Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3968E79A971011F1A69057D8CE1D38B0.roa
File:                     3968E79A971011F1A69057D8CE1D38B0.roa (raw, json)
Hash identifier:          giQLy0Iuo8JdkWuWh1yJFKAyPgT4Woeset1QqqdmaRI=
Subject key identifier:   3C:3E:F6:5E:4E:0D:CE:AE:ED:14:5E:79:5A:FB:18:DC:1D:76:A3:A4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CCAE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3968E79A971011F1A69057D8CE1D38B0.roa
Signing time:             Thu 13 Aug 2026 12:12:17 +0000
ROA not before:           Thu 13 Aug 2026 12:12:12 +0000
ROA not after:            Fri 18 Sep 2026 12:12:12 +0000
asID:                     16509
IP address blocks:        45.204.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117934 (0x1ccae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 13 12:12:12 2026 GMT
            Not After : Sep 18 12:12:12 2026 GMT
        Subject: CN=6a7db4a1-ce45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:58:28:f5:6e:7b:da:5d:58:5d:3f:06:83:eb:
                    aa:15:02:eb:54:e2:e0:49:c0:e0:6b:48:d9:ba:1a:
                    b6:8e:30:ad:4a:72:c5:59:3a:70:39:ac:15:dd:a1:
                    1a:3e:ce:7b:c9:67:68:ce:be:97:d9:d3:2c:ba:b1:
                    8d:45:4f:c3:80:4b:56:83:d0:c7:58:05:c6:85:f7:
                    d5:98:df:69:5b:ec:63:c5:37:0f:0b:c9:e9:7f:d0:
                    ce:6d:3b:60:25:e8:87:4b:3d:a8:9a:32:b3:1c:d1:
                    56:86:57:a8:c7:90:6b:22:1f:a7:fb:10:3d:f4:2c:
                    4a:e3:7d:d4:e0:c5:a0:96:33:4a:81:9f:b5:07:b7:
                    16:7c:a5:d6:87:d8:d0:80:69:7d:b2:cb:fd:c1:00:
                    a4:14:48:63:98:a0:5d:89:79:40:39:94:a9:80:5a:
                    d8:c7:ca:39:13:fc:e5:e7:39:db:72:9b:5f:99:b3:
                    2c:e7:68:72:84:89:d6:d1:47:8f:bb:0e:41:88:7d:
                    5e:c7:d7:86:ea:3d:da:cb:39:55:3a:19:7a:b0:08:
                    84:dc:73:7d:ff:58:d2:fb:e9:5e:da:0a:34:c9:db:
                    b9:e6:da:04:57:68:d3:18:2a:8e:58:2a:c7:fc:c3:
                    ae:88:7e:b7:e5:46:2e:cb:5c:b3:a2:33:08:17:98:
                    b3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3E:F6:5E:4E:0D:CE:AE:ED:14:5E:79:5A:FB:18:DC:1D:76:A3:A4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3968E79A971011F1A69057D8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:24:87:53:f2:5a:6b:d4:6a:ac:19:b6:46:e2:2a:58:7b:64:
         c6:4a:a8:3e:63:29:8c:61:d6:3e:10:36:0b:aa:38:e8:a4:c8:
         11:b1:43:ec:f1:b7:a6:b7:9c:ce:45:7a:5b:bd:eb:d3:d5:91:
         21:b2:e7:d1:b0:f2:39:c4:98:86:8e:ee:8b:ed:bd:d8:81:c2:
         db:ce:f5:b0:31:e9:99:c2:e7:91:da:43:d0:a0:9a:75:b5:84:
         48:21:f4:ee:a7:43:38:dc:55:c8:97:95:aa:1f:70:ba:fa:03:
         ac:6b:07:1d:70:8c:2a:02:5f:74:46:f3:69:f1:54:ce:2d:d8:
         4e:bb:eb:29:52:30:37:e1:13:87:90:e4:9e:3e:66:18:ba:09:
         bc:6b:2c:b3:1f:97:9e:99:d4:73:a1:31:fa:df:a9:52:c3:71:
         87:41:14:0d:86:e7:91:dd:21:c6:6e:ab:b0:54:b7:be:44:88:
         e7:a0:41:f5:c8:ff:14:d4:a5:2d:48:cc:3c:f4:41:31:28:a5:
         d6:9a:03:50:9b:e2:8f:0c:ff:e7:cb:f8:96:cb:1f:74:7b:bd:
         b5:af:0c:d9:c1:8a:62:b5:db:ea:72:75:da:70:57:49:b2:a9:
         c4:95:d9:bb:cc:1f:5b:3c:91:69:af:5f:6a:b6:44:30:45:39:
         de:f2:fa:5f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcyuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODEzMTIxMjEyWhcNMjYwOTE4MTIxMjEyWjAYMRYw
FAYDVQQDEw02YTdkYjRhMS1jZTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8Fgo9W572l1YXT8Gg+uqFQLrVOLgScDga0jZuhq2jjCtSnLFWTpwOawV
3aEaPs57yWdozr6X2dMsurGNRU/DgEtWg9DHWAXGhffVmN9pW+xjxTcPC8npf9DO
bTtgJeiHSz2omjKzHNFWhleox5BrIh+n+xA99CxK433U4MWgljNKgZ+1B7cWfKXW
h9jQgGl9ssv9wQCkFEhjmKBdiXlAOZSpgFrYx8o5E/zl5znbcptfmbMs52hyhInW
0UePuw5BiH1ex9eG6j3ayzlVOhl6sAiE3HN9/1jS++le2go0ydu55toEV2jTGCqO
WCrH/MOuiH635UYuy1yzojMIF5izkQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFDw+
9l5ODc6u7RReeVr7GNwddqOkMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zOTY4RTc5QTk3MTAxMUYxQTY5MDU3RDhDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcxGMA0GCSqGSIb3DQEBCwUA
A4IBAQAtJIdT8lpr1GqsGbZG4ipYe2TGSqg+YymMYdY+EDYLqjjopMgRsUPs8bem
t5zORXpbvevT1ZEhsufRsPI5xJiGju6L7b3YgcLbzvWwMemZwueR2kPQoJp1tYRI
IfTup0M43FXIl5WqH3C6+gOsawcdcIwqAl90RvNp8VTOLdhOu+spUjA34ROHkOSe
PmYYugm8ayyzH5eemdRzoTH636lSw3GHQRQNhueR3SHGbquwVLe+RIjnoEH1yP8U
1KUtSMw89EExKKXWmgNQm+KPDP/ny/iWyx90e721rwzZwYpitdvqcnXacFdJsqnE
ldm7zB9bPJFpr19qtkQwRTne8vpf
-----END CERTIFICATE-----