Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C4D14968E3B11F18749E3D0CE1D38B0.roa
File:                     3C4D14968E3B11F18749E3D0CE1D38B0.roa (raw, json)
Hash identifier:          8Yo8Upzb/KfyiRCXZqwPGIMQGQTkyO3bjbWmdqjDx9Q=
Subject key identifier:   0E:E1:DF:1C:43:97:9D:B9:75:62:B3:64:A2:CF:66:98:C8:FA:18:B4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C90B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C4D14968E3B11F18749E3D0CE1D38B0.roa
Signing time:             Sun 02 Aug 2026 06:27:29 +0000
ROA not before:           Sun 02 Aug 2026 06:27:23 +0000
ROA not after:            Wed 09 Sep 2026 06:27:23 +0000
asID:                     215925
IP address blocks:        45.198.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117003 (0x1c90b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  2 06:27:23 2026 GMT
            Not After : Sep  9 06:27:23 2026 GMT
        Subject: CN=6a6ee351-b710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e0:b3:b9:f4:ae:38:e9:2a:87:46:47:7e:c8:
                    61:21:1f:88:30:bd:4a:29:fc:3c:e1:64:6e:73:fd:
                    22:32:e9:33:ee:95:54:33:3e:4a:e0:dd:a5:1e:62:
                    c1:f8:bd:d5:00:a7:40:93:c7:3a:52:1d:47:76:d6:
                    5f:99:05:d4:50:8e:65:62:3f:5f:26:73:f2:38:cb:
                    b9:52:b9:b1:17:32:0f:6f:3a:c8:a4:5d:86:b0:d0:
                    eb:4a:cd:1e:ec:0c:a5:94:39:e3:41:d5:f0:01:3c:
                    58:95:c9:35:0c:05:ee:a4:5d:fa:ea:9c:da:35:14:
                    c1:a0:a5:30:7c:6d:c5:37:c5:a6:d7:2c:ba:0f:f8:
                    db:cb:a1:5e:f3:48:ae:b9:3a:dd:42:80:2b:0d:13:
                    ab:57:bb:ab:eb:4f:c5:b6:3d:e6:30:b9:5a:bb:a1:
                    b8:3e:86:5e:ac:f2:0a:a3:1a:85:ef:bb:26:37:c9:
                    2b:fc:93:1e:64:45:a2:a8:99:52:ae:67:a9:a6:50:
                    87:a7:db:64:10:ac:bc:f3:07:9f:ed:19:d0:03:97:
                    0f:f2:8b:65:10:ac:00:c2:3b:4b:01:2c:93:83:9f:
                    fa:90:4f:5c:3b:fb:a3:db:af:78:50:1b:26:12:0b:
                    df:5a:b2:eb:30:37:4f:07:97:17:f0:38:c3:c0:92:
                    1e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E1:DF:1C:43:97:9D:B9:75:62:B3:64:A2:CF:66:98:C8:FA:18:B4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C4D14968E3B11F18749E3D0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:13:4a:bb:5d:89:4b:ef:f8:55:0d:45:88:bd:35:56:7a:2f:
         83:4f:6e:3d:97:40:41:17:dc:64:69:8d:86:d4:f4:34:a5:50:
         5e:7d:12:cc:aa:c8:a4:0f:f5:7c:22:c1:34:60:ac:76:dc:8b:
         fb:9e:c1:aa:d7:c8:60:ad:36:b0:f6:88:a8:22:5c:ce:2b:a8:
         5b:e1:c4:40:46:10:69:14:8a:87:9a:f5:eb:e0:6b:1c:38:b3:
         62:99:f0:aa:65:14:3c:e2:59:bc:d7:15:60:e1:79:cb:da:a8:
         3e:9f:bc:ac:8c:15:c7:2b:82:d2:bc:8d:77:26:34:71:64:c9:
         29:14:5f:e2:6f:a3:da:1a:1e:a3:f6:b5:55:eb:2c:bf:48:be:
         a1:50:51:b7:eb:8c:4f:f4:8e:7e:f8:0c:c7:80:91:1f:d1:4e:
         97:23:42:00:64:3a:a7:57:3b:05:ce:48:01:b5:e1:16:7f:a0:
         aa:ed:3b:3f:85:df:1c:a5:ad:62:62:f9:ce:3f:02:85:08:0c:
         1a:06:79:f3:88:9f:44:ed:31:4f:aa:34:ff:2a:6b:1d:41:9f:
         b8:76:de:e1:5b:df:1a:44:2c:a4:86:28:48:b3:c1:e1:1f:88:
         4f:35:a5:37:5e:ef:88:bb:ef:e0:dd:52:d1:4b:5b:cf:39:a7:
         47:b3:81:6d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAckLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODAyMDYyNzIzWhcNMjYwOTA5MDYyNzIzWjAYMRYw
FAYDVQQDEw02YTZlZTM1MS1iNzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsuCzufSuOOkqh0ZHfshhIR+IML1KKfw84WRuc/0iMukz7pVUMz5K4N2l
HmLB+L3VAKdAk8c6Uh1HdtZfmQXUUI5lYj9fJnPyOMu5UrmxFzIPbzrIpF2GsNDr
Ss0e7AyllDnjQdXwATxYlck1DAXupF366pzaNRTBoKUwfG3FN8Wm1yy6D/jby6Fe
80iuuTrdQoArDROrV7ur60/Ftj3mMLlau6G4PoZerPIKoxqF77smN8kr/JMeZEWi
qJlSrmepplCHp9tkEKy88wef7RnQA5cP8otlEKwAwjtLASyTg5/6kE9cO/uj2694
UBsmEgvfWrLrMDdPB5cX8DjDwJIeVQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFA7h
3xxDl525dWKzZKLPZpjI+hi0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQzREMTQ5NjhFM0IxMUYxODc0OUUzRDBDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcbgMA0GCSqGSIb3DQEBCwUA
A4IBAQA3E0q7XYlL7/hVDUWIvTVWei+DT249l0BBF9xkaY2G1PQ0pVBefRLMqsik
D/V8IsE0YKx23Iv7nsGq18hgrTaw9oioIlzOK6hb4cRARhBpFIqHmvXr4GscOLNi
mfCqZRQ84lm81xVg4XnL2qg+n7ysjBXHK4LSvI13JjRxZMkpFF/ib6PaGh6j9rVV
6yy/SL6hUFG364xP9I5++AzHgJEf0U6XI0IAZDqnVzsFzkgBteEWf6Cq7Ts/hd8c
pa1iYvnOPwKFCAwaBnnziJ9E7TFPqjT/KmsdQZ+4dt7hW98aRCykhihIs8HhH4hP
NaU3Xu+Iu+/g3VLRS1vPOadHs4Ft
-----END CERTIFICATE-----