Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D2E0C0EB0CE11F1806C4E0ACF1D38B0.roa
File:                     1D2E0C0EB0CE11F1806C4E0ACF1D38B0.roa (raw, json)
Hash identifier:          jvT69QiP7oshBroETCoZQoKjvD+MhukZjcAsD62Dh/I=
Subject key identifier:   28:16:5D:C3:FC:58:37:99:12:8E:34:E8:12:47:1E:B3:29:61:61:02
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D5FD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D2E0C0EB0CE11F1806C4E0ACF1D38B0.roa
Signing time:             Tue 15 Sep 2026 06:24:33 +0000
ROA not before:           Tue 15 Sep 2026 06:24:28 +0000
ROA not after:            Tue 14 Sep 2027 06:24:28 +0000
asID:                     328608
IP address blocks:        45.205.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120317 (0x1d5fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 06:24:28 2026 GMT
            Not After : Sep 14 06:24:28 2027 GMT
        Subject: CN=6aa8e4a1-8531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9e:25:50:41:4e:84:ad:73:77:7e:55:e2:21:
                    43:44:0b:43:15:f4:4d:4e:9f:1a:13:23:6f:72:4f:
                    99:cc:9b:75:23:77:0d:55:00:44:19:92:4e:e5:6d:
                    e5:60:86:48:e0:20:55:16:d3:49:cd:0e:3d:6c:77:
                    f6:d7:ae:66:2d:4a:80:e7:7c:9f:5f:9e:2f:fc:11:
                    2b:12:ce:04:8c:8e:7f:d7:46:ff:be:40:31:a1:f4:
                    d0:6c:83:04:09:77:20:e4:02:47:1c:21:29:5b:7e:
                    ff:5e:ce:77:2e:d3:0f:db:5f:99:db:75:1e:c3:c2:
                    9f:8c:84:9b:9d:03:2c:01:98:a7:97:76:7e:48:8a:
                    5f:3e:cb:68:42:c2:79:87:04:53:96:eb:7a:03:a1:
                    a3:54:c6:3a:63:be:5d:de:4c:19:9a:0a:c9:a1:86:
                    6d:65:56:8d:26:26:87:a7:1c:15:16:ae:ee:f1:56:
                    85:0b:14:02:25:58:0a:77:fa:0a:5e:37:b8:13:57:
                    19:7c:be:2c:7f:cf:ec:1e:78:65:51:03:84:a3:16:
                    5c:78:ac:1d:d4:7f:f3:42:1c:cc:a7:4c:8c:61:83:
                    7e:f0:09:12:0a:37:bc:c9:53:01:7b:f7:dd:f8:a3:
                    b6:5e:9a:ac:cc:10:bc:7c:9f:2a:a3:55:7a:81:f8:
                    18:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:16:5D:C3:FC:58:37:99:12:8E:34:E8:12:47:1E:B3:29:61:61:02
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D2E0C0EB0CE11F1806C4E0ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:fa:e7:56:3e:b5:a2:7e:87:42:b4:d3:5b:03:09:54:9b:23:
         3a:8a:0c:16:5e:ee:5f:95:cc:8d:24:46:50:c1:2b:cb:65:c3:
         0e:63:e3:ff:26:b6:9a:1d:06:2c:bb:c2:64:d5:a7:b3:61:46:
         2f:b4:78:7e:3c:0b:77:7f:66:fc:94:45:5b:de:cc:a2:a9:52:
         be:fe:ef:e6:fb:9e:c3:97:97:31:bf:b2:f3:56:d2:d8:24:89:
         32:d9:69:d5:83:9c:b9:f4:43:29:52:fb:41:18:31:3f:25:0d:
         c8:6d:f9:7a:5a:43:f1:35:00:08:4b:97:17:0f:8e:e0:45:b9:
         5c:de:8c:83:7b:93:f4:79:9e:b0:45:67:10:f6:d4:39:7f:a0:
         57:b6:cd:4d:c2:c9:10:60:7f:45:47:44:e8:b6:a3:4f:dd:23:
         46:94:49:a1:34:98:ca:7b:e0:07:cb:ae:78:ca:38:81:74:ee:
         dd:17:59:95:45:76:2c:11:a8:41:38:a1:f4:53:e2:52:d1:57:
         d3:b1:63:e3:25:12:8c:65:9b:da:9b:69:96:1b:e5:bb:00:6e:
         55:0e:13:68:84:3b:9a:64:e9:8f:7a:a2:d4:75:60:e7:09:bd:
         5c:60:21:ef:9d:69:88:4e:e9:3b:ae:6e:11:ad:62:0c:9f:93:
         6e:48:fc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----