Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C932128AAE7A11F1BC1D00F7CE1D38B0.roa
File:                     C932128AAE7A11F1BC1D00F7CE1D38B0.roa (raw, json)
Hash identifier:          FbcBHaBNAwtiCBg+Kzeuu6Nyu5T4a8+oiBhmk2B1iOQ=
Subject key identifier:   47:5A:5A:B8:C1:76:ED:18:91:9A:7B:DA:4D:3C:C3:EF:3D:66:99:C5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D57C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C932128AAE7A11F1BC1D00F7CE1D38B0.roa
Signing time:             Sat 12 Sep 2026 07:23:01 +0000
ROA not before:           Sat 12 Sep 2026 07:22:57 +0000
ROA not after:            Mon 02 Nov 2026 07:22:57 +0000
asID:                     149440
IP address blocks:        45.195.69.0/24 maxlen: 24
                          45.195.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120188 (0x1d57c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 12 07:22:57 2026 GMT
            Not After : Nov  2 07:22:57 2026 GMT
        Subject: CN=6aa4fdd5-7357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f1:87:7c:f1:15:ad:f5:53:e7:c4:26:62:0d:
                    79:47:5b:a5:74:f8:73:26:2e:48:2b:31:d5:6f:c7:
                    22:3c:11:e0:9b:cb:04:93:97:4c:d2:31:c3:12:f4:
                    53:e3:95:bc:93:f9:a3:30:5b:3c:95:e4:25:a9:23:
                    b2:06:46:b1:d8:ef:a2:08:0f:99:a2:5d:98:50:2d:
                    83:12:8d:5f:3c:65:6a:83:54:1b:03:5f:50:52:69:
                    34:e8:ca:b0:39:f4:b2:f0:60:d0:24:66:46:19:fc:
                    d6:61:33:43:5b:9e:15:0f:69:00:b1:c4:ec:ba:49:
                    62:d9:c1:79:ce:77:36:a2:c2:4b:f5:53:18:40:8a:
                    fc:0a:36:69:45:1c:b2:d3:18:ea:23:bf:7c:e1:28:
                    6c:e6:1f:7d:d6:1b:c4:1d:ec:08:45:8f:11:a4:46:
                    9f:4d:e8:80:16:d3:9f:4b:f4:86:0a:af:68:06:7e:
                    8b:4a:a5:03:99:0e:24:0c:75:e6:b2:60:c6:fe:ca:
                    65:8e:e4:7e:fb:91:06:77:48:c0:6f:32:4f:0d:de:
                    20:0b:08:9f:e3:5a:2a:8d:5c:10:14:f7:98:0d:72:
                    c6:f1:40:63:eb:f4:02:63:0e:62:9a:9b:5a:98:a8:
                    31:01:ec:bb:db:be:f2:f3:76:0a:c5:a9:19:10:67:
                    36:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5A:5A:B8:C1:76:ED:18:91:9A:7B:DA:4D:3C:C3:EF:3D:66:99:C5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C932128AAE7A11F1BC1D00F7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.69.0/24
                  45.195.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:17:cf:87:c8:48:c4:44:25:b3:5a:00:cf:f7:e5:65:7a:42:
         10:ca:e7:d5:4d:5c:c3:e2:51:82:28:19:e8:01:68:69:08:b0:
         74:fd:16:5a:f1:d1:00:0a:cc:db:48:e7:ff:1d:a1:ea:83:a2:
         c8:16:d4:5a:ab:71:dc:e6:0f:38:82:ca:a2:ef:e8:bd:d3:88:
         e7:cc:b4:32:cc:ea:74:2f:d7:ba:88:86:c1:64:c8:d3:72:61:
         06:35:ce:7d:62:be:a5:91:07:e4:89:29:58:aa:28:1b:53:23:
         1c:ca:2b:5d:7f:38:7d:1a:75:12:bd:45:a2:bf:e7:18:89:b5:
         c2:10:1b:a7:f4:ed:41:4d:d9:f8:8e:ec:3c:74:1a:20:5f:97:
         ef:fa:eb:93:69:8a:06:2c:18:db:11:ed:4c:e5:2a:6e:e3:ff:
         56:29:69:af:b2:42:e9:7a:8d:5b:fe:06:e8:5d:85:db:15:ef:
         61:7b:b7:d0:f1:4f:a8:52:43:65:4f:ed:e1:b4:69:ff:a4:64:
         6a:3b:e3:c2:53:7d:4a:bf:07:27:f7:1f:f4:67:02:c1:00:ce:
         d4:4f:01:e7:63:2b:67:bc:cf:c3:f7:74:8f:9c:4c:72:a9:81:
         97:8d:0a:a9:bc:30:a2:9f:a0:bc:87:e1:8b:ee:83:9d:1c:b9:
         85:78:2c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----