Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9E4F432B97111F18F15BEE2CE1D38B0.roa
File:                     E9E4F432B97111F18F15BEE2CE1D38B0.roa (raw, json)
Hash identifier:          5VUIH/J/9bVcrQl4JwcJVeZu9BZmf2PSMJw0N/Ssm48=
Subject key identifier:   C5:3D:5A:24:B8:DE:74:A8:C0:56:E7:CB:D7:A6:E2:24:2B:B0:6D:7F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D8B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9E4F432B97111F18F15BEE2CE1D38B0.roa
Signing time:             Sat 26 Sep 2026 06:17:13 +0000
ROA not before:           Sat 26 Sep 2026 06:17:09 +0000
ROA not after:            Fri 23 Oct 2026 06:17:09 +0000
asID:                     131471
IP address blocks:        45.195.130.0/24 maxlen: 24
                          45.195.131.0/24 maxlen: 24
                          45.195.194.0/24 maxlen: 24
                          45.195.195.0/24 maxlen: 24
                          45.195.210.0/24 maxlen: 24
                          45.195.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121016 (0x1d8b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 26 06:17:09 2026 GMT
            Not After : Oct 23 06:17:09 2026 GMT
        Subject: CN=6ab76369-4fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:16:50:aa:a9:ef:67:6a:a9:e5:0b:f4:fa:75:
                    18:c4:8f:20:e6:bb:e0:ab:1f:54:2c:72:eb:c3:53:
                    7a:64:bf:92:cd:48:15:d2:0f:03:06:65:61:b6:cf:
                    8d:dc:79:2d:31:0c:0e:ce:14:3b:58:1d:88:b0:8f:
                    25:46:7c:52:e5:2b:b2:b4:7d:3d:01:5f:cf:46:63:
                    18:59:31:71:94:51:38:7a:ab:48:d8:49:eb:98:3c:
                    d1:fd:91:d4:03:04:93:9f:8b:80:26:bb:12:11:cb:
                    33:42:17:4c:57:b5:23:04:4e:59:bd:2d:02:dc:78:
                    f7:92:69:7b:54:ed:5b:57:f3:39:15:1e:09:49:8b:
                    d0:2e:a8:5a:f4:fb:90:be:b1:37:61:6e:4a:58:40:
                    40:b4:4c:17:0b:bc:fa:c8:ce:55:c3:a5:25:54:d6:
                    1f:16:c8:eb:ef:a1:1f:31:df:7a:de:0e:4a:3a:70:
                    1d:a1:44:c9:f3:f4:de:ad:71:0e:c0:bb:1a:db:c7:
                    11:96:4a:13:32:1c:22:67:c6:25:68:30:a8:ec:6c:
                    cb:ce:55:d7:e6:2d:48:a7:5a:83:5d:12:84:e0:50:
                    79:03:ec:23:80:d5:45:e2:9a:75:c1:49:46:57:95:
                    25:0c:d8:58:33:a4:e4:5e:0f:a4:06:6c:9a:4d:67:
                    49:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3D:5A:24:B8:DE:74:A8:C0:56:E7:CB:D7:A6:E2:24:2B:B0:6D:7F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9E4F432B97111F18F15BEE2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.130.0/23
                  45.195.194.0/23
                  45.195.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:a2:59:33:4b:a0:de:b3:7a:45:e2:89:1c:4d:6a:46:ea:44:
         ce:bd:21:4e:2d:b0:b8:b9:d9:00:22:a3:ac:d2:f2:cb:da:27:
         eb:6a:fc:42:9d:c3:63:79:e5:12:44:ee:a4:eb:14:00:80:f0:
         b0:87:65:66:c7:e3:1b:58:21:cb:83:fd:71:7f:f5:5b:2a:01:
         2a:4d:ef:17:c4:ec:2e:fa:67:77:5f:e7:c5:3e:00:55:c8:00:
         78:76:20:06:58:e3:3a:5c:b3:5e:d3:31:b1:5b:81:e6:7a:d8:
         94:55:6f:44:fc:eb:d0:d5:0a:fe:88:c1:cd:8d:c3:fb:eb:d0:
         62:7d:51:0e:6e:46:b6:84:64:84:e1:6d:85:13:24:3f:15:c7:
         5f:67:1e:63:aa:a0:5f:67:7f:cf:7e:35:d6:ee:60:34:43:a8:
         21:29:ca:30:06:84:4e:11:a8:ee:91:c8:02:a4:e0:eb:e9:9c:
         b8:68:f3:b1:58:df:49:78:94:54:7a:79:00:e9:6b:2c:4c:7f:
         3d:96:f3:e1:69:ca:0c:44:97:ae:8b:84:fb:b5:64:59:e0:58:
         84:8f:45:bc:4d:30:43:b6:d6:df:81:c5:fe:f4:5d:08:29:a6:
         5f:33:72:c4:69:6c:5c:ba:c3:51:f6:72:26:a9:d3:e4:8b:89:
         fd:88:b6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----