Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B55660CB50B11F1B7E7E81CCF1D38B0.roa
File:                     1B55660CB50B11F1B7E7E81CCF1D38B0.roa (raw, json)
Hash identifier:          DEFtMkybrfOfjxzfEggn1iIFqjggJb4VLMKOrVk7UOY=
Subject key identifier:   07:1D:39:00:0F:65:8F:3F:B6:C4:21:2C:33:4B:A2:C4:8B:FC:35:F3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D738
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B55660CB50B11F1B7E7E81CCF1D38B0.roa
Signing time:             Sun 20 Sep 2026 15:51:14 +0000
ROA not before:           Sun 20 Sep 2026 15:51:09 +0000
ROA not after:            Tue 27 Oct 2026 15:51:09 +0000
asID:                     11427
IP address blocks:        45.198.188.0/22 maxlen: 24
                          45.203.240.0/22 maxlen: 24
                          45.203.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120632 (0x1d738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 20 15:51:09 2026 GMT
            Not After : Oct 27 15:51:09 2026 GMT
        Subject: CN=6ab000f1-3657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ef:0e:ca:4a:44:b0:a6:0e:44:11:58:84:62:
                    e1:79:32:25:8a:f0:27:74:80:0b:ce:36:cf:01:2d:
                    d2:59:37:81:4e:08:a0:ed:0a:f7:fc:92:a1:85:19:
                    cc:85:9a:96:1e:d7:6e:e0:b6:3a:20:23:c8:72:45:
                    d5:70:3b:d2:3f:6e:a1:09:33:11:71:94:e3:b3:6c:
                    6b:c2:ef:98:a6:e9:c9:d3:26:d5:ea:00:5a:62:02:
                    61:69:9b:aa:20:ed:9d:52:30:fb:a6:48:c3:da:be:
                    a0:fb:0e:62:83:c0:28:09:05:fb:10:c6:8c:ad:62:
                    93:2c:b2:01:50:29:57:54:75:9d:b8:70:9a:bf:db:
                    f4:66:96:c3:f6:0b:64:50:33:d4:16:ae:68:47:47:
                    6d:74:10:ff:5d:f7:bc:46:4f:03:fd:1f:80:7d:35:
                    9e:eb:e0:cc:0b:58:02:14:c8:bc:9b:63:21:1c:9b:
                    25:af:b7:65:31:1a:9e:fe:4f:29:5b:28:82:08:98:
                    1e:51:d3:79:1b:29:37:70:ed:9e:67:50:49:8f:1e:
                    bb:54:eb:ee:1f:a7:de:23:eb:90:3c:12:00:63:b7:
                    39:47:b4:3a:c1:3d:56:9f:2e:fc:24:67:e2:e9:d3:
                    af:96:d6:7f:c8:f1:2d:ef:4c:59:e5:93:9d:d9:19:
                    17:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:1D:39:00:0F:65:8F:3F:B6:C4:21:2C:33:4B:A2:C4:8B:FC:35:F3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B55660CB50B11F1B7E7E81CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.188.0/22
                  45.203.240.0/22
                  45.203.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:d7:86:24:7d:c0:13:27:77:28:b7:78:9d:45:b5:c3:0d:09:
         29:43:e5:2a:1c:be:7a:09:cc:2f:f4:55:f7:55:db:94:42:d4:
         7f:a7:98:f8:3b:66:7c:89:5c:e0:f0:38:8a:03:75:03:34:29:
         f6:27:6a:6d:77:56:d6:81:a8:63:c0:09:69:00:7d:1c:ed:81:
         f0:0e:0b:d9:a9:be:c7:1c:53:f3:7b:b7:7e:e9:5c:a6:52:29:
         b3:b7:38:80:ae:46:50:92:16:c4:20:d6:a2:84:17:82:f9:6a:
         da:f1:e3:05:38:77:4b:04:9f:79:64:5e:09:f9:6f:94:31:03:
         f1:57:e7:64:9c:b3:d8:8b:2e:50:b4:9c:06:79:03:e8:a6:e4:
         bf:6e:29:20:3c:1c:85:49:af:7f:82:79:fe:67:0f:57:f4:36:
         bf:fb:f3:40:d6:a4:b3:82:e0:78:79:70:2c:91:d6:06:cd:28:
         43:5b:30:4d:e4:5a:ba:4d:5c:20:33:ce:82:a3:f5:88:87:9a:
         3d:77:0a:74:6a:07:aa:4d:a9:fd:ed:22:3c:65:05:e5:04:19:
         ad:1e:da:cb:bf:8d:de:05:27:47:b4:c2:77:73:a9:b3:30:30:
         67:b4:4d:ec:6c:fd:2e:40:b2:4d:1c:55:3d:12:7f:9a:18:fb:
         93:9a:04:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----