Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7699E116C30011F19AD1E5D0CE1D38B0.roa
File:                     7699E116C30011F19AD1E5D0CE1D38B0.roa (raw, json)
Hash identifier:          p1CynnM4vaASv3ZEKFrRVIeVHatJ9gCOkfpvWBRWjLQ=
Subject key identifier:   58:67:A9:32:DA:A4:8F:DE:F3:05:AA:C2:CA:15:06:B7:43:54:1C:DC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DBD6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7699E116C30011F19AD1E5D0CE1D38B0.roa
Signing time:             Thu 08 Oct 2026 10:10:19 +0000
ROA not before:           Thu 08 Oct 2026 10:10:14 +0000
ROA not after:            Mon 16 Nov 2026 10:10:14 +0000
asID:                     211567
IP address blocks:        45.195.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121814 (0x1dbd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  8 10:10:14 2026 GMT
            Not After : Nov 16 10:10:14 2026 GMT
        Subject: CN=6ac76c0a-6532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6f:16:45:07:ec:1a:d5:57:af:a0:b7:6e:b9:
                    3d:58:7d:70:e3:5d:84:d4:5f:f5:a1:d2:75:4a:af:
                    2b:bc:6b:c2:aa:13:46:1a:c3:4f:87:88:08:a0:18:
                    57:06:dc:c8:a2:f3:ca:5f:08:ef:48:06:74:b5:de:
                    e2:0d:1d:d3:6e:ae:b2:ec:5b:3a:26:65:f4:fd:75:
                    fa:9c:30:7a:a0:b9:08:96:76:1e:51:13:91:0b:52:
                    db:b4:34:e6:76:6d:47:9c:33:1f:32:51:5a:81:57:
                    45:ad:ff:a6:e8:33:89:2f:66:51:3f:f4:e6:97:ee:
                    32:87:bd:c9:4d:b1:1c:45:21:b0:c3:f4:11:a3:3a:
                    8e:91:d6:76:30:f8:ed:c3:cb:1d:40:c3:69:89:c4:
                    bf:c9:ca:02:a9:7c:a5:7b:2f:91:16:cf:7b:e7:18:
                    75:f4:69:08:20:5e:bf:c5:62:c8:18:fd:80:a8:4d:
                    64:f3:28:e6:53:8d:fb:b7:f2:6f:45:e5:b3:b3:aa:
                    8d:bf:03:8a:da:92:de:6c:04:4d:be:d4:c1:ed:aa:
                    a5:9f:78:0c:d9:dc:c4:84:00:4f:73:bf:c2:ab:98:
                    fe:fe:36:41:b8:30:55:fa:9e:5c:cd:74:99:68:ea:
                    98:5e:f5:f0:de:8f:4e:72:1a:f2:72:53:97:13:ed:
                    0e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:67:A9:32:DA:A4:8F:DE:F3:05:AA:C2:CA:15:06:B7:43:54:1C:DC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7699E116C30011F19AD1E5D0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:38:cf:70:e2:4d:13:da:c9:17:f5:25:de:8a:52:be:bd:f0:
         8f:dd:46:99:58:c5:6c:18:af:ad:5d:07:30:d8:77:96:9a:db:
         8c:08:df:55:31:40:73:8e:d4:17:4a:e2:f9:ab:ca:65:ba:99:
         67:c6:12:85:3f:30:c1:93:2e:95:44:a1:c7:da:39:23:db:a3:
         37:16:cc:b6:11:c8:61:92:6a:59:b3:44:24:a2:a0:e9:c9:a3:
         cc:67:f6:9e:78:ab:75:e1:76:4b:89:9d:2a:96:b8:61:8e:9d:
         1c:8b:2a:32:58:94:83:04:ca:82:ce:87:fb:5a:51:f5:d8:73:
         e0:e3:09:3a:eb:3c:91:8c:36:59:36:dc:67:3d:2e:56:db:b0:
         65:02:c3:24:d3:2c:ce:8d:a2:0f:ab:db:ba:0d:ef:bd:c7:78:
         5c:2a:18:6e:7b:43:d6:0e:70:92:b1:e5:5e:30:65:49:83:20:
         d9:48:cb:68:65:70:d8:09:84:4a:57:0d:e8:7a:3b:e1:5f:f6:
         c6:e5:84:56:80:ec:ea:7d:30:c3:cf:76:9f:db:b3:89:c7:f1:
         2d:e0:3a:ed:10:55:b5:d8:2c:af:6b:44:6b:22:b3:92:38:c1:
         f4:2c:6e:92:3e:b7:07:be:a5:16:16:46:fa:81:62:17:52:3e:
         c0:32:f7:36
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdvWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDA4MTAxMDE0WhcNMjYxMTE2MTAxMDE0WjAYMRYw
FAYDVQQDEw02YWM3NmMwYS02NTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAv28WRQfsGtVXr6C3brk9WH1w412E1F/1odJ1Sq8rvGvCqhNGGsNPh4gI
oBhXBtzIovPKXwjvSAZ0td7iDR3Tbq6y7Fs6JmX0/XX6nDB6oLkIlnYeURORC1Lb
tDTmdm1HnDMfMlFagVdFrf+m6DOJL2ZRP/Tml+4yh73JTbEcRSGww/QRozqOkdZ2
MPjtw8sdQMNpicS/ycoCqXyley+RFs975xh19GkIIF6/xWLIGP2AqE1k8yjmU437
t/JvReWzs6qNvwOK2pLebARNvtTB7aqln3gM2dzEhABPc7/Cq5j+/jZBuDBV+p5c
zXSZaOqYXvXw3o9OchryclOXE+0O5QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFhn
qTLapI/e8wWqwsoVBrdDVBzcMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83Njk5RTExNkMzMDAxMUYxOUFEMUU1RDBDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcNLMA0GCSqGSIb3DQEBCwUA
A4IBAQAPOM9w4k0T2skX9SXeilK+vfCP3UaZWMVsGK+tXQcw2HeWmtuMCN9VMUBz
jtQXSuL5q8pluplnxhKFPzDBky6VRKHH2jkj26M3Fsy2EchhkmpZs0QkoqDpyaPM
Z/aeeKt14XZLiZ0qlrhhjp0ciyoyWJSDBMqCzof7WlH12HPg4wk66zyRjDZZNtxn
PS5W27BlAsMk0yzOjaIPq9u6De+9x3hcKhhue0PWDnCSseVeMGVJgyDZSMtoZXDY
CYRKVw3oejvhX/bG5YRWgOzqfTDDz3af27OJx/Et4DrtEFW12Cyva0RrIrOSOMH0
LG6SPrcHvqUWFkb6gWIXUj7AMvc2
-----END CERTIFICATE-----