Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2320BC76BF2711F1AFC90217CF1D38B0.roa
File:                     2320BC76BF2711F1AFC90217CF1D38B0.roa (raw, json)
Hash identifier:          UVlh5loNWuOSQ3NHccvQOG108krcknB/+C9aQxeYDGU=
Subject key identifier:   73:4B:89:FB:C0:2C:C8:19:DD:AD:B7:34:24:46:C1:82:20:C5:95:CC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA73
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2320BC76BF2711F1AFC90217CF1D38B0.roa
Signing time:             Sat 03 Oct 2026 12:37:04 +0000
ROA not before:           Sat 03 Oct 2026 12:37:00 +0000
ROA not after:            Sat 07 Nov 2026 12:37:00 +0000
asID:                     211459
IP address blocks:        45.195.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 09:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121459 (0x1da73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  3 12:37:00 2026 GMT
            Not After : Nov  7 12:37:00 2026 GMT
        Subject: CN=6ac0f6f0-cd37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:68:b4:d6:f7:e5:86:91:0f:71:09:7f:a0:6c:
                    7a:66:f4:89:c8:1c:16:88:b6:a2:02:11:c4:1e:aa:
                    cf:9a:14:3f:e7:b3:93:cf:df:bc:6b:01:57:f7:31:
                    f5:84:ec:26:7f:38:87:40:f6:ad:58:52:80:b2:15:
                    ce:60:54:59:fc:75:10:05:7d:04:59:8f:ee:63:3e:
                    25:b3:b3:a0:bd:50:cc:45:44:21:32:1a:11:eb:ff:
                    14:e2:3a:83:04:f2:75:53:e5:73:59:ae:a9:08:31:
                    d9:76:34:40:fe:35:2d:54:3b:94:77:40:cd:72:ae:
                    f0:1e:a7:32:e1:b6:58:84:b1:32:e1:72:10:ff:a9:
                    8e:08:89:66:25:61:54:7e:cc:a2:9b:e9:e2:9d:05:
                    c6:6a:ee:5b:75:1d:94:15:80:0f:06:22:78:a3:9d:
                    3d:33:6d:46:c8:33:b3:fb:e3:c1:79:84:21:ef:a8:
                    b9:05:9c:3e:d6:ba:b2:5c:92:c3:b3:49:bb:0d:55:
                    20:06:11:4e:17:0e:d8:20:3e:86:b4:ce:58:5f:e9:
                    8a:e2:4a:1c:2a:72:1f:af:06:6a:2b:af:c4:10:7e:
                    a3:08:df:52:11:a5:38:d7:90:86:32:0f:c8:f0:0e:
                    bb:04:98:64:73:5e:01:25:4f:07:de:f8:1b:e2:ce:
                    04:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4B:89:FB:C0:2C:C8:19:DD:AD:B7:34:24:46:C1:82:20:C5:95:CC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2320BC76BF2711F1AFC90217CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:9b:80:ba:8d:29:22:71:f3:ee:86:79:58:5a:c6:6f:e2:dc:
         2b:52:b2:e1:dc:58:52:4b:32:72:fc:4d:8b:a9:bb:68:83:ec:
         bf:c9:7a:62:b0:7c:5c:22:7a:a8:26:f9:d9:aa:5b:75:bf:29:
         0b:15:76:c6:5e:cc:41:7f:5a:7e:bb:c9:bb:b8:e4:e0:c7:a2:
         1e:f9:0d:65:39:f8:31:9a:a5:44:4e:3e:19:8a:b2:7e:c6:83:
         f1:ba:4e:d3:af:9a:58:a6:e1:24:13:8a:95:d4:b9:44:85:af:
         f4:2d:e1:52:bf:0c:85:fb:fa:75:7f:48:09:3e:52:e4:31:dc:
         98:31:a6:ae:7c:58:82:aa:f6:10:37:41:dc:22:e2:5c:52:89:
         b0:54:f8:54:0f:8e:59:25:26:7c:f2:c9:2b:70:15:f2:34:3d:
         96:a1:e8:2b:d0:d9:62:77:1c:eb:d6:32:66:f9:ca:17:d2:1e:
         61:65:03:83:a2:1e:79:d3:f9:1c:d7:af:e7:8c:82:1c:63:d1:
         db:2a:5a:ad:32:2a:19:74:ad:ff:06:ed:ef:d7:88:95:ac:39:
         18:68:0f:f2:2e:70:b0:5c:1f:3b:9f:0f:bb:2c:03:fc:e2:ad:
         26:5a:0e:d5:f8:50:67:b6:02:c7:f1:b0:a1:ca:27:df:7b:18:
         a5:f6:0f:94
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdpzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDAzMTIzNzAwWhcNMjYxMTA3MTIzNzAwWjAYMRYw
FAYDVQQDEw02YWMwZjZmMC1jZDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtWi01vflhpEPcQl/oGx6ZvSJyBwWiLaiAhHEHqrPmhQ/57OTz9+8awFX
9zH1hOwmfziHQPatWFKAshXOYFRZ/HUQBX0EWY/uYz4ls7OgvVDMRUQhMhoR6/8U
4jqDBPJ1U+VzWa6pCDHZdjRA/jUtVDuUd0DNcq7wHqcy4bZYhLEy4XIQ/6mOCIlm
JWFUfsyim+ninQXGau5bdR2UFYAPBiJ4o509M21GyDOz++PBeYQh76i5BZw+1rqy
XJLDs0m7DVUgBhFOFw7YID6GtM5YX+mK4kocKnIfrwZqK6/EEH6jCN9SEaU415CG
Mg/I8A67BJhkc14BJU8H3vgb4s4E7QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHNL
ifvALMgZ3a23NCRGwYIgxZXMMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yMzIwQkM3NkJGMjcxMUYxQUZDOTAyMTdDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcP7MA0GCSqGSIb3DQEBCwUA
A4IBAQCfm4C6jSkicfPuhnlYWsZv4twrUrLh3FhSSzJy/E2Lqbtog+y/yXpisHxc
InqoJvnZqlt1vykLFXbGXsxBf1p+u8m7uOTgx6Ie+Q1lOfgxmqVETj4ZirJ+xoPx
uk7Tr5pYpuEkE4qV1LlEha/0LeFSvwyF+/p1f0gJPlLkMdyYMaaufFiCqvYQN0Hc
IuJcUomwVPhUD45ZJSZ88skrcBXyND2Woegr0Nlidxzr1jJm+coX0h5hZQODoh55
0/kc16/njIIcY9HbKlqtMioZdK3/Bu3v14iVrDkYaA/yLnCwXB87nw+7LAP84q0m
Wg7V+FBntgLH8bChyiffexil9g+U
-----END CERTIFICATE-----