Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/538199DEC61211F1BA9C2CDACE1D38B0.roa
File:                     538199DEC61211F1BA9C2CDACE1D38B0.roa (raw, json)
Hash identifier:          E854Fz4TWyw6YKd7+CwvH+HGuDLNHy4TcMMRAjeRef0=
Subject key identifier:   1D:43:EC:F9:BB:1F:B9:7D:53:32:6A:C3:14:45:2B:79:D1:75:F5:FB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DCEC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/538199DEC61211F1BA9C2CDACE1D38B0.roa
Signing time:             Mon 12 Oct 2026 07:55:44 +0000
ROA not before:           Mon 12 Oct 2026 07:55:38 +0000
ROA not after:            Thu 03 Dec 2026 07:55:38 +0000
asID:                     149440
IP address blocks:        45.195.69.0/24 maxlen: 24
                          45.195.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122092 (0x1dcec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 12 07:55:38 2026 GMT
            Not After : Dec  3 07:55:38 2026 GMT
        Subject: CN=6acc9280-eb73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:74:91:33:68:3d:93:e4:5a:5a:ed:09:f2:5e:
                    0a:f9:e0:49:c2:3d:d3:c5:b3:2a:c8:0c:2a:3e:1b:
                    3f:04:14:53:94:47:a0:5f:40:2f:e9:23:42:d7:0c:
                    9c:b8:a6:c4:ae:a7:f4:66:97:3f:e5:76:a1:bf:2e:
                    5a:7c:33:96:2c:03:4e:c5:c1:2d:81:e0:b4:4c:50:
                    da:23:57:63:f6:a4:a2:35:24:3f:bd:7d:19:7c:ea:
                    25:6a:02:28:7c:f0:b4:b8:a6:29:9b:23:91:31:05:
                    cb:b9:ba:3e:6b:60:3f:25:af:dc:64:5e:dd:04:89:
                    ff:dc:47:24:a0:77:06:ac:8e:bd:ce:3e:1d:8d:90:
                    64:77:61:f9:23:07:8f:ad:9f:c8:ca:fb:64:19:f8:
                    15:0b:db:0c:34:be:d2:b6:4a:8f:24:ab:ee:b8:eb:
                    62:08:9d:8d:cf:0d:45:68:6f:c7:d1:4d:0b:2f:e1:
                    ce:50:78:bb:9d:ca:fc:f6:fc:4b:56:3e:6e:58:14:
                    d9:f4:46:4b:e8:03:0a:72:08:f6:b7:ab:6a:02:0c:
                    8a:4e:e2:cb:32:d9:5d:91:8d:5b:76:43:55:99:61:
                    41:be:2b:18:d7:13:65:98:1f:4f:e9:4f:50:e8:30:
                    59:b9:e9:27:6b:9d:ea:94:2f:20:a7:9c:ee:cc:b4:
                    f5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:43:EC:F9:BB:1F:B9:7D:53:32:6A:C3:14:45:2B:79:D1:75:F5:FB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/538199DEC61211F1BA9C2CDACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.69.0/24
                  45.195.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:ae:96:b1:1e:64:8f:63:03:8f:3f:c2:d9:fa:b9:bf:3f:84:
         fa:57:50:45:e5:c9:55:87:ca:81:b7:fc:92:31:7e:83:8c:c0:
         f3:b9:c0:4f:16:dc:af:19:ca:95:a8:4e:4b:bc:a4:e6:81:7f:
         79:3f:21:1c:5f:5a:f3:70:9e:7d:ec:f7:89:52:c5:fe:92:86:
         26:c9:56:54:7b:54:8e:5b:97:74:f3:15:92:40:10:28:32:59:
         6d:7d:dc:ff:39:53:59:1c:75:ce:eb:8f:f1:a2:a4:0a:37:bc:
         05:be:de:83:46:32:d2:38:f1:86:40:34:27:6d:b8:52:6e:18:
         c7:08:c0:d7:4f:49:67:d2:6f:6f:e0:9b:1a:61:40:1c:d4:53:
         0c:ec:1c:55:d0:ac:48:bf:62:96:40:28:5b:27:fb:93:74:20:
         df:98:c8:3d:2a:fe:13:5a:b3:57:84:38:57:93:ad:75:6b:3a:
         ad:a7:99:b3:15:99:e7:db:02:59:d6:63:21:ee:40:50:04:37:
         b1:14:53:07:ca:5a:5d:8a:f7:1b:8e:0d:ab:6d:1a:52:ed:74:
         1b:dc:81:7f:af:ba:9d:6f:51:3c:c6:82:7c:c4:84:0d:3f:5b:
         6a:73:28:34:66:dd:81:e2:bc:fa:e4:81:8a:47:4a:6f:97:18:
         98:b5:91:bf
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAdzsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDEyMDc1NTM4WhcNMjYxMjAzMDc1NTM4WjAYMRYw
FAYDVQQDEw02YWNjOTI4MC1lYjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2HSRM2g9k+RaWu0J8l4K+eBJwj3TxbMqyAwqPhs/BBRTlEegX0Av6SNC
1wycuKbErqf0Zpc/5Xahvy5afDOWLANOxcEtgeC0TFDaI1dj9qSiNSQ/vX0ZfOol
agIofPC0uKYpmyORMQXLubo+a2A/Ja/cZF7dBIn/3EckoHcGrI69zj4djZBkd2H5
IwePrZ/IyvtkGfgVC9sMNL7StkqPJKvuuOtiCJ2Nzw1FaG/H0U0LL+HOUHi7ncr8
9vxLVj5uWBTZ9EZL6AMKcgj2t6tqAgyKTuLLMtldkY1bdkNVmWFBvisY1xNlmB9P
6U9Q6DBZuekna53qlC8gp5zuzLT1nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1D
7Pm7H7l9UzJqwxRFK3nRdfX7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MzgxOTlERUM2MTIxMUYxQkE5QzJDREFDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALcNFAwQALcNMMA0GCSqGSIb3
DQEBCwUAA4IBAQBnrpaxHmSPYwOPP8LZ+rm/P4T6V1BF5clVh8qBt/ySMX6DjMDz
ucBPFtyvGcqVqE5LvKTmgX95PyEcX1rzcJ597PeJUsX+koYmyVZUe1SOW5d08xWS
QBAoMlltfdz/OVNZHHXO64/xoqQKN7wFvt6DRjLSOPGGQDQnbbhSbhjHCMDXT0ln
0m9v4JsaYUAc1FMM7BxV0KxIv2KWQChbJ/uTdCDfmMg9Kv4TWrNXhDhXk611azqt
p5mzFZnn2wJZ1mMh7kBQBDexFFMHylpdivcbjg2rbRpS7XQb3IF/r7qdb1E8xoJ8
xIQNP1tqcyg0Zt2B4rz65IGKR0pvlxiYtZG/
-----END CERTIFICATE-----