Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CFA09FABDE411F18BC0F8D0CE1D38B0.roa
File:                     5CFA09FABDE411F18BC0F8D0CE1D38B0.roa (raw, json)
Hash identifier:          BhNXwHNCVXZKRk73wvX3iQkUKDTmmqnyZ8+zWIcZDJ8=
Subject key identifier:   F0:AE:BA:10:61:7F:2F:0C:D8:B1:60:E1:B2:63:F2:E6:1F:55:8D:0B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D9CB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CFA09FABDE411F18BC0F8D0CE1D38B0.roa
Signing time:             Thu 01 Oct 2026 22:06:34 +0000
ROA not before:           Fri 02 Oct 2026 22:06:28 +0000
ROA not after:            Wed 21 Oct 2026 22:06:28 +0000
asID:                     274879
IP address blocks:        45.194.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121291 (0x1d9cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  2 22:06:28 2026 GMT
            Not After : Oct 21 22:06:28 2026 GMT
        Subject: CN=6abed96a-f95d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:95:26:87:4b:a5:5a:7d:25:42:71:f5:65:ad:
                    1c:59:3d:17:3b:d3:8a:48:f7:a3:01:18:0e:53:21:
                    d0:09:8c:79:73:13:15:e4:36:bd:17:05:46:98:87:
                    2f:76:5e:98:7f:96:12:99:28:b0:1b:70:d0:02:ae:
                    37:40:9a:db:a3:65:a2:fe:d2:e3:c2:87:1c:5f:78:
                    41:ed:71:9f:a1:98:69:6a:c2:1c:f6:6c:20:97:db:
                    41:f1:42:5e:59:42:d4:06:bc:43:a8:4b:4f:03:f9:
                    49:49:78:53:a3:63:5d:cd:c0:37:b4:26:16:18:e4:
                    0f:68:c2:c7:b2:97:19:3b:62:27:61:de:98:54:2d:
                    68:7c:4c:c8:70:31:e9:62:cf:6b:1c:f8:e9:39:a8:
                    1a:83:0b:5c:f6:0f:47:f9:b2:f3:5f:27:3a:34:97:
                    33:cc:b7:a2:df:27:51:e5:15:39:f0:e3:8a:6c:11:
                    d2:76:9e:10:0a:97:43:85:35:a3:9a:9f:61:13:c3:
                    5b:b9:86:b1:dc:0d:3c:61:5e:85:b3:5b:07:e2:66:
                    fa:4f:ea:63:70:ce:4f:6d:fd:07:86:d0:4b:48:02:
                    c3:44:87:28:55:64:0e:63:9f:3b:93:e3:c0:4a:35:
                    cb:0f:45:ad:4a:9d:6e:96:ae:b5:ee:3e:c8:90:a5:
                    71:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:AE:BA:10:61:7F:2F:0C:D8:B1:60:E1:B2:63:F2:E6:1F:55:8D:0B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CFA09FABDE411F18BC0F8D0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:0b:79:1d:da:7c:03:eb:bc:b4:3e:31:20:6f:aa:24:b7:74:
         1f:9f:a0:c6:e1:a9:97:b9:87:61:5e:63:4d:c7:ae:dc:eb:88:
         42:67:d9:20:fc:df:b8:58:9a:a8:bb:7b:55:e4:36:dc:81:a1:
         02:f0:6a:31:a9:0d:9a:77:ef:34:bc:d2:df:5c:f7:a0:28:79:
         d7:95:d0:61:5d:90:d4:0a:81:e3:fa:ff:d5:c7:13:e1:6a:47:
         ff:09:72:ea:e3:c7:eb:63:e7:ad:71:ad:54:8e:86:b8:25:ab:
         d6:ef:af:ce:8b:7e:24:52:06:e3:0c:c2:91:99:ae:a9:5b:5b:
         ad:7c:5c:ea:d0:bc:f1:45:70:58:38:b4:68:7b:fa:34:03:cb:
         e1:c9:bf:52:2f:8e:9e:80:62:4c:a3:12:5b:a3:03:c9:9d:c6:
         08:e8:22:38:74:34:16:09:aa:6f:00:16:5a:d8:7b:0f:06:06:
         5c:67:4c:a7:9f:be:02:7a:9a:dd:7c:57:92:4b:e7:06:11:c9:
         35:9b:a0:66:50:36:6b:9f:74:36:de:aa:6b:59:f3:69:73:e8:
         15:14:ea:c6:7d:ba:0e:f3:dc:4b:9a:f0:a7:72:79:b2:a0:ca:
         76:0d:cb:8c:5f:ac:aa:39:e1:9c:d6:25:3d:77:6f:0b:50:f2:
         bf:20:96:a2
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdnLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDAyMjIwNjI4WhcNMjYxMDIxMjIwNjI4WjAYMRYw
FAYDVQQDEw02YWJlZDk2YS1mOTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzZUmh0ulWn0lQnH1Za0cWT0XO9OKSPejARgOUyHQCYx5cxMV5Da9FwVG
mIcvdl6Yf5YSmSiwG3DQAq43QJrbo2Wi/tLjwoccX3hB7XGfoZhpasIc9mwgl9tB
8UJeWULUBrxDqEtPA/lJSXhTo2NdzcA3tCYWGOQPaMLHspcZO2InYd6YVC1ofEzI
cDHpYs9rHPjpOagagwtc9g9H+bLzXyc6NJczzLei3ydR5RU58OOKbBHSdp4QCpdD
hTWjmp9hE8NbuYax3A08YV6Fs1sH4mb6T+pjcM5Pbf0HhtBLSALDRIcoVWQOY587
k+PASjXLD0WtSp1ulq617j7IkKVx1wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPCu
uhBhfy8M2LFg4bJj8uYfVY0LMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81Q0ZBMDlGQUJERTQxMUYxOEJDMEY4RDBDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcIHMA0GCSqGSIb3DQEBCwUA
A4IBAQApC3kd2nwD67y0PjEgb6okt3Qfn6DG4amXuYdhXmNNx67c64hCZ9kg/N+4
WJqou3tV5DbcgaEC8GoxqQ2ad+80vNLfXPegKHnXldBhXZDUCoHj+v/VxxPhakf/
CXLq48frY+etca1Ujoa4JavW76/Oi34kUgbjDMKRma6pW1utfFzq0LzxRXBYOLRo
e/o0A8vhyb9SL46egGJMoxJbowPJncYI6CI4dDQWCapvABZa2HsPBgZcZ0ynn74C
eprdfFeSS+cGEck1m6BmUDZrn3Q23qprWfNpc+gVFOrGfboO89xLmvCncnmyoMp2
DcuMX6yqOeGc1iU9d28LUPK/IJai
-----END CERTIFICATE-----