Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67A2E0C291D711F19ABCB71ECF1D38B0.roa
File:                     67A2E0C291D711F19ABCB71ECF1D38B0.roa (raw, json)
Hash identifier:          j+btSZpX/uyjr26XgDPLYrCELzr6/cxrg0ziVFqvN+o=
Subject key identifier:   8C:96:0B:FE:8E:FA:EA:58:8D:41:C1:1C:06:1C:81:6C:1C:33:C0:19
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CA01
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67A2E0C291D711F19ABCB71ECF1D38B0.roa
Signing time:             Thu 06 Aug 2026 20:42:57 +0000
ROA not before:           Thu 06 Aug 2026 20:42:53 +0000
ROA not after:            Sat 12 Sep 2026 20:42:53 +0000
asID:                     9009
IP address blocks:        45.195.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117249 (0x1ca01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  6 20:42:53 2026 GMT
            Not After : Sep 12 20:42:53 2026 GMT
        Subject: CN=6a74f1d1-e4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:7d:72:4b:9b:7a:8f:45:2f:59:30:a2:a9:
                    87:b4:a3:4c:88:43:08:dc:99:4b:42:8b:62:55:c4:
                    4c:ac:e5:ff:72:54:be:5e:88:2a:06:8e:9a:87:ef:
                    77:60:f4:74:33:64:11:88:8f:57:b7:39:1a:2d:fc:
                    90:6b:f3:48:62:09:a8:18:7a:31:fd:d7:b5:25:3e:
                    c2:7d:e4:7f:98:ca:be:89:fe:73:f8:71:86:3c:59:
                    49:5e:d1:88:31:87:9d:8b:8b:57:e0:57:b3:b2:20:
                    b5:bf:da:84:72:89:0f:52:57:b3:58:6d:0c:ca:fc:
                    9a:f6:07:59:a1:f5:ab:dd:9d:f3:7c:72:b1:15:28:
                    d6:f7:4f:6f:df:79:32:44:c1:7a:d7:37:3e:99:15:
                    75:31:3b:d7:1d:9d:5f:09:a4:89:cc:d3:2b:09:71:
                    99:49:b3:21:2b:92:a1:26:3c:b0:00:66:fb:b9:ea:
                    bf:49:7a:1c:76:64:40:97:f0:ed:64:ed:70:0b:79:
                    e9:cc:e5:d6:65:ef:a6:c9:43:ee:20:9d:16:c6:cc:
                    47:3d:9f:60:33:bd:3c:6a:43:2e:2e:9d:6e:31:ff:
                    12:91:25:6f:c0:e3:55:9d:4e:55:2f:7a:60:2d:74:
                    c4:14:32:7d:fe:c1:95:eb:4e:40:18:91:ac:95:67:
                    aa:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:96:0B:FE:8E:FA:EA:58:8D:41:C1:1C:06:1C:81:6C:1C:33:C0:19
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67A2E0C291D711F19ABCB71ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:05:fc:50:bc:e0:c9:3c:21:4a:8a:50:f3:c0:d5:51:8c:a1:
         fc:f1:02:50:8b:d3:c6:4d:68:12:90:fc:b7:8c:27:ac:fc:3b:
         bb:29:37:cc:bb:83:9e:76:cd:6f:41:31:de:e1:f0:81:a5:5a:
         b6:69:59:28:be:d3:19:f8:d0:73:a4:68:35:d9:8a:00:78:8d:
         aa:77:fb:00:04:cf:28:f9:48:93:96:b4:f9:81:97:7b:b1:2b:
         da:34:b9:ec:1f:bc:3a:68:f5:4c:6b:84:74:0a:09:0a:fe:00:
         d5:96:bd:c0:2e:18:9c:1c:ec:27:29:b5:8e:3c:b2:5a:c8:a0:
         d4:e0:fa:5b:31:92:f6:77:d9:27:09:26:89:62:cf:fa:5d:68:
         25:bc:8a:83:e6:a0:44:44:59:62:5f:c8:cf:88:28:12:43:7c:
         1f:e0:72:a0:e5:e9:79:d1:3a:41:55:4e:81:e4:9e:01:80:79:
         ed:39:c2:11:d9:60:25:86:de:63:9e:db:1e:40:b5:3b:b1:1f:
         97:61:5e:39:fb:01:73:71:9b:3c:57:e7:e0:3d:fd:3e:d9:66:
         1c:1f:fc:97:d9:da:2b:80:ae:5b:44:e7:7c:31:7d:b9:9f:11:
         50:16:22:93:4e:a5:bb:a4:2b:92:b5:24:41:07:15:39:82:40:
         96:ed:40:4f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcoBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODA2MjA0MjUzWhcNMjYwOTEyMjA0MjUzWjAYMRYw
FAYDVQQDEw02YTc0ZjFkMS1lNGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuad9ckubeo9FL1kwoqmHtKNMiEMI3JlLQotiVcRMrOX/clS+XogqBo6a
h+93YPR0M2QRiI9XtzkaLfyQa/NIYgmoGHox/de1JT7CfeR/mMq+if5z+HGGPFlJ
XtGIMYedi4tX4FezsiC1v9qEcokPUlezWG0Myvya9gdZofWr3Z3zfHKxFSjW909v
33kyRMF61zc+mRV1MTvXHZ1fCaSJzNMrCXGZSbMhK5KhJjywAGb7ueq/SXocdmRA
l/DtZO1wC3npzOXWZe+myUPuIJ0WxsxHPZ9gM708akMuLp1uMf8SkSVvwONVnU5V
L3pgLXTEFDJ9/sGV605AGJGslWeq/wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIyW
C/6O+upYjUHBHAYcgWwcM8AZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82N0EyRTBDMjkxRDcxMUYxOUFCQ0I3MUVDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcNuMA0GCSqGSIb3DQEBCwUA
A4IBAQAoBfxQvODJPCFKilDzwNVRjKH88QJQi9PGTWgSkPy3jCes/Du7KTfMu4Oe
ds1vQTHe4fCBpVq2aVkovtMZ+NBzpGg12YoAeI2qd/sABM8o+UiTlrT5gZd7sSva
NLnsH7w6aPVMa4R0CgkK/gDVlr3ALhicHOwnKbWOPLJayKDU4PpbMZL2d9knCSaJ
Ys/6XWglvIqD5qBERFliX8jPiCgSQ3wf4HKg5el50TpBVU6B5J4BgHntOcIR2WAl
ht5jntseQLU7sR+XYV45+wFzcZs8V+fgPf0+2WYcH/yX2dorgK5bROd8MX25nxFQ
FiKTTqW7pCuStSRBBxU5gkCW7UBP
-----END CERTIFICATE-----