Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/572E0C70C56311F1A9E76FE0CE1D38B0.roa
File:                     572E0C70C56311F1A9E76FE0CE1D38B0.roa (raw, json)
Hash identifier:          qL4exMcya/ao3Rh/3FZThplpjSPlUewMsHZiZVOqWnY=
Subject key identifier:   62:A2:82:92:26:1B:EE:D4:8E:C3:8C:D0:69:87:CD:5B:6D:A1:75:65
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DCAF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/572E0C70C56311F1A9E76FE0CE1D38B0.roa
Signing time:             Sun 11 Oct 2026 11:03:08 +0000
ROA not before:           Sun 11 Oct 2026 11:03:03 +0000
ROA not after:            Wed 18 Nov 2026 11:03:03 +0000
asID:                     139613
IP address blocks:        45.195.60.0/24 maxlen: 24
                          45.195.62.0/24 maxlen: 24
                          45.195.192.0/24 maxlen: 24
                          45.195.196.0/24 maxlen: 24
                          45.195.197.0/24 maxlen: 24
                          45.197.1.0/24 maxlen: 24
                          45.197.2.0/24 maxlen: 24
                          45.197.4.0/24 maxlen: 24
                          45.197.5.0/24 maxlen: 24
                          45.199.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122031 (0x1dcaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 11 11:03:03 2026 GMT
            Not After : Nov 18 11:03:03 2026 GMT
        Subject: CN=6acb6cec-3b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:33:5c:e7:01:e7:bb:6a:13:0c:2b:db:91:7a:
                    60:bf:9e:9a:15:45:2b:08:ec:06:2e:aa:52:fc:69:
                    ba:a6:9f:52:35:6d:d6:f8:18:c5:43:7e:3a:43:09:
                    ee:0d:56:fc:e4:1f:7b:aa:e4:f4:43:98:39:9f:46:
                    3a:61:4b:03:3d:c8:02:87:ee:28:7c:b2:6a:23:5f:
                    c7:52:b0:90:f4:cc:f5:f6:fa:cc:62:9d:e0:f0:68:
                    5d:19:6e:b7:eb:ba:98:80:13:43:b0:cc:17:2c:ec:
                    bc:14:fa:39:8b:ea:28:e2:82:0f:80:89:f4:4a:f4:
                    41:4a:b9:f8:07:b6:35:c6:dd:92:c2:d0:2d:f4:5d:
                    46:19:3f:61:62:85:e6:c7:c2:6f:b1:11:f9:fe:a6:
                    4f:25:5a:85:8c:3d:1c:66:95:16:4f:af:81:cc:48:
                    29:64:03:c9:ca:ca:c8:6d:b6:39:05:f6:48:55:8e:
                    6e:73:f1:97:e6:60:af:dc:da:b4:1e:09:37:cd:29:
                    15:39:8f:20:00:d6:cc:4b:e4:4b:2d:84:6c:9d:03:
                    d6:b0:af:fe:a0:b3:a8:54:c0:47:69:b2:64:44:ba:
                    6c:e2:ec:b8:ed:7a:74:64:4b:0e:d0:aa:02:40:56:
                    99:87:c5:be:10:b6:68:62:49:a8:d3:ea:4f:df:cd:
                    11:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A2:82:92:26:1B:EE:D4:8E:C3:8C:D0:69:87:CD:5B:6D:A1:75:65
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/572E0C70C56311F1A9E76FE0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.60.0/24
                  45.195.62.0/24
                  45.195.192.0/24
                  45.195.196.0/23
                  45.197.1.0-45.197.2.255
                  45.197.4.0/23
                  45.199.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:55:f8:c1:e2:c3:a2:b3:54:af:ba:a5:e5:b0:df:57:fd:8c:
         2b:10:40:a0:c7:47:23:9e:66:fd:8e:f9:5d:ee:8c:d5:07:bc:
         78:35:bf:22:93:29:87:1d:ab:a7:da:e1:fe:b3:d0:f0:a3:5f:
         92:c7:97:7c:ec:3e:ec:38:4f:03:ac:d3:08:05:03:f2:ed:24:
         05:0f:99:e9:4f:89:ca:86:ad:c1:7d:ca:80:42:81:e6:ca:cc:
         75:fe:59:b3:f0:37:52:1f:d7:47:0b:a5:f1:e9:e0:26:ac:3b:
         00:7e:2b:a9:ce:3a:a4:ff:1d:1d:e0:ce:35:4b:4c:0c:bb:01:
         57:15:65:9a:0b:83:98:81:4e:5c:00:15:81:56:d5:21:97:47:
         17:ae:4d:ff:a1:d5:84:e6:21:1e:cb:11:f5:9a:df:61:d0:b6:
         8d:3d:1c:bf:97:26:17:19:80:48:53:41:fc:50:2b:ae:d2:24:
         df:41:8a:d3:12:8a:cd:79:06:51:92:f2:97:26:b9:a3:9a:fa:
         a6:db:b3:44:de:27:bc:37:12:17:be:3a:6f:92:13:09:a0:60:
         f6:85:42:9c:ed:e0:88:bc:a2:78:0a:ab:9b:da:6a:a4:c5:1f:
         77:16:45:c1:8c:14:1e:6d:dd:de:36:b1:be:00:60:3f:a9:40:
         32:9e:01:b3
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIDAdyvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDExMTEwMzAzWhcNMjYxMTE4MTEwMzAzWjAYMRYw
FAYDVQQDEw02YWNiNmNlYy0zYjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqDNc5wHnu2oTDCvbkXpgv56aFUUrCOwGLqpS/Gm6pp9SNW3W+BjFQ346
QwnuDVb85B97quT0Q5g5n0Y6YUsDPcgCh+4ofLJqI1/HUrCQ9Mz19vrMYp3g8Ghd
GW6367qYgBNDsMwXLOy8FPo5i+oo4oIPgIn0SvRBSrn4B7Y1xt2SwtAt9F1GGT9h
YoXmx8JvsRH5/qZPJVqFjD0cZpUWT6+BzEgpZAPJysrIbbY5BfZIVY5uc/GX5mCv
3Nq0Hgk3zSkVOY8gANbMS+RLLYRsnQPWsK/+oLOoVMBHabJkRLps4uy47Xp0ZEsO
0KoCQFaZh8W+ELZoYkmo0+pP380RvQIDAQABo4ICzjCCAsowHQYDVR0OBBYEFGKi
gpImG+7UjsOM0GmHzVttoXVlMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NzJFMEM3MEM1NjMxMUYxQTlFNzZGRTBDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQALcM8AwQALcM+AwQALcPAAwQB
LcPEMAwDBAAtxQEDBAAtxQIDBAEtxQQDBAAtx78wDQYJKoZIhvcNAQELBQADggEB
AF1V+MHiw6KzVK+6peWw31f9jCsQQKDHRyOeZv2O+V3ujNUHvHg1vyKTKYcdq6fa
4f6z0PCjX5LHl3zsPuw4TwOs0wgFA/LtJAUPmelPicqGrcF9yoBCgebKzHX+WbPw
N1If10cLpfHp4CasOwB+K6nOOqT/HR3gzjVLTAy7AVcVZZoLg5iBTlwAFYFW1SGX
RxeuTf+h1YTmIR7LEfWa32HQto09HL+XJhcZgEhTQfxQK67SJN9BitMSis15BlGS
8pcmuaOa+qbbs0TeJ7w3Ehe+Om+SEwmgYPaFQpzt4Ii8ongKq5vaaqTFH3cWRcGM
FB5t3d42sb4AYD+pQDKeAbM=
-----END CERTIFICATE-----