Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53CD9A488E4811F1926BE71DCF1D38B0.roa
File:                     53CD9A488E4811F1926BE71DCF1D38B0.roa (raw, json)
Hash identifier:          7/pdcQ83ewXa+qDUPcfa5HaNFKIFup+3qqKkkR1Saho=
Subject key identifier:   0F:86:A8:0D:CF:F8:9F:58:73:30:51:D9:71:FC:1B:E0:49:8B:E0:E2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C923
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53CD9A488E4811F1926BE71DCF1D38B0.roa
Signing time:             Sun 02 Aug 2026 08:01:12 +0000
ROA not before:           Sun 02 Aug 2026 08:01:08 +0000
ROA not after:            Thu 10 Sep 2026 08:01:08 +0000
asID:                     401366
IP address blocks:        45.207.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117027 (0x1c923)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  2 08:01:08 2026 GMT
            Not After : Sep 10 08:01:08 2026 GMT
        Subject: CN=6a6ef948-cb63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:27:19:0f:93:41:b8:8a:ce:4a:a9:3a:3e:12:
                    7d:7f:e0:0b:28:57:d3:91:66:2f:f7:da:df:9e:c0:
                    ef:bf:c4:4f:db:a7:28:53:91:40:d5:8e:ae:99:00:
                    1f:40:8f:7c:f6:b8:66:2a:fb:39:f7:52:76:c9:93:
                    76:d3:2c:fb:91:d0:85:3f:96:90:db:77:b1:f5:6f:
                    38:d0:ce:8b:4c:ce:0a:e2:3d:0f:7a:fc:f7:8c:c2:
                    44:d6:d9:e2:4a:57:f1:56:77:ec:4f:0e:11:28:e4:
                    31:be:b2:a1:4b:03:09:38:e9:f4:29:f8:a0:9d:84:
                    99:27:9b:60:0f:94:cc:a1:95:0c:c5:99:75:24:8d:
                    7d:71:66:86:16:79:b8:15:85:55:d7:75:d2:e5:bc:
                    a2:2b:31:6f:24:c6:28:cf:d6:6f:78:6a:fa:bd:b4:
                    35:a4:16:d5:69:bb:78:a2:9a:f0:28:bd:89:2c:48:
                    72:d1:a0:34:0d:2d:ec:48:1b:17:5a:ef:91:23:11:
                    3d:d1:cc:31:c9:88:04:5c:38:37:c4:56:f5:4a:6e:
                    a2:5b:60:04:11:22:d3:96:30:0b:6b:5f:48:ab:11:
                    18:d7:2f:fb:e0:be:21:55:51:4d:bf:7a:46:46:41:
                    6e:81:59:a2:56:f7:eb:b8:77:f4:42:af:75:ee:ed:
                    2b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:86:A8:0D:CF:F8:9F:58:73:30:51:D9:71:FC:1B:E0:49:8B:E0:E2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53CD9A488E4811F1926BE71DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:d9:08:f5:08:30:d0:c6:5a:2c:54:6d:c8:5d:28:5a:b6:ac:
         13:cf:0d:f8:91:e3:b6:8e:94:e4:de:83:11:c4:4a:b7:34:82:
         03:81:c0:65:6e:94:2e:47:b4:24:75:2a:32:76:57:0c:56:55:
         2c:40:e2:90:0c:8f:87:8d:81:40:ae:b2:5e:75:bc:b4:d8:a1:
         71:a3:41:3c:20:46:61:37:8f:59:62:84:42:1e:a1:23:7b:29:
         d6:30:25:27:95:09:10:bf:28:96:c5:66:66:71:fe:61:6c:af:
         41:a5:6a:34:b0:a1:e7:b8:80:1f:67:c1:ad:e3:86:ba:72:ac:
         d9:c8:3c:4a:a4:5e:03:ca:47:bb:f0:ee:4b:57:d5:f7:43:4e:
         e2:c5:03:49:a2:88:45:86:4a:fc:91:75:9f:b0:55:a0:6f:78:
         de:86:40:c4:8a:0a:4a:bb:b1:98:4c:ed:14:c6:d1:93:36:11:
         c7:cb:48:90:97:ba:67:d8:8c:ad:28:1e:78:d3:d6:49:9c:78:
         f7:23:36:33:83:d9:0c:0b:f7:5d:cd:29:04:4c:de:09:14:c8:
         86:40:e4:3f:f9:4e:27:4a:bc:40:bc:52:ad:df:97:84:5b:04:
         53:6d:97:e7:c0:a9:c0:00:c6:e8:08:44:75:ba:4f:2f:bd:5c:
         93:66:d8:48
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAckjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODAyMDgwMTA4WhcNMjYwOTEwMDgwMTA4WjAYMRYw
FAYDVQQDEw02YTZlZjk0OC1jYjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7ycZD5NBuIrOSqk6PhJ9f+ALKFfTkWYv99rfnsDvv8RP26coU5FA1Y6u
mQAfQI989rhmKvs591J2yZN20yz7kdCFP5aQ23ex9W840M6LTM4K4j0Pevz3jMJE
1tniSlfxVnfsTw4RKOQxvrKhSwMJOOn0KfignYSZJ5tgD5TMoZUMxZl1JI19cWaG
Fnm4FYVV13XS5byiKzFvJMYoz9ZveGr6vbQ1pBbVabt4oprwKL2JLEhy0aA0DS3s
SBsXWu+RIxE90cwxyYgEXDg3xFb1Sm6iW2AEESLTljALa19IqxEY1y/74L4hVVFN
v3pGRkFugVmiVvfruHf0Qq917u0rPwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFA+G
qA3P+J9YczBR2XH8G+BJi+DiMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81M0NEOUE0ODhFNDgxMUYxOTI2QkU3MURDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc8uMA0GCSqGSIb3DQEBCwUA
A4IBAQAS2Qj1CDDQxlosVG3IXShatqwTzw34keO2jpTk3oMRxEq3NIIDgcBlbpQu
R7QkdSoydlcMVlUsQOKQDI+HjYFArrJedby02KFxo0E8IEZhN49ZYoRCHqEjeynW
MCUnlQkQvyiWxWZmcf5hbK9BpWo0sKHnuIAfZ8Gt44a6cqzZyDxKpF4Dyke78O5L
V9X3Q07ixQNJoohFhkr8kXWfsFWgb3jehkDEigpKu7GYTO0UxtGTNhHHy0iQl7pn
2IytKB5409ZJnHj3IzYzg9kMC/ddzSkETN4JFMiGQOQ/+U4nSrxAvFKt35eEWwRT
bZfnwKnAAMboCER1uk8vvVyTZthI
-----END CERTIFICATE-----