Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/674D8A46C08511F192B4FA0CCF1D38B0.roa
File:                     674D8A46C08511F192B4FA0CCF1D38B0.roa (raw, json)
Hash identifier:          uq+Nx5DTXXhgtQwpcgXVcODkjirla1GYYe4yeiUOr18=
Subject key identifier:   8E:4D:55:87:1E:C4:DD:BE:B0:AF:F3:7A:7E:AD:2B:81:E1:83:D2:57
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DB2A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/674D8A46C08511F192B4FA0CCF1D38B0.roa
Signing time:             Mon 05 Oct 2026 06:24:22 +0000
ROA not before:           Mon 05 Oct 2026 06:24:18 +0000
ROA not after:            Sat 07 Nov 2026 06:24:18 +0000
asID:                     3257
IP address blocks:        45.199.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121642 (0x1db2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  5 06:24:18 2026 GMT
            Not After : Nov  7 06:24:18 2026 GMT
        Subject: CN=6ac34296-3f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:aa:64:34:44:0e:e1:df:a2:06:b7:bf:54:8e:
                    51:1d:b9:3b:54:49:43:e6:e3:58:2f:a7:b6:c8:63:
                    52:7e:3a:f0:ab:27:0c:4a:4a:1a:90:37:47:b0:16:
                    90:97:52:8c:ea:b5:5a:66:e3:ad:73:7c:06:69:94:
                    23:3f:ea:04:a5:29:dc:af:e7:bd:5c:d9:ae:8c:45:
                    bd:9d:c3:62:e3:d8:a0:38:88:70:24:0e:d2:63:e8:
                    5e:c9:a1:17:3a:9e:8a:ed:23:42:ce:55:b1:74:2f:
                    c2:15:c9:4e:93:58:e7:93:dd:cc:1c:c6:14:33:fd:
                    3e:f0:d1:31:b1:b9:5b:12:69:f8:5f:68:91:e9:e9:
                    00:ee:9e:c8:23:4c:8b:61:57:43:69:0b:17:40:3b:
                    de:1c:ee:db:e4:03:dc:88:c8:4a:1f:3a:b1:8b:05:
                    17:85:d6:1e:cd:90:ee:e1:ac:36:00:5b:51:85:18:
                    84:bf:e9:0e:a5:e3:4a:6a:81:d7:fe:d1:86:ef:f7:
                    7a:af:b1:b3:cd:fe:a5:0c:d8:2c:f9:8e:f7:e9:6b:
                    fa:cf:59:f5:34:f9:d6:a9:53:40:b6:c6:0f:19:16:
                    06:18:1a:4a:cf:03:39:dd:a9:37:f4:5f:4d:7e:f6:
                    d4:7d:86:a5:58:9a:a7:dd:fd:12:45:ee:b1:bb:1b:
                    65:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4D:55:87:1E:C4:DD:BE:B0:AF:F3:7A:7E:AD:2B:81:E1:83:D2:57
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/674D8A46C08511F192B4FA0CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:b4:b7:17:ee:b3:d9:ea:4d:59:a4:ef:62:eb:3b:7d:ba:83:
         89:b1:ae:55:81:62:77:ed:f7:e8:ed:3a:1e:aa:aa:78:7e:73:
         0e:83:bb:b1:d7:72:96:0f:c4:47:5f:64:79:97:e8:d8:15:2a:
         f3:e5:e1:d6:29:87:3f:51:2c:19:d2:b2:06:69:9e:1a:dc:af:
         4b:ed:92:20:4b:d1:20:26:66:36:43:4c:c9:1c:7f:4f:65:65:
         4b:ed:64:04:52:0a:9f:b3:2f:db:fc:c1:ef:ab:c7:5c:72:33:
         34:36:49:5d:ae:06:51:11:bc:6b:1b:1e:db:d9:80:95:18:18:
         8e:67:6d:d1:b4:48:29:27:31:79:14:e9:10:15:58:41:08:5e:
         43:81:bc:a3:a1:4b:6d:7e:c7:48:f0:4c:7a:eb:f4:18:7c:ff:
         9f:f2:be:48:fa:dc:2d:18:48:a0:39:3b:c5:ab:b1:fc:2d:b8:
         3d:07:79:df:bc:84:4f:b1:08:f0:8c:b9:0d:87:02:58:19:6c:
         79:c9:85:cb:5d:54:5e:ce:6f:f0:76:da:f8:d8:0c:5d:4c:68:
         b7:fe:a9:8f:72:f6:d7:20:74:11:34:01:ad:72:a4:6f:07:0f:
         2b:f6:53:87:8a:27:f2:9a:67:3d:99:b7:b7:0a:23:65:05:38:
         c9:6b:4f:8b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdsqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDA1MDYyNDE4WhcNMjYxMTA3MDYyNDE4WjAYMRYw
FAYDVQQDEw02YWMzNDI5Ni0zZjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA16pkNEQO4d+iBre/VI5RHbk7VElD5uNYL6e2yGNSfjrwqycMSkoakDdH
sBaQl1KM6rVaZuOtc3wGaZQjP+oEpSncr+e9XNmujEW9ncNi49igOIhwJA7SY+he
yaEXOp6K7SNCzlWxdC/CFclOk1jnk93MHMYUM/0+8NExsblbEmn4X2iR6ekA7p7I
I0yLYVdDaQsXQDveHO7b5APciMhKHzqxiwUXhdYezZDu4aw2AFtRhRiEv+kOpeNK
aoHX/tGG7/d6r7Gzzf6lDNgs+Y736Wv6z1n1NPnWqVNAtsYPGRYGGBpKzwM53ak3
9F9NfvbUfYalWJqn3f0SRe6xuxtlIwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFI5N
VYcexN2+sK/zen6tK4Hhg9JXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NzREOEE0NkMwODUxMUYxOTJCNEZBMENDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALceVMA0GCSqGSIb3DQEBCwUA
A4IBAQBBtLcX7rPZ6k1ZpO9i6zt9uoOJsa5VgWJ37ffo7Toeqqp4fnMOg7ux13KW
D8RHX2R5l+jYFSrz5eHWKYc/USwZ0rIGaZ4a3K9L7ZIgS9EgJmY2Q0zJHH9PZWVL
7WQEUgqfsy/b/MHvq8dccjM0NkldrgZREbxrGx7b2YCVGBiOZ23RtEgpJzF5FOkQ
FVhBCF5DgbyjoUttfsdI8Ex66/QYfP+f8r5I+twtGEigOTvFq7H8Lbg9B3nfvIRP
sQjwjLkNhwJYGWx5yYXLXVRezm/wdtr42AxdTGi3/qmPcvbXIHQRNAGtcqRvBw8r
9lOHiifymmc9mbe3CiNlBTjJa0+L
-----END CERTIFICATE-----