Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A1DAC1CA79711F18E022BB9CE1D38B0.roa
File:                     6A1DAC1CA79711F18E022BB9CE1D38B0.roa (raw, json)
Hash identifier:          Mo2wInpRozwT3zkuWz7xgheiOGrjt4HUSgPwmQ3L0Nw=
Subject key identifier:   51:64:8E:11:1E:79:49:65:9F:04:18:DC:C8:0D:F2:66:D7:68:AA:73
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D31E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A1DAC1CA79711F18E022BB9CE1D38B0.roa
Signing time:             Thu 03 Sep 2026 13:00:19 +0000
ROA not before:           Thu 03 Sep 2026 13:00:15 +0000
ROA not after:            Thu 22 Oct 2026 13:00:15 +0000
asID:                     142032
IP address blocks:        45.205.16.0/20 maxlen: 24
                          45.205.16.0/21 maxlen: 24
                          45.205.24.0/21 maxlen: 24
                          45.207.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119582 (0x1d31e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  3 13:00:15 2026 GMT
            Not After : Oct 22 13:00:15 2026 GMT
        Subject: CN=6a996f63-ba74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:81:f0:f7:46:75:a0:f5:83:cb:9d:c5:d8:
                    af:95:38:a5:12:c8:a8:9e:93:6e:49:4b:65:2d:eb:
                    d4:fb:21:94:67:e0:c0:7a:64:5f:53:c7:9b:cb:a8:
                    44:7f:3d:c7:e2:69:2b:8d:12:22:3d:db:d3:7b:f5:
                    60:00:70:89:2a:15:c1:63:17:8a:63:25:37:35:3f:
                    31:59:d6:8c:3b:c9:42:9a:56:aa:9d:02:ee:b4:e6:
                    6a:fa:d7:83:49:5c:22:92:f5:f1:75:97:c6:7f:94:
                    11:67:1f:11:16:d7:0d:ef:de:3a:ee:ac:b3:79:ba:
                    61:eb:31:85:18:b5:98:dd:92:7f:77:20:e6:4e:4e:
                    9b:75:ac:88:f4:2f:94:63:a4:c4:a0:1b:dd:37:63:
                    df:7c:67:47:3d:7d:39:4e:ac:d1:a1:58:9e:a4:a6:
                    3c:50:4d:b1:fc:1f:a8:f8:18:da:bf:30:74:1c:87:
                    3e:fc:a8:43:06:e6:1f:94:86:44:ef:93:b0:0f:aa:
                    82:1b:ab:67:f2:b8:b0:c8:49:db:37:32:4a:68:51:
                    7e:04:e1:59:0d:1d:98:78:43:f2:35:e4:57:69:e4:
                    4b:6a:32:88:0f:df:80:69:00:73:ce:76:02:24:8e:
                    de:66:d3:ee:2e:05:7c:68:a3:07:fa:b0:b1:24:cb:
                    27:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:64:8E:11:1E:79:49:65:9F:04:18:DC:C8:0D:F2:66:D7:68:AA:73
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6A1DAC1CA79711F18E022BB9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.16.0/20
                  45.207.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         83:dc:06:ea:42:2d:7e:89:e3:f4:cb:7c:ea:64:25:66:bf:28:
         23:7e:6e:17:73:0e:e4:05:26:e4:71:0f:41:f9:21:94:3e:04:
         a9:b1:e1:da:67:f4:6f:e1:b5:89:9a:1b:dc:eb:8a:9b:ec:79:
         d0:ad:d1:dd:a9:6d:f7:5f:df:a1:fb:80:d4:88:96:03:cb:2c:
         33:7b:a8:3d:52:d8:d6:a1:e3:89:12:35:09:e9:d7:23:bb:b5:
         88:05:19:96:51:f6:a6:44:38:a2:aa:dc:30:71:77:d3:57:1d:
         fa:aa:fe:02:c6:bc:f7:56:10:7b:a9:75:e6:88:90:09:15:4a:
         b2:1d:ee:4e:fc:c6:18:5f:aa:0c:a0:a2:bf:7b:4a:6d:86:ab:
         d4:e8:7e:26:7e:8e:d0:ce:68:c2:09:c9:d8:9c:e9:70:69:0a:
         85:3a:c3:bf:77:27:37:b2:3b:05:44:ea:10:2d:fc:d0:c1:55:
         e9:8f:6f:03:19:70:03:80:7e:65:31:3b:7e:47:51:61:78:35:
         7a:74:88:50:56:bf:42:1b:2e:1f:7d:f6:fa:fb:3b:7d:8c:9a:
         dd:b4:c8:d0:3d:40:8d:87:57:12:7e:73:0f:8e:4a:c3:b6:5e:
         37:1b:f6:15:c5:12:6d:f5:56:8a:8d:37:d2:18:86:51:a4:8b:
         d2:9b:71:a4
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAdMeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTAzMTMwMDE1WhcNMjYxMDIyMTMwMDE1WjAYMRYw
FAYDVQQDEw02YTk5NmY2My1iYTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArn+B8PdGdaD1g8udxdivlTilEsionpNuSUtlLevU+yGUZ+DAemRfU8eb
y6hEfz3H4mkrjRIiPdvTe/VgAHCJKhXBYxeKYyU3NT8xWdaMO8lCmlaqnQLutOZq
+teDSVwikvXxdZfGf5QRZx8RFtcN79467qyzebph6zGFGLWY3ZJ/dyDmTk6bdayI
9C+UY6TEoBvdN2PffGdHPX05TqzRoViepKY8UE2x/B+o+BjavzB0HIc+/KhDBuYf
lIZE75OwD6qCG6tn8riwyEnbNzJKaFF+BOFZDR2YeEPyNeRXaeRLajKID9+AaQBz
znYCJI7eZtPuLgV8aKMH+rCxJMsnJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFk
jhEeeUllnwQY3MgN8mbXaKpzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QTFEQUMxQ0E3OTcxMUYxOEUwMjJCQjlDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQELc0QAwQFLc/AMA0GCSqGSIb3
DQEBCwUAA4IBAQCD3AbqQi1+ieP0y3zqZCVmvygjfm4Xcw7kBSbkcQ9B+SGUPgSp
seHaZ/Rv4bWJmhvc64qb7HnQrdHdqW33X9+h+4DUiJYDyywze6g9UtjWoeOJEjUJ
6dcju7WIBRmWUfamRDiiqtwwcXfTVx36qv4Cxrz3VhB7qXXmiJAJFUqyHe5O/MYY
X6oMoKK/e0pthqvU6H4mfo7QzmjCCcnYnOlwaQqFOsO/dyc3sjsFROoQLfzQwVXp
j28DGXADgH5lMTt+R1FheDV6dIhQVr9CGy4fffb6+zt9jJrdtMjQPUCNh1cSfnMP
jkrDtl43G/YVxRJt9VaKjTfSGIZRpIvSm3Gk
-----END CERTIFICATE-----