Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BF9B638C47B11F19FC358FBCE1D38B0.roa
File:                     6BF9B638C47B11F19FC358FBCE1D38B0.roa (raw, json)
Hash identifier:          ijYa3xIjBgHUmvKXsDb1b/l+r7hFH5k2KcPLNNgxx10=
Subject key identifier:   B7:16:4D:CC:2F:B2:9A:F2:E2:BF:62:35:16:5A:96:F2:D8:C8:6A:8A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC4C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BF9B638C47B11F19FC358FBCE1D38B0.roa
Signing time:             Sat 10 Oct 2026 07:23:00 +0000
ROA not before:           Sat 10 Oct 2026 07:22:55 +0000
ROA not after:            Tue 10 Nov 2026 07:22:55 +0000
asID:                     61112
IP address blocks:        45.192.240.0/22 maxlen: 24
                          45.196.96.0/24 maxlen: 24
                          45.196.97.0/24 maxlen: 24
                          45.202.240.0/22 maxlen: 24
                          45.202.244.0/24 maxlen: 24
                          45.202.245.0/24 maxlen: 24
                          45.202.246.0/23 maxlen: 24
                          45.202.246.0/24 maxlen: 24
                          45.202.247.0/24 maxlen: 24
                          45.202.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121932 (0x1dc4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 10 07:22:55 2026 GMT
            Not After : Nov 10 07:22:55 2026 GMT
        Subject: CN=6ac9e7d4-ef20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:85:cc:14:5f:b7:50:cb:73:97:d6:8b:7a:ed:
                    ae:c3:d6:0f:f6:f1:37:de:f3:6b:3f:4d:6a:15:4b:
                    e3:72:cc:c0:70:e6:0b:32:fb:3e:04:09:c2:78:08:
                    80:cf:12:71:cd:92:cf:37:0a:e9:ec:8d:17:d4:b7:
                    21:ff:b6:a2:85:bf:12:0f:b2:fe:76:c9:46:0b:5c:
                    cb:e0:07:47:02:3e:ba:3e:bb:ec:89:e3:cf:0b:91:
                    c3:ae:9b:a3:f4:2e:1c:6e:f9:ad:41:46:d4:04:43:
                    1a:39:b0:1c:c3:0c:9e:33:0c:ec:9e:f9:b2:7e:5c:
                    c6:fc:41:3b:c2:98:a2:b7:ac:bc:91:ef:d7:bf:26:
                    00:d4:2a:d7:50:db:46:62:17:b6:dc:65:cd:c2:8d:
                    b4:f4:62:7a:88:8f:1d:e9:fc:80:12:a9:19:c7:4d:
                    47:e4:47:c8:a7:fc:4f:33:6d:af:ef:f2:56:60:eb:
                    b1:bf:bb:e1:a0:ec:cb:5a:42:37:d6:29:3b:54:3d:
                    4b:29:51:dc:12:66:74:79:92:7b:f6:41:ed:09:a0:
                    53:4b:70:ab:1c:a5:99:7e:6d:61:49:b5:b2:10:4d:
                    13:db:f3:1b:ba:e6:05:e7:97:64:1a:78:f6:44:30:
                    f3:b9:1c:21:64:9b:b3:c7:38:a0:f5:6b:5b:ed:70:
                    2d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:16:4D:CC:2F:B2:9A:F2:E2:BF:62:35:16:5A:96:F2:D8:C8:6A:8A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6BF9B638C47B11F19FC358FBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.240.0/22
                  45.196.96.0/23
                  45.202.240.0/21
                  45.202.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:90:2b:64:4b:a2:ce:53:fc:05:a7:d6:13:ff:87:9d:77:0c:
         bb:0b:e2:40:11:0e:31:2b:8c:bd:ea:31:0d:fa:54:01:5d:21:
         df:f6:70:00:dd:6c:03:6e:5d:ee:a0:ba:35:7d:57:dd:b9:38:
         e5:21:4c:32:55:b8:2a:6d:a3:77:7d:b2:8a:cb:06:d2:74:b1:
         17:70:81:5e:32:b1:5c:4d:99:ed:ae:d5:bf:c0:97:a8:06:2c:
         41:49:85:42:eb:37:12:04:9d:a9:3b:be:40:c0:c2:11:81:3b:
         48:0c:b0:17:1b:f6:bd:15:1d:fe:12:aa:86:36:51:b6:6c:ae:
         03:f4:95:a8:e4:7c:4e:08:ac:dc:6e:33:ac:df:40:f3:93:ff:
         29:cf:c2:82:84:a1:86:6a:c9:ea:f1:dc:87:5f:7b:f7:7b:82:
         58:c7:bf:28:1a:aa:39:23:75:06:bd:ad:d0:8c:27:50:27:f1:
         b9:f4:f5:38:d6:94:40:64:e4:8a:ed:f5:73:5b:09:99:03:c8:
         92:7b:81:ff:25:f7:97:5b:5a:ad:49:7c:37:20:9c:8e:6f:21:
         ec:4b:f0:3f:0a:cc:3c:42:1d:e6:aa:92:a1:be:26:18:c7:7b:
         39:e6:91:4d:8d:f2:fc:e5:ec:a1:52:ee:80:67:51:f9:73:cf:
         a3:84:9d:77
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIDAdxMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDEwMDcyMjU1WhcNMjYxMTEwMDcyMjU1WjAYMRYw
FAYDVQQDEw02YWM5ZTdkNC1lZjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4YXMFF+3UMtzl9aLeu2uw9YP9vE33vNrP01qFUvjcszAcOYLMvs+BAnC
eAiAzxJxzZLPNwrp7I0X1Lch/7aihb8SD7L+dslGC1zL4AdHAj66PrvsiePPC5HD
rpuj9C4cbvmtQUbUBEMaObAcwwyeMwzsnvmyflzG/EE7wpiit6y8ke/XvyYA1CrX
UNtGYhe23GXNwo209GJ6iI8d6fyAEqkZx01H5EfIp/xPM22v7/JWYOuxv7vhoOzL
WkI31ik7VD1LKVHcEmZ0eZJ79kHtCaBTS3CrHKWZfm1hSbWyEE0T2/MbuuYF55dk
Gnj2RDDzuRwhZJuzxzig9Wtb7XAt0QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFLcW
Tcwvspry4r9iNRZalvLYyGqKMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82QkY5QjYzOEM0N0IxMUYxOUZDMzU4RkJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLcDwAwQBLcRgAwQDLcrwAwQB
Lcr+MA0GCSqGSIb3DQEBCwUAA4IBAQCHkCtkS6LOU/wFp9YT/4eddwy7C+JAEQ4x
K4y96jEN+lQBXSHf9nAA3WwDbl3uoLo1fVfduTjlIUwyVbgqbaN3fbKKywbSdLEX
cIFeMrFcTZntrtW/wJeoBixBSYVC6zcSBJ2pO75AwMIRgTtIDLAXG/a9FR3+EqqG
NlG2bK4D9JWo5HxOCKzcbjOs30Dzk/8pz8KChKGGasnq8dyHX3v3e4JYx78oGqo5
I3UGva3QjCdQJ/G59PU41pRAZOSK7fVzWwmZA8iSe4H/JfeXW1qtSXw3IJyObyHs
S/A/Csw8Qh3mqpKhviYYx3s55pFNjfL85eyhUu6AZ1H5c8+jhJ13
-----END CERTIFICATE-----