Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54CE9AE6AB6211F1B09AF7B1CE1D38B0.roa
File:                     54CE9AE6AB6211F1B09AF7B1CE1D38B0.roa (raw, json)
Hash identifier:          9Louc+5tov5IrVc+KwEY9Fg1kcVUwcsPtpvubnQRg1U=
Subject key identifier:   25:0C:73:42:92:81:8D:1C:67:5A:B9:9B:4C:EC:1B:91:E4:C6:A8:63
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D3DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54CE9AE6AB6211F1B09AF7B1CE1D38B0.roa
Signing time:             Tue 08 Sep 2026 08:50:25 +0000
ROA not before:           Tue 08 Sep 2026 08:50:21 +0000
ROA not after:            Fri 16 Oct 2026 08:50:21 +0000
asID:                     43260
IP address blocks:        45.195.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119773 (0x1d3dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  8 08:50:21 2026 GMT
            Not After : Oct 16 08:50:21 2026 GMT
        Subject: CN=6a9fcc50-5046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ea:53:e4:89:08:05:5e:7b:f5:fb:0c:18:93:
                    84:a6:80:40:c8:90:9c:76:55:96:8c:d7:38:6f:11:
                    30:bb:ec:6d:ee:69:53:33:49:3b:41:46:c7:2d:30:
                    ab:95:71:a0:e0:86:c3:b9:d6:ac:1d:2d:ef:5e:1a:
                    63:b6:f6:a2:48:28:f0:35:fe:84:9a:a8:b3:3b:0a:
                    ca:b2:a2:36:b6:12:bb:aa:12:87:64:c4:6c:d8:e4:
                    cc:28:9c:dd:9f:71:79:72:74:90:33:10:a8:e9:d7:
                    3a:d4:b3:a7:59:e0:34:5d:16:55:05:6c:cc:26:46:
                    18:e9:b1:e3:8c:ff:a1:6a:1f:43:e5:19:e6:fb:b0:
                    0f:88:67:ca:0a:bf:ac:8b:5f:3d:da:01:9a:1d:03:
                    b7:8e:6e:f0:cf:51:08:08:6c:a8:18:4c:95:05:24:
                    79:6d:a2:40:d8:f0:3e:56:70:3b:9c:42:1f:96:c6:
                    b2:5c:96:a6:f8:8a:6d:fb:94:3c:49:0b:2b:3a:c7:
                    a9:b6:49:e8:05:18:f0:87:1c:0f:e5:25:ca:e9:42:
                    1a:71:0f:08:1b:99:67:d5:45:e3:3e:7e:f7:72:15:
                    b6:22:56:8d:29:12:02:e2:6d:80:38:86:ba:27:95:
                    d5:6e:59:ac:ee:a2:f2:07:c6:85:ea:91:19:a4:13:
                    f2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0C:73:42:92:81:8D:1C:67:5A:B9:9B:4C:EC:1B:91:E4:C6:A8:63
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54CE9AE6AB6211F1B09AF7B1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:8e:f7:9f:50:58:7a:58:b9:b8:30:5f:e7:ec:29:75:41:81:
         a5:2f:58:49:f5:fc:2a:71:1c:15:4a:c3:97:f3:82:8f:1e:d7:
         4d:43:96:38:6b:fb:fd:3a:0c:74:e3:76:24:77:0e:98:60:c1:
         ef:c1:bb:a4:e6:57:6f:e0:c6:d4:1b:07:84:f3:3f:41:3a:5d:
         60:1f:4d:7e:f5:15:05:a0:3c:85:ab:e2:8d:b1:31:ad:13:88:
         ac:43:57:60:ca:83:e9:14:4e:1f:1c:20:ce:80:e2:69:f3:11:
         64:84:ea:a6:53:2e:93:da:e0:07:81:3c:30:02:63:12:9b:4c:
         79:88:34:93:84:ae:6e:94:dd:96:c7:33:4e:6c:1c:82:23:eb:
         dc:84:9d:90:7f:26:32:15:93:ad:36:d0:0d:e0:d6:4b:33:64:
         90:41:11:37:ec:16:7b:0a:db:30:cc:8a:da:d1:05:aa:f2:a1:
         e6:09:6b:8e:82:22:cf:be:bc:75:a7:2a:c4:08:b3:83:f9:d3:
         f1:a6:cb:07:5d:b3:46:7a:62:98:1f:9d:bb:2e:5d:26:5e:0d:
         3c:e4:1a:18:75:62:2e:b7:aa:68:41:a7:28:f0:6e:ff:68:d4:
         5e:8b:d5:4f:b5:33:83:31:ba:48:26:ee:16:21:10:26:08:85:
         ad:ec:b5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----