Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BBFA3CAB19D11F1B3B166F5CE1D38B0.roa
File:                     7BBFA3CAB19D11F1B3B166F5CE1D38B0.roa (raw, json)
Hash identifier:          nJK5RzBJTfIeIXJfy0svzclQuq3+M2nTyxeOiMP+IPk=
Subject key identifier:   46:67:6C:9B:44:EA:DD:76:69:B1:E0:A4:4C:C0:B5:27:50:D2:6D:FD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D68E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BBFA3CAB19D11F1B3B166F5CE1D38B0.roa
Signing time:             Wed 16 Sep 2026 07:08:57 +0000
ROA not before:           Wed 16 Sep 2026 07:08:52 +0000
ROA not after:            Fri 06 Nov 2026 07:08:52 +0000
asID:                     274320
IP address blocks:        45.194.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120462 (0x1d68e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 16 07:08:52 2026 GMT
            Not After : Nov  6 07:08:52 2026 GMT
        Subject: CN=6aaa4089-f99d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c8:a4:af:66:ab:bb:e2:09:4e:fe:7c:b2:74:
                    e9:1c:6a:a3:9d:ae:5f:5b:4d:0d:be:6d:b7:de:f7:
                    6a:78:0f:d1:d2:00:d1:c3:c0:ac:19:93:bd:3a:59:
                    31:d4:74:1f:29:b9:43:53:6e:44:f4:6d:5f:0a:93:
                    84:2f:3b:1a:24:27:4f:41:79:f9:89:a3:20:ac:2f:
                    9d:6a:49:9f:f6:9b:36:05:ff:3a:e1:fd:75:ae:37:
                    06:93:9b:6f:6f:6e:98:d4:2e:3e:ba:95:d7:ea:a8:
                    67:d9:2a:92:87:fa:ed:c9:31:a0:10:4d:40:fa:f9:
                    79:78:cc:5e:d0:0a:73:03:1f:7f:f5:f4:74:d7:43:
                    c1:8a:67:87:f2:57:61:27:09:89:a0:ce:3c:fb:3b:
                    bc:f0:43:71:3f:e4:72:43:c2:5e:1e:33:b3:27:60:
                    33:ed:d8:e3:f5:3d:f3:e1:0a:14:f6:2b:92:3b:98:
                    f4:80:db:a5:c3:de:b6:26:85:65:68:de:bd:d7:9d:
                    23:77:ec:05:17:11:05:ce:f4:51:e0:93:cc:3f:07:
                    69:de:4f:8a:d0:2a:8b:30:ae:9d:2f:2a:e0:63:cb:
                    85:17:f5:60:1a:cb:09:1e:50:82:c8:bb:c8:1c:e3:
                    c3:38:72:0b:b6:f8:77:fa:c7:36:47:4f:95:cc:fb:
                    5f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:67:6C:9B:44:EA:DD:76:69:B1:E0:A4:4C:C0:B5:27:50:D2:6D:FD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BBFA3CAB19D11F1B3B166F5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:2e:c2:84:c9:18:6f:6a:1c:41:c1:30:04:ec:15:1b:f3:4a:
         52:27:3d:80:19:63:1e:a1:d2:dd:5e:d4:72:a0:c3:89:05:68:
         2b:88:d6:d3:ce:1e:15:3b:a3:dc:0f:58:a6:9e:b5:f7:65:f4:
         36:6f:b2:18:54:de:91:32:a6:a4:f4:df:96:54:1d:88:48:82:
         07:95:cd:bf:62:d9:ea:0d:7b:a1:79:ff:f5:b1:b7:e6:87:03:
         1a:0a:26:ec:cd:03:74:1e:6e:6d:3b:7e:09:7a:19:41:63:69:
         58:31:7d:5b:26:cf:ab:cf:39:4e:0d:d9:76:1b:10:05:e8:24:
         ef:fd:dd:1e:f8:b4:90:ac:cb:f9:b8:45:f4:8d:07:87:9b:ab:
         89:48:22:76:ce:9d:22:b5:4d:cd:06:93:f8:4d:49:18:63:ce:
         bc:96:ef:58:e4:58:9c:c7:55:5d:6d:f1:2f:ef:18:ec:ab:ab:
         a0:bc:fc:be:9d:33:8c:45:fe:8a:e9:74:67:11:21:9a:04:32:
         f8:51:ab:87:c9:a2:2b:0d:5c:48:80:00:fe:b7:da:5f:0c:0d:
         82:e8:0f:91:65:d7:8f:6f:fc:fe:15:19:fc:a5:7d:2b:03:7e:
         03:42:f2:8c:1a:31:cf:f2:59:11:9e:36:23:2b:0c:65:c7:dc:
         e9:8d:af:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----