Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/552662CEB0D711F19A0590C1CE1D38B0.roa
File:                     552662CEB0D711F19A0590C1CE1D38B0.roa (raw, json)
Hash identifier:          R3z+dcD0EEUdoYcCWUvhG8sSi0FoxazUhc7T6eRojyQ=
Subject key identifier:   7E:2E:20:32:83:0B:DB:DA:AB:9D:89:BD:42:F2:C5:72:9B:56:F7:9C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D617
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/552662CEB0D711F19A0590C1CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 07:30:32 +0000
ROA not before:           Tue 15 Sep 2026 07:30:28 +0000
ROA not after:            Sat 24 Oct 2026 07:30:28 +0000
asID:                     2914
IP address blocks:        45.195.244.0/23 maxlen: 24
                          45.202.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120343 (0x1d617)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 07:30:28 2026 GMT
            Not After : Oct 24 07:30:28 2026 GMT
        Subject: CN=6aa8f418-1368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:fb:c9:a7:a8:34:92:6e:a0:f9:f6:37:d2:
                    7f:76:ba:0e:17:6f:1f:34:2f:d0:ce:c9:aa:e3:7c:
                    1c:aa:4f:f4:3e:69:58:00:ea:63:d9:b7:8b:dd:c6:
                    89:7d:a0:d9:18:d9:07:ff:a3:11:0e:f9:13:b3:25:
                    2e:5a:5d:9d:14:4b:10:2e:05:34:a7:b0:9d:21:b9:
                    82:e2:8c:80:ba:6d:7a:b6:05:19:77:19:5d:9d:1e:
                    38:10:7e:35:b2:47:9b:05:45:ec:10:1c:d1:50:6d:
                    d1:04:8c:40:59:d7:39:11:dd:41:73:05:a7:ac:e3:
                    76:dc:d4:01:e0:f0:70:fb:ae:26:dc:98:33:12:73:
                    34:e4:77:4b:56:a4:8e:59:09:8a:ce:e6:37:00:82:
                    41:57:ea:00:85:25:e6:91:33:e8:a6:9e:a9:2b:47:
                    5c:bf:ac:6b:23:16:63:84:a9:02:29:8e:2f:dc:2f:
                    de:7b:06:19:04:67:86:96:fc:bb:08:23:9d:c2:c7:
                    e4:dd:50:49:9b:f5:1a:57:6f:f0:65:7f:cc:b9:b9:
                    97:82:fc:f6:c2:4d:e3:ed:99:b0:b3:ef:c7:97:73:
                    76:27:57:97:a8:be:cf:fe:5e:ec:f2:33:ae:05:fa:
                    90:99:cb:7e:e8:ba:06:c8:bf:dc:18:b9:d6:ec:80:
                    74:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2E:20:32:83:0B:DB:DA:AB:9D:89:BD:42:F2:C5:72:9B:56:F7:9C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/552662CEB0D711F19A0590C1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.244.0/23
                  45.202.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:1b:a5:c5:ec:77:d9:7f:35:68:3f:04:83:46:83:a7:8f:27:
         ae:ef:54:7e:a8:72:19:c3:81:7d:1c:dd:8d:02:d0:61:59:8d:
         b9:b1:8a:8e:ac:8a:18:2f:d9:62:fa:2f:d1:33:9d:80:7c:88:
         18:38:e6:90:96:ac:15:3c:a3:66:79:2d:c1:52:31:5a:65:d1:
         89:46:d3:a3:43:96:ef:4d:1f:ea:7d:d2:2e:33:0b:51:60:4d:
         03:3e:14:31:9d:fb:ff:d0:ae:87:70:55:a3:e6:f6:0e:ab:1c:
         71:e6:ad:7c:e5:88:7d:46:a9:79:0d:d8:51:b9:ce:d6:8c:77:
         78:51:6a:57:7b:63:f7:b3:65:95:c5:f2:1a:0c:e7:0a:da:9a:
         ee:39:04:6a:3b:03:2b:26:2a:4f:d6:c9:a4:48:9d:6e:29:5d:
         3a:fa:63:8b:e3:79:73:0b:72:c5:69:2d:94:b3:bf:34:f3:61:
         87:6d:15:3e:e7:b8:8b:3c:28:e5:7f:65:a8:5c:c8:23:83:66:
         eb:c2:59:dc:ca:57:93:6f:7b:a6:64:0a:df:02:46:7e:8a:78:
         38:81:da:60:62:ad:1a:65:2c:af:03:3a:f1:aa:d1:0a:41:8e:
         b0:7e:35:db:cd:92:f7:f7:11:6d:d3:15:d3:f9:ab:de:45:04:
         a4:fb:2e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----