Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01577728AC2711F1A8A926DACE1D38B0.roa
File:                     01577728AC2711F1A8A926DACE1D38B0.roa (raw, json)
Hash identifier:          C05XgeRhOc/fhbwKfQMMD23PPOuHdOnbD5tQoxC53Z8=
Subject key identifier:   24:A5:AE:78:B9:1D:06:D9:8F:3F:E5:70:9B:BE:6B:4E:11:D5:92:5F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D458
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01577728AC2711F1A8A926DACE1D38B0.roa
Signing time:             Wed 09 Sep 2026 08:18:15 +0000
ROA not before:           Wed 09 Sep 2026 08:18:12 +0000
ROA not after:            Wed 14 Oct 2026 08:18:12 +0000
asID:                     212238
IP address blocks:        45.192.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119896 (0x1d458)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  9 08:18:12 2026 GMT
            Not After : Oct 14 08:18:12 2026 GMT
        Subject: CN=6aa11647-7ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d8:b2:6f:eb:7d:da:d1:07:cd:b4:50:77:d2:
                    64:b6:5c:77:d1:b9:b4:59:3f:0b:34:ca:87:63:40:
                    c2:8e:71:b0:48:25:39:1f:be:f2:11:db:ba:73:06:
                    a5:b7:d0:d9:59:c7:63:dd:1c:d7:e3:2d:96:27:71:
                    7e:1f:6e:9e:3f:23:e3:3b:9e:61:0a:c6:82:a7:63:
                    42:14:8f:1b:9f:5f:f9:2c:39:41:4e:bb:48:d3:95:
                    c5:82:99:8c:56:c4:40:90:97:21:38:5b:aa:bd:1c:
                    4f:eb:72:6a:73:85:c7:01:f9:7f:41:6f:9d:e8:07:
                    95:27:4c:33:bf:b5:40:ed:15:7f:79:fd:d1:bd:c3:
                    d6:69:6d:82:c3:d5:6a:c6:3a:15:09:3d:89:34:98:
                    d0:21:18:b0:08:2f:6d:e8:74:76:02:d6:95:3c:fc:
                    c5:e1:cd:c6:b3:b7:fb:48:46:6d:f8:93:b7:86:3a:
                    03:c6:84:81:90:4f:a2:2b:6f:d5:66:4a:fb:17:39:
                    92:62:a1:d5:44:0a:31:0b:e6:57:50:9c:ec:8e:c8:
                    f0:f2:ac:72:6f:ee:fd:c0:a7:3a:1c:a8:13:dd:18:
                    bd:e0:4c:17:26:ea:63:0a:15:6a:af:93:72:68:7e:
                    0a:f6:0b:a4:c8:41:c6:6b:46:00:55:5a:de:f5:ed:
                    83:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A5:AE:78:B9:1D:06:D9:8F:3F:E5:70:9B:BE:6B:4E:11:D5:92:5F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/01577728AC2711F1A8A926DACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:83:51:bf:b8:51:1e:0d:6f:7a:25:e0:c9:df:c4:42:b1:38:
         dc:35:f4:81:5c:b4:ad:3c:32:d4:97:0f:e2:fe:39:15:40:67:
         d7:2c:d9:c6:a2:f5:40:9d:50:5a:66:d5:9d:bb:b4:fe:db:69:
         ab:50:61:93:2d:d6:e2:d9:0a:cb:78:e3:9c:62:b4:a3:52:e4:
         2a:d7:59:39:d0:db:b9:8f:f6:71:47:98:eb:1f:5b:3b:e2:40:
         5b:27:dc:03:c4:75:b8:3b:5b:74:19:67:8f:93:51:93:3e:b4:
         0d:10:f8:c8:ab:35:29:12:a6:f7:ab:29:3a:47:cf:28:57:e3:
         64:ac:17:3d:98:0b:9f:03:4e:31:6a:57:e7:40:6c:2f:c9:57:
         b0:8b:fe:12:9b:07:fc:81:44:a5:b9:52:0c:d8:ab:52:69:86:
         b4:a7:ff:bc:65:5e:ac:03:d6:99:05:8a:a8:0a:4c:30:0b:39:
         00:e4:52:97:82:ac:a0:57:16:49:00:64:3e:51:ea:80:f2:ef:
         55:49:8d:5f:f4:9e:31:15:2a:ba:cb:68:ef:31:b8:20:10:26:
         2f:61:e8:43:b6:6e:a9:f5:84:78:8f:d9:4c:7f:5c:b8:77:09:
         ec:23:9f:1e:d5:b4:71:77:09:d7:cf:d3:23:cd:8f:a1:9f:a6:
         b3:19:fe:eb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdRYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTA5MDgxODEyWhcNMjYxMDE0MDgxODEyWjAYMRYw
FAYDVQQDEw02YWExMTY0Ny03YWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw9iyb+t92tEHzbRQd9Jktlx30bm0WT8LNMqHY0DCjnGwSCU5H77yEdu6
cwalt9DZWcdj3RzX4y2WJ3F+H26ePyPjO55hCsaCp2NCFI8bn1/5LDlBTrtI05XF
gpmMVsRAkJchOFuqvRxP63Jqc4XHAfl/QW+d6AeVJ0wzv7VA7RV/ef3RvcPWaW2C
w9VqxjoVCT2JNJjQIRiwCC9t6HR2AtaVPPzF4c3Gs7f7SEZt+JO3hjoDxoSBkE+i
K2/VZkr7FzmSYqHVRAoxC+ZXUJzsjsjw8qxyb+79wKc6HKgT3Ri94EwXJupjChVq
r5NyaH4K9gukyEHGa0YAVVre9e2DEwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCSl
rni5HQbZjz/lcJu+a04R1ZJfMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMTU3NzcyOEFDMjcxMUYxQThBOTI2REFDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcD1MA0GCSqGSIb3DQEBCwUA
A4IBAQAbg1G/uFEeDW96JeDJ38RCsTjcNfSBXLStPDLUlw/i/jkVQGfXLNnGovVA
nVBaZtWdu7T+22mrUGGTLdbi2QrLeOOcYrSjUuQq11k50Nu5j/ZxR5jrH1s74kBb
J9wDxHW4O1t0GWePk1GTPrQNEPjIqzUpEqb3qyk6R88oV+NkrBc9mAufA04xalfn
QGwvyVewi/4Smwf8gUSluVIM2KtSaYa0p/+8ZV6sA9aZBYqoCkwwCzkA5FKXgqyg
VxZJAGQ+UeqA8u9VSY1f9J4xFSq6y2jvMbggECYvYehDtm6p9YR4j9lMf1y4dwns
I58e1bRxdwnXz9MjzY+hn6azGf7r
-----END CERTIFICATE-----