Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/825A23EEBE2D11F191BD1EC2CE1D38B0.roa
File:                     825A23EEBE2D11F191BD1EC2CE1D38B0.roa (raw, json)
Hash identifier:          Keuk+ZhidnFQtJSz3fs96nkwoaw466QfF+5CDZhO6EE=
Subject key identifier:   E0:2D:21:AD:AA:D5:10:1E:61:FA:37:CB:CD:3F:E4:52:D8:80:6F:29
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D9E4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/825A23EEBE2D11F191BD1EC2CE1D38B0.roa
Signing time:             Fri 02 Oct 2026 06:50:10 +0000
ROA not before:           Fri 02 Oct 2026 06:50:06 +0000
ROA not after:            Wed 06 Oct 2027 06:50:06 +0000
asID:                     29779
IP address blocks:        45.199.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121316 (0x1d9e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  2 06:50:06 2026 GMT
            Not After : Oct  6 06:50:06 2027 GMT
        Subject: CN=6abf5422-14b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7f:fc:5a:ec:ab:65:56:e0:d9:b2:c3:b7:d6:
                    01:6c:d3:11:66:78:b8:d3:68:50:f9:4f:d6:ff:fb:
                    a8:53:9e:f5:ec:44:62:4d:1d:10:24:09:ae:c7:d5:
                    88:fb:f8:a1:db:eb:55:ab:b8:4f:95:87:1e:34:b9:
                    88:b0:d8:21:f1:44:a7:9a:cc:01:78:e4:16:40:09:
                    a5:fc:50:6d:27:d9:88:f3:31:ac:89:33:6a:98:ca:
                    98:fe:6b:11:d8:2a:58:17:db:62:42:f6:5e:1f:e3:
                    0f:88:ba:20:23:38:0f:30:c2:3f:5d:f7:f4:cb:f6:
                    2e:8b:6a:36:3e:59:83:1b:b4:f3:e6:10:0c:55:b1:
                    ef:f3:8d:58:e9:a3:6e:7e:a5:5b:52:83:b9:d8:e4:
                    ae:70:c2:09:18:55:dd:ca:3c:69:6e:f4:8d:e8:5d:
                    5b:29:10:fc:bb:24:b6:2e:78:56:95:09:35:5e:11:
                    9c:47:50:ab:d1:e3:c7:52:ff:7e:89:16:c3:00:06:
                    bf:db:82:84:8d:ea:bc:2c:4a:e7:fa:70:7f:89:24:
                    d3:58:a1:6b:51:41:7b:57:f3:b5:c3:4a:b2:a7:5b:
                    ec:5e:61:41:25:fa:e9:a2:63:5f:32:32:cd:9e:ee:
                    87:68:d6:ac:fd:d8:ca:33:d7:79:b9:f3:fe:15:b1:
                    8b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2D:21:AD:AA:D5:10:1E:61:FA:37:CB:CD:3F:E4:52:D8:80:6F:29
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/825A23EEBE2D11F191BD1EC2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:3e:96:d3:d1:e4:a4:76:ed:57:03:ff:20:e3:2b:f7:3d:f6:
         d6:90:65:0f:be:4c:ee:77:4e:53:44:18:a0:f7:0d:e9:d9:52:
         a5:64:ac:46:cd:37:a7:2a:23:a2:3f:dc:91:50:29:76:af:76:
         b4:91:63:80:b5:71:f3:22:a1:25:e7:00:bc:91:9e:e1:c6:ae:
         db:a8:cd:b5:2b:f3:69:5a:7f:b5:ba:7a:ca:a1:5d:44:0a:05:
         f0:e5:85:d4:fc:c2:a1:81:55:97:e7:ca:da:20:1b:d3:34:c0:
         3c:c7:7a:b1:d3:97:42:a4:5e:de:87:cd:90:66:5b:47:97:28:
         0d:c4:41:fc:1a:e5:3d:25:ec:8d:cd:b8:17:e1:84:ad:3f:f9:
         54:78:d7:16:73:21:3d:64:e1:e8:47:9d:5f:e0:dd:77:09:88:
         2b:88:c2:64:76:a9:0e:75:bf:1a:90:bf:3e:92:c1:2e:7b:97:
         09:21:81:cb:9e:4b:96:05:14:67:24:a9:d4:7c:af:e4:6f:65:
         0f:4e:79:17:49:3d:4f:e7:8f:1c:a8:41:ab:cb:1f:dd:9a:04:
         3a:af:a3:28:34:13:4f:72:31:36:59:ab:aa:87:35:c9:c0:62:
         9a:c9:6d:32:c4:f7:c9:1c:cd:4e:97:e4:96:b9:55:8e:f0:3b:
         c0:99:9c:08
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdnkMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDAyMDY1MDA2WhcNMjcxMDA2MDY1MDA2WjAYMRYw
FAYDVQQDEw02YWJmNTQyMi0xNGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5X/8WuyrZVbg2bLDt9YBbNMRZni402hQ+U/W//uoU5717ERiTR0QJAmu
x9WI+/ih2+tVq7hPlYceNLmIsNgh8USnmswBeOQWQAml/FBtJ9mI8zGsiTNqmMqY
/msR2CpYF9tiQvZeH+MPiLogIzgPMMI/Xff0y/Yui2o2PlmDG7Tz5hAMVbHv841Y
6aNufqVbUoO52OSucMIJGFXdyjxpbvSN6F1bKRD8uyS2LnhWlQk1XhGcR1Cr0ePH
Uv9+iRbDAAa/24KEjeq8LErn+nB/iSTTWKFrUUF7V/O1w0qyp1vsXmFBJfrpomNf
MjLNnu6HaNas/djKM9d5ufP+FbGLaQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOAt
Ia2q1RAeYfo3y80/5FLYgG8pMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MjVBMjNFRUJFMkQxMUYxOTFCRDFFQzJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALceuMA0GCSqGSIb3DQEBCwUA
A4IBAQBPPpbT0eSkdu1XA/8g4yv3PfbWkGUPvkzud05TRBig9w3p2VKlZKxGzTen
KiOiP9yRUCl2r3a0kWOAtXHzIqEl5wC8kZ7hxq7bqM21K/NpWn+1unrKoV1ECgXw
5YXU/MKhgVWX58raIBvTNMA8x3qx05dCpF7eh82QZltHlygNxEH8GuU9JeyNzbgX
4YStP/lUeNcWcyE9ZOHoR51f4N13CYgriMJkdqkOdb8akL8+ksEue5cJIYHLnkuW
BRRnJKnUfK/kb2UPTnkXST1P548cqEGryx/dmgQ6r6MoNBNPcjE2WauqhzXJwGKa
yW0yxPfJHM1Ol+SWuVWO8DvAmZwI
-----END CERTIFICATE-----