Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5530242CA8F211F182F02BF5CE1D38B0.roa
File:                     5530242CA8F211F182F02BF5CE1D38B0.roa (raw, json)
Hash identifier:          ++AknNyO/iPgTK95cGHe2P21PuzLQKjDOO1jc742B2U=
Subject key identifier:   C5:15:2C:3B:66:59:1E:7E:AA:31:F8:C3:F6:82:A1:EB:F4:47:7C:D4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D367
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5530242CA8F211F182F02BF5CE1D38B0.roa
Signing time:             Sat 05 Sep 2026 06:23:39 +0000
ROA not before:           Sat 05 Sep 2026 06:23:35 +0000
ROA not after:            Thu 15 Oct 2026 06:23:35 +0000
asID:                     214941
IP address blocks:        45.195.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119655 (0x1d367)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  5 06:23:35 2026 GMT
            Not After : Oct 15 06:23:35 2026 GMT
        Subject: CN=6a9bb56b-0dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8b:5e:e0:d0:47:68:c3:3f:f2:84:e6:24:bb:
                    97:49:9c:06:1a:e3:87:e7:16:5c:77:f7:ba:3b:0d:
                    ff:f0:0f:45:ea:fd:cc:c1:01:6c:49:41:c8:5a:75:
                    3e:97:d9:d1:a6:ff:d1:44:f9:4c:33:ad:47:68:a0:
                    21:15:dd:c8:f6:f5:47:4c:c7:6d:a9:2c:02:73:64:
                    d8:cf:b4:e1:9e:5f:26:fd:21:b1:e7:79:6a:40:5d:
                    83:0b:d1:ec:12:e1:e3:3e:29:32:01:9d:cf:d0:a7:
                    b0:e0:18:b9:81:36:3b:c0:0b:51:01:0c:5d:d4:87:
                    28:a1:51:26:14:70:5d:f4:76:0f:36:e6:79:3e:fe:
                    dc:19:3b:e7:83:5c:5e:6b:48:9e:37:c5:c6:ca:a0:
                    05:ea:71:d9:31:4d:18:b3:3f:da:bf:e4:68:5f:3f:
                    1b:89:90:4a:ce:94:6c:a1:89:90:c8:04:2a:93:a0:
                    26:5f:61:c0:d8:56:de:fe:2a:d1:45:db:84:b4:83:
                    9d:d7:ff:85:d3:c1:bd:d4:59:52:4a:ef:f1:3e:28:
                    cc:aa:dd:2c:5a:f6:06:3e:15:66:3b:6c:a2:8c:1e:
                    a1:47:00:05:65:87:c1:bb:59:04:ea:75:3f:4a:32:
                    94:f5:83:98:7b:bc:2b:80:76:84:28:d2:77:d9:4c:
                    3e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:15:2C:3B:66:59:1E:7E:AA:31:F8:C3:F6:82:A1:EB:F4:47:7C:D4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5530242CA8F211F182F02BF5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:ac:16:cf:15:86:6d:7b:78:09:82:c1:85:c3:56:0f:50:f0:
         89:cb:0c:02:64:79:6a:76:2a:77:3a:94:1b:ba:b9:4d:9b:30:
         9a:b1:bf:d9:e9:52:a7:82:06:ae:b8:af:bd:2e:7f:c4:83:58:
         bb:9a:06:ea:13:30:4b:25:e0:e5:a2:bc:24:7c:e4:f6:2b:6c:
         b2:a4:c2:20:57:c6:8b:5b:a6:b5:4b:2b:4d:d3:69:0e:d0:83:
         76:97:6e:ac:68:c9:9d:26:c6:f0:7c:c4:6d:cc:8a:31:21:0b:
         8e:02:83:56:1e:27:9d:fd:c6:1a:12:95:f5:59:73:44:be:0c:
         de:1a:9c:1f:45:26:f1:4e:e2:1c:fe:3d:ea:5d:3e:4d:26:6c:
         36:a1:5e:dc:45:9e:95:bc:7a:ff:90:ec:e7:52:9a:94:d0:68:
         77:49:a9:ea:91:8a:49:d4:15:dd:23:86:c0:bf:9d:f1:18:6a:
         06:eb:be:04:7d:c0:c1:3b:78:97:04:d3:fd:4b:93:17:20:41:
         63:ee:19:8c:5e:db:7b:29:79:d2:d2:4f:a1:df:70:e8:3e:96:
         09:d9:1e:ea:c6:06:ae:a1:20:d8:c2:fd:50:88:eb:3e:59:ca:
         23:ca:01:23:d8:54:b8:73:6c:5e:64:74:6d:92:4e:ba:a2:01:
         84:a4:4b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----