Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD24E88AB0EE11F18C6FBACCCE1D38B0.roa
File:                     AD24E88AB0EE11F18C6FBACCCE1D38B0.roa (raw, json)
Hash identifier:          ui0kXAlBcgsylOagryz6sMOLYMOOpZDDRX4x7p+oYOs=
Subject key identifier:   1F:27:5A:74:28:A8:73:7E:C2:EE:B4:08:9D:BD:08:19:B6:CD:C9:F4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D659
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD24E88AB0EE11F18C6FBACCCE1D38B0.roa
Signing time:             Tue 15 Sep 2026 10:17:38 +0000
ROA not before:           Tue 15 Sep 2026 10:17:34 +0000
ROA not after:            Wed 14 Oct 2026 10:17:34 +0000
asID:                     402289
IP address blocks:        45.197.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120409 (0x1d659)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 10:17:34 2026 GMT
            Not After : Oct 14 10:17:34 2026 GMT
        Subject: CN=6aa91b42-103e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1d:7a:ba:bb:c4:2c:f6:86:6d:6b:a0:32:fb:
                    45:31:b9:16:8b:17:50:69:d3:c9:af:e5:b1:1a:26:
                    bc:6a:6e:1e:e3:a6:ec:f8:e2:4b:ca:9b:bf:65:56:
                    a1:8e:f4:ab:72:8c:23:50:16:b5:13:9a:71:5d:91:
                    1b:a7:9c:1c:02:23:8c:b6:ab:7f:d6:41:83:10:48:
                    6f:80:2b:3e:09:33:33:eb:c1:e8:51:bf:3f:a8:68:
                    6d:bd:31:4c:36:cf:7c:69:23:d3:1e:79:d3:59:0a:
                    ba:a1:73:28:b9:35:f8:65:d6:be:53:78:01:dc:d3:
                    20:31:06:cf:59:ce:0c:62:f8:0b:73:cb:26:ce:d1:
                    5e:3e:41:ef:af:d8:0b:83:b9:82:53:19:a8:23:b7:
                    21:dc:fe:3a:0b:db:43:08:f6:c8:91:df:1e:10:d3:
                    40:b6:23:ee:8c:15:98:8d:ed:58:a1:db:da:64:55:
                    99:bc:09:8a:1a:3a:4f:d1:e8:49:21:97:43:df:8c:
                    fc:bf:ba:a6:88:a7:a7:2d:09:7a:65:0b:4a:02:2f:
                    87:39:5f:57:91:2f:20:8d:bd:2f:40:e8:e8:aa:dd:
                    57:85:72:30:4a:a8:3f:8d:b6:96:07:2d:20:ee:e8:
                    78:1e:b7:d0:d8:0e:3a:d7:da:84:4f:32:a6:13:ce:
                    38:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:27:5A:74:28:A8:73:7E:C2:EE:B4:08:9D:BD:08:19:B6:CD:C9:F4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD24E88AB0EE11F18C6FBACCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:e0:2c:17:66:15:2a:98:d0:0f:1e:ca:3f:e8:4f:73:14:77:
         72:ba:e8:ed:5d:15:aa:e7:be:a8:d8:30:a5:ff:3f:08:5f:94:
         78:52:e1:00:85:a1:9a:9f:9e:29:ae:9e:c0:b2:2e:07:d5:0b:
         45:7c:1f:d7:7b:08:92:ef:ee:55:24:d5:e9:4c:86:d2:77:c6:
         3b:9c:7c:84:85:03:b4:4c:fc:d7:cd:f2:5b:ee:ba:6c:3a:ab:
         be:03:07:28:44:37:b1:b5:ba:52:91:ec:9a:18:de:81:e0:3a:
         cd:d2:08:74:06:70:74:e5:b3:96:39:5f:b8:b0:a4:98:cf:94:
         5c:39:fc:b8:ed:25:43:eb:a7:65:7a:03:d9:26:5b:f1:a6:2d:
         8e:44:f2:34:8e:10:ac:23:81:38:95:e6:35:e6:d8:35:3c:5f:
         a2:45:55:4a:86:f2:59:6f:f3:48:9a:44:9a:e0:67:78:e8:a3:
         88:96:1a:fc:84:ce:55:31:2d:e1:9c:7a:bd:91:c9:a0:3a:6d:
         57:12:f8:a5:18:0b:c2:67:61:7e:07:42:0d:ba:39:75:cd:c5:
         59:2e:d5:62:e9:8b:86:31:66:05:a7:37:1d:b4:91:9a:a0:c6:
         d9:d0:ab:3d:e3:de:83:b6:d6:59:13:15:42:f3:3d:7a:6d:70:
         d5:88:30:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----