:99:64:69:22:19:90:b4:df:12:3c:fb:98:69:
         ff:4d:31:6e:9d:8b:22:09:02:26:19:af:3c:ec:23:d4:65:6b:
         50:45:a3:f5:29:b6:b7:05:bf:a3:bb:de:d2:da:c5:ac:d4:44:
         a3:93:b6:e4:3f:a9:fa:a7:ee:4e:60:34:9a:a3:06:94:dc:79:
         2e:cd:5b:88:29:37:27:d3:cf:ff:af:f4:20:54:59:97:fc:b3:
         fb:6b:33:28:6f:9d:3a:f8:9c:48:c3:40:f2:c9:1a:7f:ef:d7:
         fa:88:c7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----