Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80451CDCA50811F192C358C7CE1D38B0.roa
File:                     80451CDCA50811F192C358C7CE1D38B0.roa (raw, json)
Hash identifier:          zD4aBBNjPixMX4awmAxtNFrY2ALbU85IZtAmqOE+Fus=
Subject key identifier:   E3:94:55:53:01:52:F3:44:C3:E6:18:34:B6:1B:2F:1A:AB:2B:5B:94
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D1F8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80451CDCA50811F192C358C7CE1D38B0.roa
Signing time:             Mon 31 Aug 2026 06:52:16 +0000
ROA not before:           Mon 31 Aug 2026 06:52:12 +0000
ROA not after:            Fri 11 Sep 2026 06:52:12 +0000
asID:                     11427
IP address blocks:        45.202.92.0/22 maxlen: 24
                          45.202.96.0/22 maxlen: 24
                          45.202.116.0/23 maxlen: 24
                          45.202.120.0/22 maxlen: 24
                          45.207.0.0/23 maxlen: 24
                          45.207.36.0/22 maxlen: 24
                          45.207.42.0/23 maxlen: 24
                          45.207.48.0/21 maxlen: 24
                          45.207.164.0/23 maxlen: 24
                          45.207.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119288 (0x1d1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 31 06:52:12 2026 GMT
            Not After : Sep 11 06:52:12 2026 GMT
        Subject: CN=6a9524a0-a5c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:74:ee:ca:99:47:93:78:29:c9:11:f0:74:24:
                    a8:44:ed:f2:72:c3:52:57:6c:fe:1f:4a:6c:a8:e5:
                    3d:97:12:c5:e1:04:c6:53:00:01:32:18:2e:a7:6a:
                    17:35:4f:66:ed:dd:4f:c5:8f:09:e7:ce:54:a8:29:
                    52:b4:06:f5:8b:4d:f9:50:d3:92:e9:f2:79:0e:3b:
                    af:47:31:62:7d:8f:71:13:d3:5a:b2:e0:f5:04:5d:
                    5b:eb:d1:7c:01:1c:89:a5:72:5a:77:1f:5b:18:80:
                    dd:1a:b0:3c:34:ac:57:73:87:2c:fc:75:62:04:3f:
                    6d:f4:7b:61:67:5c:42:78:44:c1:ca:61:c6:17:3c:
                    8a:e9:4e:5b:ff:a9:a5:01:a8:35:3c:1e:3b:c4:89:
                    a2:9e:b0:9c:bc:07:44:03:90:2b:d3:8c:98:0f:70:
                    9d:7c:5c:09:ad:d3:ff:53:fe:f5:32:62:46:64:aa:
                    3a:75:42:fe:75:c4:0a:85:99:b9:2a:29:ef:93:90:
                    06:03:62:4f:c1:5d:75:01:83:9f:7f:3e:68:84:d3:
                    92:6b:8a:27:37:4e:e9:e8:32:1d:5c:7b:b0:3e:72:
                    27:79:53:d7:23:f0:f3:09:cb:9a:28:3e:23:08:d1:
                    92:4b:68:97:9c:0a:a9:ff:4d:6e:04:e7:7e:8f:61:
                    29:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:94:55:53:01:52:F3:44:C3:E6:18:34:B6:1B:2F:1A:AB:2B:5B:94
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80451CDCA50811F192C358C7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.92.0-45.202.99.255
                  45.202.116.0/23
                  45.202.120.0/22
                  45.207.0.0/23
                  45.207.36.0/22
                  45.207.42.0/23
                  45.207.48.0/21
                  45.207.164.0/23
                  45.207.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:85:7e:4e:46:0e:eb:1e:44:7c:72:1c:38:b3:37:32:4c:f9:
         ca:a7:99:fe:c5:e3:93:5e:3a:fd:f9:54:62:3e:61:5d:16:dd:
         02:e1:36:e8:d2:ab:5a:33:69:6b:98:bf:d5:2d:0e:24:c1:43:
         95:6c:fc:21:41:48:d0:5b:b8:8c:27:50:84:d9:c3:46:ea:77:
         db:60:6f:6b:05:11:01:d2:89:30:da:3e:77:08:20:1d:67:ff:
         98:1c:8c:5a:ee:75:cf:40:dd:48:f2:d6:f1:92:3e:3f:9d:53:
         e3:46:ab:1a:3c:78:2c:2d:df:62:e6:e9:8f:89:77:aa:92:89:
         ef:72:7e:2f:25:ff:c9:99:53:b6:62:5a:a9:9f:c1:1a:51:83:
         77:a3:30:a5:34:85:c1:38:7f:56:2d:5b:bf:7d:f8:96:48:ab:
         e7:79:d1:f2:f4:40:d7:f6:4c:9e:b4:6d:14:e9:8c:9d:9f:36:
         4a:d3:d5:4b:3d:ce:af:b6:94:56:fa:62:45:8c:01:93:7a:1b:
         a2:ab:44:c0:08:15:e7:c5:c8:1f:e7:92:8f:10:17:c1:3f:1d:
         4d:42:1a:f1:f9:74:23:86:9b:b3:4d:5b:a3:1c:ce:57:5e:1c:
         f4:4d:6d:7c:40:56:24:41:b0:45:ae:a6:75:ba:31:e8:b2:6e:
         00:bd:f4:92
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIDAdH4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODMxMDY1MjEyWhcNMjYwOTExMDY1MjEyWjAYMRYw
FAYDVQQDEw02YTk1MjRhMC1hNWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyHTuyplHk3gpyRHwdCSoRO3ycsNSV2z+H0psqOU9lxLF4QTGUwABMhgu
p2oXNU9m7d1PxY8J585UqClStAb1i035UNOS6fJ5DjuvRzFifY9xE9NasuD1BF1b
69F8ARyJpXJadx9bGIDdGrA8NKxXc4cs/HViBD9t9HthZ1xCeETBymHGFzyK6U5b
/6mlAag1PB47xIminrCcvAdEA5Ar04yYD3CdfFwJrdP/U/71MmJGZKo6dUL+dcQK
hZm5Kinvk5AGA2JPwV11AYOffz5ohNOSa4onN07p6DIdXHuwPnIneVPXI/DzCcua
KD4jCNGSS2iXnAqp/01uBOd+j2EpGwIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFOOU
VVMBUvNEw+YYNLYbLxqrK1uUMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MDQ1MUNEQ0E1MDgxMUYxOTJDMzU4QzdDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+MAwDBAItylwDBAItymADBAEtynQD
BAItyngDBAEtzwADBAItzyQDBAEtzyoDBAMtzzADBAEtz6QDBAEtz6owDQYJKoZI
hvcNAQELBQADggEBALmFfk5GDuseRHxyHDizNzJM+cqnmf7F45NeOv35VGI+YV0W
3QLhNujSq1ozaWuYv9UtDiTBQ5Vs/CFBSNBbuIwnUITZw0bqd9tgb2sFEQHSiTDa
PncIIB1n/5gcjFrudc9A3Ujy1vGSPj+dU+NGqxo8eCwt32Lm6Y+Jd6qSie9yfi8l
/8mZU7ZiWqmfwRpRg3ejMKU0hcE4f1YtW799+JZIq+d50fL0QNf2TJ60bRTpjJ2f
NkrT1Us9zq+2lFb6YkWMAZN6G6KrRMAIFefFyB/nko8QF8E/HU1CGvH5dCOGm7NN
W6MczldeHPRNbXxAViRBsEWupnW6MeiybgC99JI=
-----END CERTIFICATE-----