Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/000BA664C92D11F19462171ACF1D38B0.roa
File:                     000BA664C92D11F19462171ACF1D38B0.roa (raw, json)
Hash identifier:          BIsxxtb6O6vYnj6dc+FH9vMxNPRBL321JNVtsUs3UIA=
Subject key identifier:   C3:CE:98:FD:2C:36:3D:B6:1E:73:1C:3A:C4:6D:F5:E7:A6:A0:DA:5D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DDC8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/000BA664C92D11F19462171ACF1D38B0.roa
Signing time:             Fri 16 Oct 2026 06:44:14 +0000
ROA not before:           Fri 16 Oct 2026 06:44:09 +0000
ROA not after:            Sun 15 Nov 2026 06:44:09 +0000
asID:                     147176
IP address blocks:        45.195.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122312 (0x1ddc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 16 06:44:09 2026 GMT
            Not After : Nov 15 06:44:09 2026 GMT
        Subject: CN=6ad1c7be-9446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:83:55:59:ed:bf:42:30:1b:98:a6:b1:de:72:
                    14:88:c2:3f:19:f6:8a:68:40:ee:61:b2:5f:27:33:
                    2b:ad:f8:da:21:bd:6e:f6:c6:b8:c6:3a:07:c3:22:
                    8d:56:bb:1a:0d:5d:16:80:44:04:9c:ee:07:15:87:
                    d0:40:58:80:5a:ef:d8:3a:d1:e0:fd:c1:e8:15:12:
                    f9:8c:84:65:6d:bd:57:44:2f:f2:a8:88:f7:5b:02:
                    ac:a6:f4:f3:60:9e:08:f0:1f:b2:57:ea:a6:41:98:
                    a9:7c:51:31:6c:fb:2f:c8:b4:19:d9:a7:a6:4b:bb:
                    b1:93:da:9e:20:a2:5f:28:72:c4:c4:e8:bf:b7:21:
                    f4:2c:f7:f2:c7:09:3d:eb:9b:18:7f:f9:0d:60:08:
                    30:02:7f:d4:41:6d:0b:89:fb:0c:b7:6b:77:e0:ca:
                    87:9b:d8:ac:f1:25:6f:ba:dc:08:2b:2d:aa:68:5e:
                    11:8e:dc:d3:d0:49:b8:48:19:91:1c:50:65:a1:ba:
                    cf:af:ba:7c:66:d6:06:8c:17:1b:35:1a:37:b2:12:
                    e8:18:b0:ab:ce:6b:b0:20:28:5b:a5:db:a4:4d:b9:
                    96:88:07:e5:a4:3b:79:89:06:2c:10:c9:ea:74:18:
                    e0:6f:d3:ef:5f:61:83:67:31:b6:3b:e4:83:ab:a2:
                    91:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CE:98:FD:2C:36:3D:B6:1E:73:1C:3A:C4:6D:F5:E7:A6:A0:DA:5D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/000BA664C92D11F19462171ACF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:b7:15:82:d5:ce:63:e3:b7:7b:d1:f2:0b:7e:00:1a:d3:a1:
         29:5d:68:3e:2b:17:16:3e:ea:ab:bf:15:6c:37:14:9c:7f:7c:
         aa:a5:41:08:4b:39:b1:7e:3c:c7:fb:a0:43:01:62:14:7e:2b:
         5f:f9:b1:34:dd:08:f6:ed:9e:2d:e5:28:32:08:49:bf:4a:6c:
         10:17:03:b5:7b:dc:1a:a1:ed:a4:39:76:a6:b9:f5:3a:00:ba:
         b4:09:e2:49:ad:ca:d4:45:13:6b:39:80:6b:f1:c9:e2:b6:7b:
         16:49:1b:d7:42:4e:4a:ae:1d:63:c0:f6:15:19:92:f3:1f:46:
         e4:72:cd:11:bb:d2:19:56:61:cf:a1:e8:42:fd:68:52:a2:6d:
         90:1e:49:ca:03:65:3e:2e:ee:b9:be:9c:bd:e6:c4:96:a1:e9:
         dc:73:d1:38:d9:0f:6e:d0:f4:e8:d5:b5:3d:4e:f3:fc:38:b5:
         9c:2a:61:fb:83:99:53:2f:5e:46:c7:29:c9:c2:16:d9:2e:30:
         8c:e4:b1:df:aa:cd:83:12:8f:ef:65:5b:1a:dd:22:1c:83:b8:
         d7:be:58:90:f9:4b:c3:ed:85:b5:74:33:f6:7d:ba:12:48:0e:
         83:d4:67:16:a4:53:70:c0:eb:f7:8f:6e:40:04:aa:22:f3:1e:
         fa:74:67:90
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAd3IMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDE2MDY0NDA5WhcNMjYxMTE1MDY0NDA5WjAYMRYw
FAYDVQQDEw02YWQxYzdiZS05NDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0INVWe2/QjAbmKax3nIUiMI/GfaKaEDuYbJfJzMrrfjaIb1u9sa4xjoH
wyKNVrsaDV0WgEQEnO4HFYfQQFiAWu/YOtHg/cHoFRL5jIRlbb1XRC/yqIj3WwKs
pvTzYJ4I8B+yV+qmQZipfFExbPsvyLQZ2aemS7uxk9qeIKJfKHLExOi/tyH0LPfy
xwk965sYf/kNYAgwAn/UQW0LifsMt2t34MqHm9is8SVvutwIKy2qaF4RjtzT0Em4
SBmRHFBlobrPr7p8ZtYGjBcbNRo3shLoGLCrzmuwIChbpdukTbmWiAflpDt5iQYs
EMnqdBjgb9PvX2GDZzG2O+SDq6KRRQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMPO
mP0sNj22HnMcOsRt9eemoNpdMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMDBCQTY2NEM5MkQxMUYxOTQ2MjE3MUFDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcOYMA0GCSqGSIb3DQEBCwUA
A4IBAQCNtxWC1c5j47d70fILfgAa06EpXWg+KxcWPuqrvxVsNxScf3yqpUEISzmx
fjzH+6BDAWIUfitf+bE03Qj27Z4t5SgyCEm/SmwQFwO1e9waoe2kOXamufU6ALq0
CeJJrcrURRNrOYBr8cnitnsWSRvXQk5Krh1jwPYVGZLzH0bkcs0Ru9IZVmHPoehC
/WhSom2QHknKA2U+Lu65vpy95sSWoencc9E42Q9u0PTo1bU9TvP8OLWcKmH7g5lT
L15GxynJwhbZLjCM5LHfqs2DEo/vZVsa3SIcg7jXvliQ+UvD7YW1dDP2fboSSA6D
1GcWpFNwwOv3j25ABKoi8x76dGeQ
-----END CERTIFICATE-----