Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D637A94ADBA11F18A4EAAE8CE1D38B0.roa
File:                     2D637A94ADBA11F18A4EAAE8CE1D38B0.roa (raw, json)
Hash identifier:          RvACQL5e0ayZ00kIZqrJouwNcHzMSIcwpiTpE9RFPnY=
Subject key identifier:   0D:A9:23:6A:65:DF:9B:8A:ED:AF:69:A7:88:DE:7F:7C:10:16:A8:58
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D537
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D637A94ADBA11F18A4EAAE8CE1D38B0.roa
Signing time:             Fri 11 Sep 2026 08:24:16 +0000
ROA not before:           Fri 11 Sep 2026 08:24:13 +0000
ROA not after:            Tue 20 Oct 2026 08:24:13 +0000
asID:                     214413
IP address blocks:        45.194.87.0/24 maxlen: 24
                          45.194.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120119 (0x1d537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 11 08:24:13 2026 GMT
            Not After : Oct 20 08:24:13 2026 GMT
        Subject: CN=6aa3bab0-cf57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e8:59:a4:04:21:f9:24:83:82:52:37:c9:5a:
                    80:31:1c:b1:42:bf:86:3b:7c:2f:29:6a:6e:e9:6b:
                    b3:91:07:8b:d2:51:8f:e8:bb:ce:cc:41:a7:7c:e6:
                    f8:74:58:88:a1:31:1c:92:93:41:c5:49:52:6c:85:
                    d8:fa:e8:0d:4c:b4:c6:c6:fb:15:be:d8:14:7c:3a:
                    e2:03:25:f0:e3:b2:e2:67:58:42:9d:47:50:af:71:
                    5f:1d:9b:96:71:b4:06:cd:84:6f:bf:c6:c3:a5:3e:
                    33:e9:c6:75:9e:ab:1e:1b:8b:19:be:8d:33:a1:f1:
                    1f:87:ef:57:aa:1a:a2:1f:72:de:b2:99:5b:af:c1:
                    05:1e:fe:c6:62:0f:85:c0:84:f9:6a:78:e2:39:b8:
                    e9:b7:db:c2:03:90:83:08:6d:3c:e1:00:fa:85:db:
                    e8:57:b4:f5:9e:ea:c4:ef:b5:3b:53:55:d7:f9:92:
                    7a:b1:89:03:5a:9c:9a:5c:f5:fe:81:1a:d9:63:c3:
                    29:74:fc:09:7a:b0:e4:09:7a:b2:7c:6c:03:32:1c:
                    c7:0a:5c:91:9f:9e:78:34:68:2a:cc:fa:9a:94:8b:
                    76:d2:e1:c4:62:83:cf:2b:8a:97:85:85:20:95:81:
                    34:52:c8:75:00:78:b5:4d:d8:b6:67:8e:43:ca:e1:
                    70:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A9:23:6A:65:DF:9B:8A:ED:AF:69:A7:88:DE:7F:7C:10:16:A8:58
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D637A94ADBA11F18A4EAAE8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.87.0/24
                  45.194.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:79:4d:16:b4:27:f6:20:bd:5b:ea:1c:60:9a:07:9b:3a:39:
         d1:61:bf:24:0b:69:d6:d8:a8:c3:99:a4:81:16:6f:e7:78:d3:
         fa:8f:b6:42:63:07:d8:25:e0:6b:2f:70:58:99:1f:f7:42:14:
         91:fc:c4:96:3e:f4:1f:70:90:12:3d:c1:c3:1e:bb:14:85:e4:
         5e:76:1c:97:2d:aa:f0:35:55:f1:ac:e9:7c:d1:84:a8:4b:cc:
         b8:ed:04:00:2b:55:0a:e3:6b:6a:ea:01:fd:63:5b:ed:dc:91:
         ec:3d:98:de:80:43:0a:57:a8:f0:cc:85:ba:7a:8d:3c:26:c5:
         7a:db:18:69:ef:1e:59:11:61:11:93:e2:ab:67:9a:68:e2:65:
         26:b6:79:6b:5a:aa:db:e1:ca:24:22:d6:f9:9e:7c:e4:34:d7:
         0c:c3:cd:b8:03:b6:84:17:53:7b:52:3d:a8:47:6d:41:79:c4:
         c3:04:b7:5d:28:c2:03:6d:c1:5a:40:79:fe:2e:0d:bf:ff:c8:
         51:7d:64:fc:5b:44:88:14:30:b3:a7:7d:11:98:f0:92:20:e9:
         2d:05:87:0f:0c:d2:33:c0:87:2d:c4:d3:88:c9:52:a8:1a:ed:
         8c:2c:5b:54:39:c6:3c:25:0b:db:5a:eb:db:3a:50:ff:f8:27:
         b5:78:b6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----