Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34A29308A1F311F18A925E1CCF1D38B0.roa
File:                     34A29308A1F311F18A925E1CCF1D38B0.roa (raw, json)
Hash identifier:          jroJWWIsRr8Mk172M0VhlFw44JavDV7LB73cg76qidE=
Subject key identifier:   64:41:06:F7:2F:D6:9D:9B:1F:8C:56:ED:8F:57:B0:F5:BC:2D:7C:8A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D182
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34A29308A1F311F18A925E1CCF1D38B0.roa
Signing time:             Thu 27 Aug 2026 08:42:16 +0000
ROA not before:           Thu 27 Aug 2026 08:42:12 +0000
ROA not after:            Sun 04 Oct 2026 08:42:12 +0000
asID:                     150055
IP address blocks:        45.199.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119170 (0x1d182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 27 08:42:12 2026 GMT
            Not After : Oct  4 08:42:12 2026 GMT
        Subject: CN=6a8ff868-4b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a8:2b:c1:6e:1d:44:44:c8:a8:ff:2d:56:cd:
                    41:cd:22:92:a0:9e:0a:e2:b9:08:e1:f9:f2:a3:fa:
                    69:ea:a5:c1:2d:27:dd:7b:d0:c3:9a:a2:c6:87:5f:
                    89:18:e7:86:fb:56:74:fd:59:6c:12:1d:09:34:f2:
                    65:fc:05:35:c2:80:49:f0:5e:12:ea:01:61:06:74:
                    5b:a2:c8:15:31:c0:4d:9f:40:3c:72:91:bd:29:63:
                    3e:79:c8:f7:46:e9:f6:9a:7e:ac:d7:f0:12:01:09:
                    6a:b4:a3:c4:fe:30:3c:03:d2:43:50:e7:d6:55:62:
                    58:fc:91:98:a2:40:20:2f:29:8d:e0:db:d4:f0:df:
                    b6:28:0d:93:c2:2c:ee:d6:06:27:dc:79:5a:3a:bf:
                    00:47:de:88:83:79:10:be:c6:5d:71:a9:24:8f:ce:
                    6f:ef:05:37:41:2e:7b:ee:5b:09:4f:bb:e1:a5:a9:
                    bf:a1:ed:cb:41:82:30:9e:19:63:73:b0:46:26:12:
                    ff:e3:c3:80:95:88:5e:5b:fc:51:8b:e2:b0:58:0e:
                    f9:ea:5b:a6:29:6d:0d:72:8f:c6:b6:28:59:da:13:
                    b9:86:1f:78:6d:d4:01:37:12:f0:64:88:1c:eb:7f:
                    71:55:97:2d:6b:fa:a1:94:af:45:fc:05:34:70:e1:
                    7a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:41:06:F7:2F:D6:9D:9B:1F:8C:56:ED:8F:57:B0:F5:BC:2D:7C:8A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34A29308A1F311F18A925E1CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:0a:c7:49:d6:5c:ba:7b:3b:69:e3:20:85:f7:1b:22:52:2f:
         6c:99:1c:b4:46:d5:82:43:97:26:27:b6:62:2f:0a:81:40:fb:
         cb:26:5a:bf:5a:fa:5c:3a:14:a8:fc:c9:d5:a0:c7:08:d6:63:
         1a:11:5d:7a:a0:a9:7d:91:a5:a2:cc:2f:fa:9c:cd:88:7b:c8:
         ec:ca:b0:fa:3c:cd:01:43:cb:be:46:a1:6b:6b:90:d3:7a:12:
         84:d1:70:fc:e7:1e:dd:98:c7:ca:45:41:e9:2a:8f:1e:60:97:
         fe:15:e9:b6:9b:70:c0:cd:d5:db:de:92:5e:b6:71:9d:be:48:
         d8:c8:f3:41:6d:f7:48:06:01:e0:6e:7c:52:30:23:5d:f5:a1:
         32:3c:14:08:14:8c:1d:45:2d:2c:64:c5:6e:2d:cc:bc:65:60:
         11:9f:f0:10:8a:ac:6f:24:57:ad:51:3b:e3:03:36:75:0b:a4:
         3c:4f:b7:fc:20:01:c0:04:fd:a7:e5:26:bb:e3:4e:24:81:b5:
         b1:b3:32:d5:c7:c7:a6:d5:66:68:64:4d:6f:19:bb:5f:44:d4:
         65:15:d7:14:8c:2d:9e:15:3b:04:1b:57:3d:12:72:4d:41:d6:
         df:8a:ac:22:d6:8e:70:a4:01:86:01:b2:64:f7:42:f7:29:15:
         a3:2d:14:c5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdGCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODI3MDg0MjEyWhcNMjYxMDA0MDg0MjEyWjAYMRYw
FAYDVQQDEw02YThmZjg2OC00YjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7qgrwW4dRETIqP8tVs1BzSKSoJ4K4rkI4fnyo/pp6qXBLSfde9DDmqLG
h1+JGOeG+1Z0/VlsEh0JNPJl/AU1woBJ8F4S6gFhBnRbosgVMcBNn0A8cpG9KWM+
ecj3Run2mn6s1/ASAQlqtKPE/jA8A9JDUOfWVWJY/JGYokAgLymN4NvU8N+2KA2T
wizu1gYn3HlaOr8AR96Ig3kQvsZdcakkj85v7wU3QS577lsJT7vhpam/oe3LQYIw
nhljc7BGJhL/48OAlYheW/xRi+KwWA756lumKW0Nco/GtihZ2hO5hh94bdQBNxLw
ZIgc639xVZcta/qhlK9F/AU0cOF6qwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGRB
Bvcv1p2bH4xW7Y9XsPW8LXyKMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNEEyOTMwOEExRjMxMUYxOEE5MjVFMUNDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALceLMA0GCSqGSIb3DQEBCwUA
A4IBAQCtCsdJ1ly6eztp4yCF9xsiUi9smRy0RtWCQ5cmJ7ZiLwqBQPvLJlq/Wvpc
OhSo/MnVoMcI1mMaEV16oKl9kaWizC/6nM2Ie8jsyrD6PM0BQ8u+RqFra5DTehKE
0XD85x7dmMfKRUHpKo8eYJf+Fem2m3DAzdXb3pJetnGdvkjYyPNBbfdIBgHgbnxS
MCNd9aEyPBQIFIwdRS0sZMVuLcy8ZWARn/AQiqxvJFetUTvjAzZ1C6Q8T7f8IAHA
BP2n5Sa7404kgbWxszLVx8em1WZoZE1vGbtfRNRlFdcUjC2eFTsEG1c9EnJNQdbf
iqwi1o5wpAGGAbJk90L3KRWjLRTF
-----END CERTIFICATE-----