Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D7DC0A4B0DF11F19F11C3F1CE1D38B0.roa
File:                     5D7DC0A4B0DF11F19F11C3F1CE1D38B0.roa (raw, json)
Hash identifier:          KiI3Z3YRYU13JUdkRRRXlriQ5+xdQo/MWg5DdLUxUC4=
Subject key identifier:   1F:AC:3D:6B:8D:20:FB:A4:70:DE:46:8E:89:6C:81:8E:5C:A6:C7:74
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D637
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D7DC0A4B0DF11F19F11C3F1CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 08:28:02 +0000
ROA not before:           Tue 15 Sep 2026 08:27:58 +0000
ROA not after:            Sat 24 Oct 2026 08:27:58 +0000
asID:                     136501
IP address blocks:        45.207.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120375 (0x1d637)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 08:27:58 2026 GMT
            Not After : Oct 24 08:27:58 2026 GMT
        Subject: CN=6aa90192-de87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:20:0f:96:68:f7:46:be:4c:e6:e9:d0:da:
                    25:42:a9:aa:eb:fe:ea:60:f6:bf:1c:4e:a8:e2:d3:
                    b3:f8:f0:e5:72:b1:a2:59:7b:79:c0:e8:cb:93:bb:
                    30:dd:d2:1e:05:77:d2:d7:a0:89:06:8d:4b:a7:f9:
                    25:f2:69:cb:c5:5e:9f:fd:09:03:8d:e3:60:c2:34:
                    4c:f4:5a:62:7c:73:e1:58:1f:d0:5d:72:09:37:4f:
                    93:6f:9e:2a:f8:57:24:d1:bb:bc:4a:1b:03:94:73:
                    b3:1f:bf:9a:35:25:6c:94:6d:90:dc:cf:12:7f:f5:
                    9a:f6:61:5a:b4:ea:0b:1e:22:3a:e5:be:95:61:26:
                    65:60:67:fc:18:95:21:1f:1b:75:e9:b7:c7:74:ec:
                    90:b7:2c:a2:86:58:52:e2:4f:c9:a7:3e:ba:3d:37:
                    62:5e:f8:5f:37:8b:bd:f2:a7:a0:99:54:58:52:dd:
                    b8:12:5d:90:3d:bb:18:a2:cc:2f:6f:1b:8a:ac:fc:
                    0d:c1:34:73:24:3c:c1:38:e1:4a:6a:0a:e4:89:d1:
                    73:df:44:29:ea:36:39:91:7b:e7:6c:e3:9d:a6:41:
                    8f:99:c9:e0:ce:f6:74:17:c3:30:09:69:b5:91:68:
                    83:80:a8:a4:55:bb:15:d0:d5:a2:93:5e:10:b5:5a:
                    22:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AC:3D:6B:8D:20:FB:A4:70:DE:46:8E:89:6C:81:8E:5C:A6:C7:74
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5D7DC0A4B0DF11F19F11C3F1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:06:1c:8e:8f:89:ff:52:56:89:55:d6:4f:4e:07:dd:14:39:
         42:93:8c:1b:5d:44:7b:88:65:2f:ee:55:57:52:39:5a:36:b0:
         1b:b0:08:fa:5c:a3:df:4d:38:35:d8:a1:79:35:82:92:8d:fd:
         bf:b9:b4:a4:64:04:59:d5:94:c7:d6:00:d6:52:30:3f:fa:ae:
         45:12:f4:40:27:da:31:df:d3:c7:90:11:d2:d8:56:9f:5c:21:
         0d:94:b2:94:4b:29:33:83:29:71:bf:76:8c:a4:1c:80:d3:52:
         40:b1:c1:c1:2d:21:11:97:dd:fe:bd:f1:61:f8:4e:76:e3:30:
         ba:1e:10:30:ea:13:54:04:99:c6:39:c4:b0:7c:3b:ee:a1:40:
         07:05:c4:98:f4:cc:1d:06:97:36:ed:89:37:c8:c0:c9:c7:61:
         73:a5:8e:75:fe:fa:e4:2a:c8:81:af:ca:a1:0f:41:26:c1:7f:
         67:1f:c1:91:b9:cb:a8:38:ca:64:11:3a:d3:c5:d8:6d:84:6d:
         c5:c1:25:13:14:f3:22:28:cb:be:64:76:7c:ba:b2:e9:71:75:
         e4:0e:d6:f5:fd:b9:75:59:e9:62:fe:c9:52:9b:ce:59:af:d7:
         48:33:74:d2:72:21:d2:de:93:3b:69:ec:73:ae:03:0a:82:0d:
         ce:52:62:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----