Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ED0501A9BA311F1B8B45915CF1D38B0.roa
File:                     2ED0501A9BA311F1B8B45915CF1D38B0.roa (raw, json)
Hash identifier:          aL4szTYXrv/oN9j3kdakjbjFpEIzXfdw8NP9LxyPxxs=
Subject key identifier:   17:B0:F9:49:7A:45:02:47:23:77:9D:70:9D:44:AA:58:54:E1:92:0E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE33
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ED0501A9BA311F1B8B45915CF1D38B0.roa
Signing time:             Wed 19 Aug 2026 07:54:20 +0000
ROA not before:           Wed 19 Aug 2026 07:54:15 +0000
ROA not after:            Fri 25 Sep 2026 07:54:15 +0000
asID:                     200758
IP address blocks:        45.192.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118323 (0x1ce33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 19 07:54:15 2026 GMT
            Not After : Sep 25 07:54:15 2026 GMT
        Subject: CN=6a85612b-0c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9c:f6:c0:cd:35:4e:28:a5:55:3f:5c:5f:fb:
                    c5:fd:83:ad:e8:86:3b:c7:e5:7b:e0:40:70:d0:e3:
                    9f:7c:fa:d7:71:81:41:73:9d:27:59:f5:28:27:fc:
                    e6:34:cd:d0:01:cc:be:9b:9b:a3:ff:15:61:64:9a:
                    4f:47:9c:19:f3:29:62:7c:61:7d:7b:e4:dc:aa:08:
                    5f:25:35:59:3e:3c:cc:4c:98:75:b0:9e:48:c5:55:
                    eb:3b:5a:50:2f:81:d9:47:bc:81:bf:b8:b0:a6:38:
                    8b:80:e0:42:e8:a3:3c:78:24:58:80:16:90:12:7f:
                    15:da:5d:ef:0b:fc:9b:24:c0:8a:02:b1:b1:b0:c8:
                    3d:7c:ca:d5:f7:b2:39:ba:9b:ea:30:93:29:e6:2d:
                    50:fa:8f:0a:e3:d0:18:c2:e8:f2:ed:99:1d:5e:f4:
                    1f:56:97:a6:c8:32:bd:ba:92:44:ee:98:cd:6c:e9:
                    80:7b:f4:1a:50:98:e4:6c:75:48:e5:ea:81:ca:4f:
                    9d:01:d4:28:4e:63:7f:af:7f:b7:75:c9:61:cd:32:
                    16:54:aa:a8:fc:81:6e:30:46:fc:43:d3:e5:9f:d0:
                    5b:9f:95:35:1a:02:68:1b:9a:3f:71:3a:52:60:9f:
                    d0:42:0a:4d:a5:0e:ce:89:6e:fc:d9:d8:51:36:e1:
                    2a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B0:F9:49:7A:45:02:47:23:77:9D:70:9D:44:AA:58:54:E1:92:0E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2ED0501A9BA311F1B8B45915CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:6b:95:63:f7:85:c8:38:c2:24:93:4e:0a:c7:c3:78:08:af:
         3e:65:67:d2:5d:bd:db:d9:99:f7:ad:bd:f7:15:ff:5f:7d:5c:
         84:d2:46:04:71:c9:83:6c:21:61:cf:45:fa:1d:48:fe:67:c6:
         3e:74:9d:82:fc:f0:23:a6:f2:0d:87:c3:a0:d3:17:84:c6:b8:
         83:5e:0c:23:09:a3:ab:00:81:b4:24:51:75:7d:a0:9f:66:41:
         60:bc:42:e6:3d:1e:91:bf:d4:55:c3:51:b2:c2:b0:57:86:92:
         07:3d:b0:9e:b5:75:b3:20:30:1a:3c:9a:76:e5:f7:6e:fa:05:
         ce:28:e0:8f:96:3b:70:d9:2c:71:18:d4:5c:d4:f2:d0:33:8f:
         0f:b9:fb:f5:36:c5:02:bd:40:33:36:4d:9a:52:b6:e8:e4:ff:
         b6:ec:e2:00:bf:e5:a1:d6:a8:52:93:32:b2:cd:44:e6:2e:9a:
         1e:07:68:26:e8:bf:be:d6:3e:3c:5b:fd:d5:8b:35:c3:0e:c7:
         45:51:53:66:73:fd:62:9e:d8:03:5b:70:74:b0:bb:0d:e2:6e:
         e1:97:5a:cc:09:d9:23:3c:1a:d9:0f:b5:bc:1b:21:81:cf:ad:
         40:ad:a7:51:89:15:3a:75:e5:da:b4:b9:9e:4e:ba:41:83:6d:
         0e:78:0a:db
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAc4zMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODE5MDc1NDE1WhcNMjYwOTI1MDc1NDE1WjAYMRYw
FAYDVQQDEw02YTg1NjEyYi0wYzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzJz2wM01TiilVT9cX/vF/YOt6IY7x+V74EBw0OOffPrXcYFBc50nWfUo
J/zmNM3QAcy+m5uj/xVhZJpPR5wZ8ylifGF9e+TcqghfJTVZPjzMTJh1sJ5IxVXr
O1pQL4HZR7yBv7iwpjiLgOBC6KM8eCRYgBaQEn8V2l3vC/ybJMCKArGxsMg9fMrV
97I5upvqMJMp5i1Q+o8K49AYwujy7ZkdXvQfVpemyDK9upJE7pjNbOmAe/QaUJjk
bHVI5eqByk+dAdQoTmN/r3+3dclhzTIWVKqo/IFuMEb8Q9Pln9Bbn5U1GgJoG5o/
cTpSYJ/QQgpNpQ7OiW782dhRNuEqKwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBew
+Ul6RQJHI3edcJ1EqlhU4ZIOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yRUQwNTAxQTlCQTMxMUYxQjhCNDU5MTVDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcAJMA0GCSqGSIb3DQEBCwUA
A4IBAQB3a5Vj94XIOMIkk04Kx8N4CK8+ZWfSXb3b2Zn3rb33Ff9ffVyE0kYEccmD
bCFhz0X6HUj+Z8Y+dJ2C/PAjpvINh8Og0xeExriDXgwjCaOrAIG0JFF1faCfZkFg
vELmPR6Rv9RVw1GywrBXhpIHPbCetXWzIDAaPJp25fdu+gXOKOCPljtw2SxxGNRc
1PLQM48Pufv1NsUCvUAzNk2aUrbo5P+27OIAv+Wh1qhSkzKyzUTmLpoeB2gm6L++
1j48W/3VizXDDsdFUVNmc/1intgDW3B0sLsN4m7hl1rMCdkjPBrZD7W8GyGBz61A
radRiRU6deXatLmeTrpBg20OeArb
-----END CERTIFICATE-----