Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45F094C6B7EB11F1BA0C3EECCE1D38B0.roa
File:                     45F094C6B7EB11F1BA0C3EECCE1D38B0.roa (raw, json)
Hash identifier:          HH16ajcQFC/3uJk35DK6gLQAxAS5wy2nKTQVEEO/wck=
Subject key identifier:   CB:E6:25:F0:3E:FE:CF:78:DF:E4:1D:9C:4F:E8:9D:70:1A:7A:0A:38
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D88F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45F094C6B7EB11F1BA0C3EECCE1D38B0.roa
Signing time:             Thu 24 Sep 2026 07:40:55 +0000
ROA not before:           Thu 24 Sep 2026 07:40:50 +0000
ROA not after:            Mon 02 Nov 2026 07:40:50 +0000
asID:                     140869
IP address blocks:        156.225.80.0/24 maxlen: 24
                          156.225.81.0/24 maxlen: 24
                          156.225.82.0/24 maxlen: 24
                          156.225.83.0/24 maxlen: 24
                          156.225.84.0/24 maxlen: 24
                          156.225.85.0/24 maxlen: 24
                          156.225.86.0/24 maxlen: 24
                          156.225.87.0/24 maxlen: 24
                          156.225.88.0/24 maxlen: 24
                          156.225.89.0/24 maxlen: 24
                          156.225.90.0/24 maxlen: 24
                          156.225.91.0/24 maxlen: 24
                          156.225.92.0/24 maxlen: 24
                          156.225.93.0/24 maxlen: 24
                          156.225.94.0/24 maxlen: 24
                          156.225.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120975 (0x1d88f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 24 07:40:50 2026 GMT
            Not After : Nov  2 07:40:50 2026 GMT
        Subject: CN=6ab4d407-80fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:41:04:c5:20:be:ae:3c:9d:4c:bc:fb:63:a3:
                    1b:1d:12:b1:d1:4f:1a:ef:7a:b5:a6:f1:c5:6b:3f:
                    1a:06:31:7f:72:6e:34:d9:06:6b:61:1f:28:7c:d4:
                    a8:68:1d:a4:6d:df:05:5b:1d:ce:d2:54:a3:c7:cf:
                    20:5c:ac:f5:f2:00:48:0e:c5:21:2d:58:c6:86:80:
                    4b:2d:28:14:5d:98:b2:2c:91:76:8d:27:ce:48:fe:
                    7b:5f:57:09:a7:13:66:60:aa:d1:14:8d:e2:8e:f0:
                    3d:62:60:5d:42:7a:0a:b2:b1:dd:42:74:91:67:66:
                    a8:97:55:49:c6:b3:14:0f:a5:f8:93:3c:b0:6b:6e:
                    b9:e1:b6:4c:15:88:d3:1f:eb:6e:ac:69:93:a9:82:
                    16:15:13:75:18:06:13:ea:f4:1f:10:82:48:7f:44:
                    09:14:b3:ed:47:d5:f5:46:9b:6e:bc:a7:36:cc:c1:
                    32:37:57:9f:0c:65:08:74:6e:93:4f:2e:78:68:e4:
                    8c:9b:56:bc:8c:bf:5e:de:2c:22:97:6b:0f:9b:f5:
                    67:24:e6:37:75:19:04:b2:95:ad:9f:fa:11:95:63:
                    da:0e:cc:59:5d:da:fd:59:56:53:4d:af:87:ac:47:
                    a4:99:4c:7a:8f:43:89:66:fd:d6:8d:7c:24:b0:f7:
                    c0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E6:25:F0:3E:FE:CF:78:DF:E4:1D:9C:4F:E8:9D:70:1A:7A:0A:38
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45F094C6B7EB11F1BA0C3EECCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:40:5e:f9:7d:38:ad:5d:6e:a5:89:88:0b:37:4f:66:29:da:
         cc:40:10:a5:3a:db:7b:91:07:36:9e:51:03:33:a6:49:52:ef:
         26:da:88:8b:45:7d:2b:ac:cb:fd:4a:cb:e4:b3:04:49:ef:60:
         ae:9f:e9:f8:90:af:42:93:cc:c3:32:f2:71:b3:dd:f1:85:3c:
         53:35:27:5f:14:6c:f7:78:72:a9:20:38:e8:75:a5:ab:0f:50:
         51:be:97:f6:29:94:51:29:c0:bf:99:56:03:0e:86:9d:ec:4f:
         33:56:5e:34:cf:ae:73:51:16:79:6b:59:81:ff:28:0e:a5:3b:
         57:6a:6f:45:03:30:5d:7a:7e:fe:5b:a8:01:15:eb:61:6c:b0:
         38:7f:af:32:66:21:8d:93:fe:1e:5a:9c:9a:ad:64:31:71:37:
         ce:50:91:a2:e4:3e:a8:ef:b7:75:99:28:53:0e:a7:66:41:33:
         37:bb:9e:a2:c8:55:12:46:49:c0:9b:4f:9d:ab:b1:23:aa:2f:
         d1:5f:03:9a:11:ab:f7:d2:d7:af:59:a6:f1:17:ee:1e:0d:6f:
         55:06:5f:d4:ec:56:44:5c:1b:b0:3b:3a:68:88:3e:be:22:b1:
         36:d0:5b:0f:11:ac:7f:cc:20:6a:17:9e:eb:e8:63:ca:71:7e:
         5e:63:5e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----