Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EAA6AF0CD2E11F18C8F0CBBCE1D38B0.roa
File:                     2EAA6AF0CD2E11F18C8F0CBBCE1D38B0.roa (raw, json)
Hash identifier:          X9e4hda4peJnbhb5KWCFCf2c0US9ap6IgSrFgL4FZfE=
Subject key identifier:   14:5F:BC:1E:20:BD:AC:55:A7:74:8F:48:4E:6D:A2:18:98:7C:6B:08
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DF5E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EAA6AF0CD2E11F18C8F0CBBCE1D38B0.roa
Signing time:             Wed 21 Oct 2026 09:02:46 +0000
ROA not before:           Wed 21 Oct 2026 09:02:42 +0000
ROA not after:            Tue 05 Oct 2027 09:02:42 +0000
asID:                     40115
IP address blocks:        45.194.16.0/21 maxlen: 24
                          45.194.16.0/22 maxlen: 24
                          45.194.16.0/23 maxlen: 24
                          45.194.16.0/24 maxlen: 24
                          45.194.17.0/24 maxlen: 24
                          45.194.20.0/22 maxlen: 24
                          45.194.20.0/23 maxlen: 24
                          45.194.20.0/24 maxlen: 24
                          45.194.21.0/24 maxlen: 24
                          45.194.22.0/23 maxlen: 24
                          45.194.22.0/24 maxlen: 24
                          45.194.23.0/24 maxlen: 24
                          45.207.8.0/24 maxlen: 24
                          45.207.9.0/24 maxlen: 24
                          45.207.10.0/24 maxlen: 24
                          45.207.11.0/24 maxlen: 24
                          45.207.12.0/24 maxlen: 24
                          45.207.13.0/24 maxlen: 24
                          45.207.14.0/24 maxlen: 24
                          45.207.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 18:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122718 (0x1df5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 21 09:02:42 2026 GMT
            Not After : Oct  5 09:02:42 2027 GMT
        Subject: CN=6ad87fb6-f052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:eb:14:ea:8f:0a:d0:5c:64:15:36:67:3b:4d:
                    13:db:24:36:92:11:ff:ce:0b:6d:de:5c:d5:62:c0:
                    ab:8d:73:66:8b:b6:ba:31:44:80:ee:7c:fb:6c:1a:
                    67:d0:1d:76:a5:91:cb:82:7e:79:a0:9b:a2:62:d2:
                    4e:d5:c8:b0:b1:f6:62:f4:93:9f:88:a8:d6:e2:7e:
                    c4:26:07:f2:00:7e:6d:62:48:8b:13:8b:48:b2:59:
                    17:d2:93:2c:4a:d4:37:2a:f6:97:06:a0:73:fc:34:
                    e7:ef:1f:05:e2:b0:66:d2:4c:31:4a:c3:4f:d1:be:
                    6a:18:26:92:07:3b:87:9b:4d:45:17:67:5f:79:42:
                    8f:55:be:7e:0f:2c:3d:43:25:14:58:02:b6:53:04:
                    b6:5c:6c:f4:b7:68:18:22:45:54:4f:7f:6d:ac:66:
                    aa:35:de:bd:6a:69:1a:89:b6:be:85:57:65:f7:b5:
