Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45614B669AD811F1950389C8CE1D38B0.roa
File:                     45614B669AD811F1950389C8CE1D38B0.roa (raw, json)
Hash identifier:          CW+He7G0UiezkZAxPiZQGqCwxJi+fcJxgKJkxyBeBrM=
Subject key identifier:   D8:CB:5C:32:F0:6A:83:C4:F0:6F:BF:F0:CA:B5:86:E4:7A:C3:BD:50
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CD71
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45614B669AD811F1950389C8CE1D38B0.roa
Signing time:             Tue 18 Aug 2026 07:41:50 +0000
ROA not before:           Tue 18 Aug 2026 07:41:46 +0000
ROA not after:            Fri 25 Aug 2028 07:41:46 +0000
asID:                     133012
IP address blocks:        45.199.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118129 (0x1cd71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 18 07:41:46 2026 GMT
            Not After : Aug 25 07:41:46 2028 GMT
        Subject: CN=6a840cbd-4560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bb:58:8a:d2:a9:dc:61:ad:73:31:23:f5:2c:
                    4c:a8:8d:5f:25:be:a0:83:46:9f:8a:2c:13:74:ef:
                    a2:9c:75:0b:29:e4:0c:7f:d4:83:24:3e:4f:ea:e9:
                    cd:47:d1:a3:a0:5d:27:e4:e6:8a:16:3f:be:a7:5f:
                    86:2c:59:17:b7:1f:61:9e:f9:b4:70:be:67:89:34:
                    f5:32:59:2c:14:f6:3d:fe:06:38:c7:1d:96:6d:c0:
                    49:97:0c:30:24:b6:92:a2:8e:f7:dc:5e:a1:60:15:
                    1e:36:d4:52:e5:64:65:72:30:93:64:47:f9:53:11:
                    3f:48:e8:c9:a8:b8:c4:de:db:75:11:bf:d6:02:a3:
                    6f:0b:06:f3:90:63:cf:aa:ee:f2:2a:e7:17:e8:9d:
                    41:c6:16:67:e6:f9:27:3f:d6:fe:94:10:50:45:31:
                    4f:a7:3e:78:b6:66:00:bd:cd:36:72:6c:06:27:5b:
                    30:13:5e:5f:12:9b:fa:d3:c1:88:6d:0e:36:49:e9:
                    02:42:05:81:52:58:04:4a:0d:a2:18:07:8a:38:44:
                    69:bf:67:a2:b4:c0:e8:b3:c6:87:e5:08:29:75:a9:
                    fb:8e:40:82:56:b9:5a:87:1e:41:a4:88:33:57:55:
                    6e:9f:f0:ab:43:48:d6:2f:31:16:61:39:5b:fd:4f:
                    48:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CB:5C:32:F0:6A:83:C4:F0:6F:BF:F0:CA:B5:86:E4:7A:C3:BD:50
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45614B669AD811F1950389C8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:64:d9:cd:ea:35:c1:27:e4:b1:08:fa:de:0f:b0:db:fb:a8:
         8b:d5:50:cb:4d:93:4e:9f:33:08:db:90:c4:37:4f:52:bd:a3:
         15:cf:aa:3b:61:b6:55:09:59:e7:d8:03:95:d8:c4:50:89:2d:
         b1:97:15:96:ab:54:a4:04:bb:f8:76:9c:f4:29:21:f9:d6:b2:
         ab:29:42:3f:02:c6:37:b7:93:ac:f2:f0:eb:bd:c1:11:a8:62:
         ed:df:2c:63:65:be:9a:41:c0:87:67:a7:20:9f:77:77:85:c4:
         33:5f:5d:98:cd:4b:2d:c4:f2:15:55:c6:66:56:17:1c:d6:ac:
         0b:55:0a:eb:eb:f0:40:f6:4d:5b:cc:b4:71:00:37:99:13:29:
         19:29:77:19:23:ec:27:fe:50:93:3c:31:33:8d:ef:f0:20:6a:
         3b:c3:39:62:e6:ec:5c:6f:36:81:e5:0c:69:4f:8d:d7:5e:ad:
         78:2a:27:e3:b0:f3:1e:d2:b7:05:14:85:70:2b:df:0a:6b:f2:
         9d:b5:5d:c8:ac:d7:13:98:dd:7f:53:7e:70:c6:e9:1d:de:a9:
         5b:05:56:a3:d8:09:91:73:79:5a:e6:e6:dd:fe:c6:6c:25:0e:
         c7:02:93:4c:67:15:1a:78:53:aa:68:43:ae:2b:fd:08:0b:5b:
         76:cf:75:7b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAc1xMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODE4MDc0MTQ2WhcNMjgwODI1MDc0MTQ2WjAYMRYw
FAYDVQQDEw02YTg0MGNiZC00NTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvLtYitKp3GGtczEj9SxMqI1fJb6gg0afiiwTdO+inHULKeQMf9SDJD5P
6unNR9GjoF0n5OaKFj++p1+GLFkXtx9hnvm0cL5niTT1MlksFPY9/gY4xx2WbcBJ
lwwwJLaSoo733F6hYBUeNtRS5WRlcjCTZEf5UxE/SOjJqLjE3tt1Eb/WAqNvCwbz
kGPPqu7yKucX6J1BxhZn5vknP9b+lBBQRTFPpz54tmYAvc02cmwGJ1swE15fEpv6
08GIbQ42SekCQgWBUlgESg2iGAeKOERpv2eitMDos8aH5Qgpdan7jkCCVrlahx5B
pIgzV1Vun/CrQ0jWLzEWYTlb/U9IHwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNjL
XDLwaoPE8G+/8Mq1huR6w71QMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NTYxNEI2NjlBRDgxMUYxOTUwMzg5QzhDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALce2MA0GCSqGSIb3DQEBCwUA
A4IBAQCVZNnN6jXBJ+SxCPreD7Db+6iL1VDLTZNOnzMI25DEN09SvaMVz6o7YbZV
CVnn2AOV2MRQiS2xlxWWq1SkBLv4dpz0KSH51rKrKUI/AsY3t5Os8vDrvcERqGLt
3yxjZb6aQcCHZ6cgn3d3hcQzX12YzUstxPIVVcZmVhcc1qwLVQrr6/BA9k1bzLRx
ADeZEykZKXcZI+wn/lCTPDEzje/wIGo7wzli5uxcbzaB5QxpT43XXq14KifjsPMe
0rcFFIVwK98Ka/KdtV3IrNcTmN1/U35wxukd3qlbBVaj2AmRc3la5ubd/sZsJQ7H
ApNMZxUaeFOqaEOuK/0IC1t2z3V7
-----END CERTIFICATE-----