Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/186F18708F1D11F1A1605CA8CE1D38B0.roa
File:                     186F18708F1D11F1A1605CA8CE1D38B0.roa (raw, json)
Hash identifier:          ZqhDJfr9Pz+qn2KmMnwN0Sj+38a8QOiYuh2rMcUj8Vk=
Subject key identifier:   83:BF:21:E7:11:C8:3B:B7:74:69:5E:48:7A:A9:77:C2:BA:C7:99:22
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C983
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/186F18708F1D11F1A1605CA8CE1D38B0.roa
Signing time:             Mon 03 Aug 2026 09:24:15 +0000
ROA not before:           Mon 03 Aug 2026 09:24:12 +0000
ROA not after:            Mon 14 Sep 2026 09:24:12 +0000
asID:                     141718
IP address blocks:        45.194.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117123 (0x1c983)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  3 09:24:12 2026 GMT
            Not After : Sep 14 09:24:12 2026 GMT
        Subject: CN=6a705e3f-78bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0f:31:a6:30:69:68:50:7c:95:4a:8e:38:f4:
                    97:ac:00:80:cf:1d:d9:17:45:f2:f8:77:e9:66:69:
                    82:9f:ed:9d:19:74:29:49:32:93:9d:26:00:0e:16:
                    49:29:c7:91:76:67:8f:a2:c1:6c:80:fa:1c:66:ba:
                    3b:c7:1b:a5:0b:c4:a2:9d:23:b0:70:5f:70:56:95:
                    82:33:82:f1:48:21:13:e7:93:ac:16:53:f7:b9:97:
                    f4:a8:96:aa:e9:a3:9d:1b:57:3c:57:fe:97:58:fa:
                    c5:08:3a:68:cb:29:f3:dc:c3:5f:b1:46:0d:f4:cf:
                    88:8f:2f:27:5e:80:eb:3b:fd:0d:47:71:6c:06:48:
                    50:56:24:a0:43:1a:90:e8:5f:5e:47:dc:84:a4:8a:
                    f9:a5:3a:71:ed:f1:25:22:c4:70:07:87:6d:56:b0:
                    24:17:e6:c0:44:02:dd:8d:11:9c:43:85:55:e7:e0:
                    5d:c1:c3:1b:48:63:39:56:c3:65:43:66:5b:3e:bc:
                    ae:78:5d:34:38:ed:09:13:00:e3:0d:ab:0a:3e:e8:
                    14:fd:be:d4:6a:b1:87:1d:55:38:10:0d:ee:66:19:
                    36:aa:f0:e1:dc:c0:05:3f:74:1b:2e:c0:4b:d1:48:
                    b8:1d:72:52:2d:80:82:4d:13:53:d6:f9:4b:09:43:
                    44:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BF:21:E7:11:C8:3B:B7:74:69:5E:48:7A:A9:77:C2:BA:C7:99:22
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/186F18708F1D11F1A1605CA8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:72:0f:76:de:92:99:96:ae:b7:e1:2f:e6:5d:9d:bf:8c:fc:
         a5:14:c7:18:c0:ac:3f:91:f8:bd:30:5a:89:2e:ec:42:bb:f4:
         e1:8b:e2:96:c2:49:4c:67:30:25:19:fa:b1:f0:57:f3:fc:d5:
         a3:28:4c:fb:a1:d2:ba:15:13:12:e3:1b:a3:25:86:a6:75:16:
         ad:fc:e7:0f:22:0e:ab:78:82:28:44:e7:6c:86:ac:dd:c1:02:
         79:8c:e3:d5:2a:19:ab:21:4d:c7:b3:ee:34:42:b8:32:9d:b4:
         74:ab:84:0a:f0:81:ca:fb:ac:d5:36:fb:b9:c0:1b:65:42:d7:
         bb:af:1c:44:4b:dd:72:18:5b:e0:ac:b6:e5:74:20:41:41:16:
         89:d9:f3:86:86:ad:3e:ce:c9:0c:1e:de:d8:6f:54:ae:7d:09:
         f5:0e:ef:c2:a1:24:b6:43:73:b6:a5:fe:d1:55:38:ac:22:34:
         c2:c9:cd:57:4c:0e:81:2a:e7:54:a9:03:ba:a9:81:27:88:5c:
         bb:26:74:62:1e:37:f4:e7:3e:0e:40:df:bf:17:0d:dc:8b:55:
         56:aa:38:fa:72:31:7b:52:02:c9:b0:c8:94:b2:01:8d:dd:84:
         93:7d:ad:97:ce:15:24:6b:d1:5a:ef:d9:5d:cf:d3:a7:e2:ad:
         1f:e6:dd:ce
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcmDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODAzMDkyNDEyWhcNMjYwOTE0MDkyNDEyWjAYMRYw
FAYDVQQDEw02YTcwNWUzZi03OGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoA8xpjBpaFB8lUqOOPSXrACAzx3ZF0Xy+HfpZmmCn+2dGXQpSTKTnSYA
DhZJKceRdmePosFsgPocZro7xxulC8SinSOwcF9wVpWCM4LxSCET55OsFlP3uZf0
qJaq6aOdG1c8V/6XWPrFCDpoyynz3MNfsUYN9M+Ijy8nXoDrO/0NR3FsBkhQViSg
QxqQ6F9eR9yEpIr5pTpx7fElIsRwB4dtVrAkF+bARALdjRGcQ4VV5+BdwcMbSGM5
VsNlQ2ZbPryueF00OO0JEwDjDasKPugU/b7UarGHHVU4EA3uZhk2qvDh3MAFP3Qb
LsBL0Ui4HXJSLYCCTRNT1vlLCUNEHwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIO/
IecRyDu3dGleSHqpd8K6x5kiMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xODZGMTg3MDhGMUQxMUYxQTE2MDVDQThDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcJWMA0GCSqGSIb3DQEBCwUA
A4IBAQAMcg923pKZlq634S/mXZ2/jPylFMcYwKw/kfi9MFqJLuxCu/Thi+KWwklM
ZzAlGfqx8Ffz/NWjKEz7odK6FRMS4xujJYamdRat/OcPIg6reIIoROdshqzdwQJ5
jOPVKhmrIU3Hs+40QrgynbR0q4QK8IHK+6zVNvu5wBtlQte7rxxES91yGFvgrLbl
dCBBQRaJ2fOGhq0+zskMHt7Yb1SufQn1Du/CoSS2Q3O2pf7RVTisIjTCyc1XTA6B
KudUqQO6qYEniFy7JnRiHjf05z4OQN+/Fw3ci1VWqjj6cjF7UgLJsMiUsgGN3YST
fa2XzhUka9Fa79ldz9On4q0f5t3O
-----END CERTIFICATE-----