Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EC96842C53711F1B3BBC1C6CE1D38B0.roa
File:                     1EC96842C53711F1B3BBC1C6CE1D38B0.roa (raw, json)
Hash identifier:          yeXqzS+mIeTLrbrKmi9sEl7GWXTohYA4HNFY0pULp/M=
Subject key identifier:   6A:19:5A:80:58:15:7F:E7:D8:E4:A9:DA:FF:1B:14:87:69:FA:5B:2B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DCA1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EC96842C53711F1B3BBC1C6CE1D38B0.roa
Signing time:             Sun 11 Oct 2026 05:46:36 +0000
ROA not before:           Sun 11 Oct 2026 05:46:31 +0000
ROA not after:            Wed 18 Nov 2026 05:46:31 +0000
asID:                     197574
IP address blocks:        45.194.66.0/24 maxlen: 24
                          45.198.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122017 (0x1dca1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 11 05:46:31 2026 GMT
            Not After : Nov 18 05:46:31 2026 GMT
        Subject: CN=6acb22bc-1e66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:7e:fb:f5:b5:62:66:33:ef:3e:79:9b:a9:f6:
                    87:37:36:2d:a9:ad:c7:92:44:1d:40:93:ec:af:69:
                    5a:92:6c:2a:fc:b1:47:3f:de:29:3a:60:2a:b7:c8:
                    45:27:b8:eb:2d:41:ee:83:47:52:37:51:a3:f8:a4:
                    95:11:db:82:b5:6e:9e:3c:74:00:6d:95:a3:93:15:
                    07:c6:46:d2:8a:fb:ab:74:d0:aa:39:40:28:c3:05:
                    9c:70:f2:58:97:44:8d:63:63:1d:34:f0:87:96:ec:
                    a6:b2:de:a8:5c:8d:92:8e:21:0b:6a:50:b3:53:a0:
                    17:c4:9c:3b:01:32:12:23:ec:f6:a3:77:cb:3a:6f:
                    c7:e7:37:f5:d2:b9:93:f5:f2:6d:b0:1e:00:e7:60:
                    c6:a8:da:e0:6d:d0:d0:78:db:33:f8:17:98:54:42:
                    01:41:a9:73:80:4d:1c:a7:58:77:d3:24:69:ed:32:
                    cc:d9:c9:b7:e5:4a:00:ec:c6:2f:62:1f:3b:5b:99:
                    1a:d1:c7:59:79:1e:d3:cb:71:23:af:ba:47:c7:be:
                    1b:af:4a:91:e9:f9:e0:b2:07:75:72:ae:93:a5:30:
                    23:13:23:b8:48:c2:a1:4d:99:c0:aa:2d:d8:ea:69:
                    9e:24:02:b0:81:9e:36:16:0c:55:ca:a3:a3:bf:3b:
                    d0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:19:5A:80:58:15:7F:E7:D8:E4:A9:DA:FF:1B:14:87:69:FA:5B:2B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1EC96842C53711F1B3BBC1C6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.66.0/24
                  45.198.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:0b:b2:22:f2:68:8e:8d:b5:25:79:df:19:37:15:5a:d4:7d:
         b5:ea:59:1d:0b:5a:c0:4e:dd:96:42:aa:7e:8b:f5:03:41:f3:
         35:f5:e5:bc:5b:98:ff:e7:bc:5b:f1:a6:b7:18:7c:5d:ab:63:
         49:27:da:26:45:f1:8a:5c:e0:94:37:3c:5a:d5:72:57:7b:48:
         fa:45:c0:af:0e:e1:0b:42:5a:4e:b1:b6:26:a7:46:e7:4d:a3:
         0d:4d:e8:68:d1:38:14:d1:db:fb:06:c5:5c:06:3e:bc:6c:36:
         01:75:db:1f:d5:52:e2:29:b1:47:9a:d5:55:d9:ef:f2:2d:5c:
         24:51:fe:d9:2c:1d:ec:f2:42:f8:3c:09:a9:96:bf:86:d5:f9:
         83:2d:f5:30:8f:b5:40:d1:ae:46:96:c3:16:f7:ed:f5:b4:78:
         a7:46:f3:cd:ad:3d:72:2c:7c:9f:86:93:fd:05:88:fc:39:73:
         86:5f:cc:94:b5:93:19:53:20:9e:9f:d0:e6:d7:f7:b3:d2:e3:
         62:8c:ba:08:8a:28:5b:15:3c:2b:a4:b9:bb:b6:a0:f9:71:07:
         5c:9d:2c:ab:ad:8f:f5:a9:ec:6c:0f:37:3a:07:1c:b9:be:49:
         2a:d4:7e:bb:76:31:07:19:b2:6e:29:b6:7a:9e:bf:6d:75:2c:
         9c:1e:3e:8d
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAdyhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDExMDU0NjMxWhcNMjYxMTE4MDU0NjMxWjAYMRYw
FAYDVQQDEw02YWNiMjJiYy0xZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA9X779bViZjPvPnmbqfaHNzYtqa3HkkQdQJPsr2lakmwq/LFHP94pOmAq
t8hFJ7jrLUHug0dSN1Gj+KSVEduCtW6ePHQAbZWjkxUHxkbSivurdNCqOUAowwWc
cPJYl0SNY2MdNPCHluymst6oXI2SjiELalCzU6AXxJw7ATISI+z2o3fLOm/H5zf1
0rmT9fJtsB4A52DGqNrgbdDQeNsz+BeYVEIBQalzgE0cp1h30yRp7TLM2cm35UoA
7MYvYh87W5ka0cdZeR7Ty3Ejr7pHx74br0qR6fngsgd1cq6TpTAjEyO4SMKhTZnA
qi3Y6mmeJAKwgZ42FgxVyqOjvzvQhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGoZ
WoBYFX/n2OSp2v8bFIdp+lsrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xRUM5Njg0MkM1MzcxMUYxQjNCQkMxQzZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALcJCAwQALcYAMA0GCSqGSIb3
DQEBCwUAA4IBAQA/C7Ii8miOjbUled8ZNxVa1H216lkdC1rATt2WQqp+i/UDQfM1
9eW8W5j/57xb8aa3GHxdq2NJJ9omRfGKXOCUNzxa1XJXe0j6RcCvDuELQlpOsbYm
p0bnTaMNTeho0TgU0dv7BsVcBj68bDYBddsf1VLiKbFHmtVV2e/yLVwkUf7ZLB3s
8kL4PAmplr+G1fmDLfUwj7VA0a5GlsMW9+31tHinRvPNrT1yLHyfhpP9BYj8OXOG
X8yUtZMZUyCen9Dm1/ez0uNijLoIiihbFTwrpLm7tqD5cQdcnSyrrY/1qexsDzc6
Bxy5vkkq1H67djEHGbJuKbZ6nr9tdSycHj6N
-----END CERTIFICATE-----