                    a9:e7:68:ee:44:ef:e7:32:e1:1c:53:40:c3:a4:32:
                    db:ff:ca:c4:00:52:c3:1f:25:3f:4c:53:6c:8c:27:
                    8b:1e:15:de:e5:26:43:c6:59:72:67:ce:70:0d:f5:
                    04:9d:0b:6b:4b:b8:f7:8f:5a:5b:ad:39:ab:06:1d:
                    c2:4f:e4:21:ab:19:71:e4:7a:c3:04:f1:8d:b3:b6:
                    a6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5F:BC:1E:20:BD:AC:55:A7:74:8F:48:4E:6D:A2:18:98:7C:6B:08
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EAA6AF0CD2E11F18C8F0CBBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.16.0/21
                  45.207.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ac:21:f7:84:9e:b1:d8:26:90:83:fc:8d:ae:cf:b7:56:a1:85:
         5b:4f:00:b7:21:54:09:f8:ec:1a:0b:42:fc:ca:46:d5:b3:4b:
         fa:74:f2:fd:1a:c1:03:0e:a4:6e:8c:47:75:7a:0e:91:5b:44:
         38:12:d4:7a:3a:2e:cb:b6:3b:87:d1:41:95:78:f0:da:9f:18:
         95:f3:17:11:67:7b:8d:37:63:21:e2:e6:e7:c0:16:e5:a1:6f:
         43:80:bc:63:39:bf:f7:e9:6d:01:41:db:9b:15:83:4a:9a:68:
         f0:21:d8:65:55:68:b6:f0:3c:86:14:1f:b2:0f:10:5d:dd:81:
         fe:24:25:05:6f:ea:16:bb:c8:7e:a4:a1:19:7f:0a:f5:59:61:
         df:e2:c6:52:87:8f:41:e7:e4:ec:55:da:6e:87:ad:90:d2:15:
         b5:8c:7e:5f:73:27:85:fe:cb:86:4d:ea:e5:1e:84:60:ac:4d:
         04:92:ca:cc:03:43:3c:e8:14:fc:5b:1b:9a:d8:7a:8a:8b:5a:
         89:99:91:8b:86:85:66:ce:18:bd:a6:50:6b:ee:94:12:94:84:
         dd:a2:3c:dc:d8:4a:f6:5c:04:ad:71:ad:65:e3:41:0d:7d:ab:
         f0:23:f4:22:33:35:50:71:94:d6:d3:ef:af:2f:eb:c7:45:95:
         e6:80:89:a5
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAd9eMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDIxMDkwMjQyWhcNMjcxMDA1MDkwMjQyWjAYMRYw
FAYDVQQDEw02YWQ4N2ZiNi1mMDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoOsU6o8K0FxkFTZnO00T2yQ2khH/zgtt3lzVYsCrjXNmi7a6MUSA7nz7
bBpn0B12pZHLgn55oJuiYtJO1ciwsfZi9JOfiKjW4n7EJgfyAH5tYkiLE4tIslkX
0pMsStQ3KvaXBqBz/DTn7x8F4rBm0kwxSsNP0b5qGCaSBzuHm01FF2dfeUKPVb5+
Dyw9QyUUWAK2UwS2XGz0t2gYIkVUT39trGaqNd69amkaiba+hVdl97Wp52juRO/n
MuEcU0DDpDLb/8rEAFLDHyU/TFNsjCeLHhXe5SZDxllyZ85wDfUEnQtrS7j3j1pb
rTmrBh3CT+Qhqxlx5HrDBPGNs7am2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRf
vB4gvaxVp3SPSE5tohiYfGsIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yRUFBNkFGMENEMkUxMUYxOEM4RjBDQkJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLcIQAwQDLc8IMA0GCSqGSIb3
DQEBCwUAA4IBAQCsIfeEnrHYJpCD/I2uz7dWoYVbTwC3IVQJ+OwaC0L8ykbVs0v6
dPL9GsEDDqRujEd1eg6RW0Q4EtR6Oi7LtjuH0UGVePDanxiV8xcRZ3uNN2Mh4ubn
wBbloW9DgLxjOb/36W0BQdubFYNKmmjwIdhlVWi28DyGFB+yDxBd3YH+JCUFb+oW
u8h+pKEZfwr1WWHf4sZSh49B5+TsVdpuh62Q0hW1jH5fcyeF/suGTerlHoRgrE0E
ksrMA0M86BT8Wxua2HqKi1qJmZGLhoVmzhi9plBr7pQSlITdojzc2Er2XAStca1l
40ENfavwI/QiMzVQcZTW0++vL+vHRZXmgIml
-----END CERTIFICATE-----