Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80684DDE962511F1ADC794C3CE1D38B0.roa
File:                     80684DDE962511F1ADC794C3CE1D38B0.roa (raw, json)
Hash identifier:          +SrlatMnQrL35C4i6xb3MVgdTgUSy01TS9WC/BzQ8Iw=
Subject key identifier:   49:40:89:80:82:04:22:2E:C7:07:DD:7D:16:0B:E5:6E:E2:6F:3F:3C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CBC7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80684DDE962511F1ADC794C3CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 08:12:04 +0000
ROA not before:           Wed 12 Aug 2026 08:12:00 +0000
ROA not after:            Sat 19 Sep 2026 08:12:00 +0000
asID:                     6079
IP address blocks:        45.205.80.0/23 maxlen: 24
                          45.205.86.0/23 maxlen: 24
                          45.205.96.0/23 maxlen: 24
                          45.205.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117703 (0x1cbc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 12 08:12:00 2026 GMT
            Not After : Sep 19 08:12:00 2026 GMT
        Subject: CN=6a7c2ad4-5259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6d:8e:3d:c1:f3:10:0f:12:b3:c5:11:97:33:
                    a2:e6:58:8a:b6:b1:67:c3:12:e9:d0:02:be:c9:57:
                    6b:db:82:a6:58:74:27:81:70:94:f0:f6:b2:e5:24:
                    37:71:e4:46:00:c9:8b:4e:81:1d:f3:59:98:91:70:
                    99:6d:44:eb:8f:56:ff:dd:67:e2:ee:c3:24:2a:ee:
                    d3:19:73:a2:8a:e0:b8:14:c7:fa:cc:56:ad:40:a3:
                    77:bb:ea:d5:80:b8:8b:db:89:6b:ce:fb:dd:22:c2:
                    84:06:dd:03:a3:a7:06:d6:02:86:00:0f:f4:73:0c:
                    3c:3a:4f:8d:c4:fc:c2:20:8c:ed:5f:7a:17:61:d5:
                    b7:6f:6b:1d:a0:e2:87:b1:de:69:37:94:2d:64:5f:
                    d5:43:f3:fd:12:f1:b8:07:47:f4:7b:a4:72:cb:07:
                    e2:83:43:5a:a3:e9:38:d6:c3:01:9b:a8:85:c8:7b:
                    21:27:29:48:1e:de:f2:7b:d8:31:59:f0:be:0f:8f:
                    0a:eb:fa:15:39:34:cd:53:1c:7d:a7:12:d4:17:e7:
                    51:09:07:e2:fd:a8:d0:ce:3f:06:4d:40:d9:de:27:
                    41:79:08:c2:27:62:19:7d:d2:3d:42:2b:bf:fa:be:
                    c0:f7:8b:20:61:a9:b6:34:65:dc:65:39:dc:98:11:
                    d9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:40:89:80:82:04:22:2E:C7:07:DD:7D:16:0B:E5:6E:E2:6F:3F:3C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80684DDE962511F1ADC794C3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.80.0/23
                  45.205.86.0/23
                  45.205.96.0/23
                  45.205.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:06:67:02:1c:dc:8b:15:4d:1b:d7:57:0c:a1:40:6e:f9:7e:
         a1:8e:2e:36:ac:f4:7f:24:ca:1a:67:eb:2b:8d:00:af:38:5f:
         31:df:11:3b:30:f6:3b:04:16:08:ce:09:e6:dc:d8:de:a0:33:
         6e:5c:6a:0d:09:5d:b6:98:1f:10:09:14:23:8f:ed:fa:2b:f7:
         26:0d:8d:75:ac:d4:c1:68:ff:09:55:15:11:fb:51:ec:0a:85:
         2a:1f:93:f9:54:5b:7d:14:1e:e1:03:57:00:6d:4b:48:91:35:
         25:da:ea:b6:ba:3c:b0:95:9f:77:1d:6d:94:fc:28:37:83:a0:
         01:51:f1:c6:f0:6b:db:36:c1:1c:f5:7b:06:b2:35:0b:ca:40:
         b7:dc:ea:02:8f:f0:7d:a7:2c:40:9f:16:11:00:00:e5:d2:50:
         c6:46:50:a5:12:39:03:91:00:f5:11:7b:e7:67:fd:26:87:e8:
         fe:94:f5:48:7e:8f:53:37:bb:bc:19:ea:66:82:7d:78:4e:58:
         51:5d:d4:6d:7c:18:95:98:87:3d:40:24:55:5d:ec:1b:56:79:
         86:6e:e5:4a:4a:94:c6:57:b3:fa:32:2a:87:8e:c2:fe:f1:3d:
         19:07:ad:cc:57:b0:52:e3:a8:2f:df:66:12:b2:20:9e:a2:9e:
         e7:25:16:9d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIDAcvHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODEyMDgxMjAwWhcNMjYwOTE5MDgxMjAwWjAYMRYw
FAYDVQQDEw02YTdjMmFkNC01MjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsm2OPcHzEA8Ss8URlzOi5liKtrFnwxLp0AK+yVdr24KmWHQngXCU8Pay
5SQ3ceRGAMmLToEd81mYkXCZbUTrj1b/3Wfi7sMkKu7TGXOiiuC4FMf6zFatQKN3
u+rVgLiL24lrzvvdIsKEBt0Do6cG1gKGAA/0cww8Ok+NxPzCIIztX3oXYdW3b2sd
oOKHsd5pN5QtZF/VQ/P9EvG4B0f0e6Ryywfig0Nao+k41sMBm6iFyHshJylIHt7y
e9gxWfC+D48K6/oVOTTNUxx9pxLUF+dRCQfi/ajQzj8GTUDZ3idBeQjCJ2IZfdI9
Qiu/+r7A94sgYam2NGXcZTncmBHZVwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFElA
iYCCBCIuxwfdfRYL5W7ibz88MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MDY4NERERTk2MjUxMUYxQURDNzk0QzNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLc1QAwQBLc1WAwQBLc1gAwQB
Lc2YMA0GCSqGSIb3DQEBCwUAA4IBAQA+BmcCHNyLFU0b11cMoUBu+X6hji42rPR/
JMoaZ+srjQCvOF8x3xE7MPY7BBYIzgnm3NjeoDNuXGoNCV22mB8QCRQjj+36K/cm
DY11rNTBaP8JVRUR+1HsCoUqH5P5VFt9FB7hA1cAbUtIkTUl2uq2ujywlZ93HW2U
/Cg3g6ABUfHG8GvbNsEc9XsGsjULykC33OoCj/B9pyxAnxYRAADl0lDGRlClEjkD
kQD1EXvnZ/0mh+j+lPVIfo9TN7u8Gepmgn14TlhRXdRtfBiVmIc9QCRVXewbVnmG
buVKSpTGV7P6MiqHjsL+8T0ZB63MV7BS46gv32YSsiCeop7nJRad
-----END CERTIFICATE-----