Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84B5D9769B9B11F1950F87E8CE1D38B0.roa
File:                     84B5D9769B9B11F1950F87E8CE1D38B0.roa (raw, json)
Hash identifier:          pDdOKMk6fVWq7vANGXaMIUIoBffsiDycStvdwKAHSeg=
Subject key identifier:   AB:8F:8A:A8:B3:24:1F:8D:1B:2C:0F:C7:1D:4C:BC:11:26:E4:41:CF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE14
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84B5D9769B9B11F1950F87E8CE1D38B0.roa
Signing time:             Wed 19 Aug 2026 06:59:28 +0000
ROA not before:           Wed 19 Aug 2026 06:59:24 +0000
ROA not after:            Fri 25 Aug 2028 06:59:24 +0000
asID:                     133012
IP address blocks:        45.199.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118292 (0x1ce14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 19 06:59:24 2026 GMT
            Not After : Aug 25 06:59:24 2028 GMT
        Subject: CN=6a855450-8bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:21:f8:f3:d3:26:1c:31:f0:26:95:18:47:eb:
                    4f:8e:50:2b:55:04:da:fb:c5:bf:c5:37:b3:d2:7f:
                    5a:13:a5:02:13:7e:ac:e3:ad:3f:98:07:84:1d:5b:
                    d2:68:c0:eb:2e:4c:10:f5:14:62:35:8d:a4:0e:2b:
                    d5:cd:14:3d:eb:b1:f7:4d:fe:ff:2d:6e:e3:4c:cb:
                    cf:28:e6:d6:cf:c6:5b:ba:69:fa:61:5e:6f:dd:2c:
                    ee:46:69:85:b9:5a:2c:73:56:c3:d3:89:6f:b4:df:
                    df:35:6b:cb:23:c4:29:93:ff:6d:91:81:e4:86:5b:
                    ea:c9:b2:a4:22:ad:77:5f:47:cd:11:34:70:15:08:
                    73:8a:ce:61:3c:44:a3:ae:90:1d:6a:34:21:ed:06:
                    8d:4f:8b:d0:de:90:11:92:3c:da:a1:5b:b8:22:3d:
                    50:9f:e4:4d:70:55:93:4d:a1:c2:ba:32:76:35:cc:
                    0b:c6:95:f1:33:72:1b:6c:a3:eb:ea:42:e9:17:97:
                    1f:4f:d5:60:b6:16:62:b2:13:f3:6c:9c:58:13:cd:
                    da:ca:fc:04:90:22:38:aa:78:39:21:1a:0e:3f:41:
                    98:6b:64:5d:dd:8c:49:89:6a:f7:da:ce:42:b9:0f:
                    a9:cd:67:e2:4b:82:37:51:62:98:ae:3e:c9:d3:be:
                    0a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8F:8A:A8:B3:24:1F:8D:1B:2C:0F:C7:1D:4C:BC:11:26:E4:41:CF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84B5D9769B9B11F1950F87E8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:ff:f8:1c:9a:e9:2f:02:27:8b:13:48:31:d9:78:3a:16:18:
         4d:e5:05:90:80:64:b6:d6:be:c3:20:55:8f:c7:5c:80:20:b5:
         48:ad:23:ad:c0:56:4d:a3:71:92:bb:c1:3f:04:a6:2d:77:a2:
         f3:dd:6c:5e:7f:76:6e:ab:9e:d9:c6:f4:3e:e9:27:86:70:61:
         8e:f2:79:32:33:03:f9:3e:99:0d:c5:b1:70:2e:2c:58:fc:97:
         ef:ca:f4:0c:05:e8:98:5a:38:18:ec:f2:11:68:c3:f0:7d:7e:
         e8:c8:7b:a5:a2:39:89:3f:0d:d8:57:8e:a3:40:d2:55:d8:5d:
         5b:5a:95:8d:83:e6:bd:91:65:98:bd:c9:59:11:97:ae:1b:0a:
         19:a9:0a:09:a1:de:9f:21:0a:98:f5:68:e4:0b:f6:eb:4d:dc:
         4c:ea:eb:6b:3d:25:e3:93:01:9b:0b:a9:07:dc:90:d4:49:7c:
         fd:46:3e:a4:3f:93:48:de:0e:7f:c2:ab:d9:45:69:bb:6e:0e:
         0f:93:3e:3b:f2:63:e6:69:36:2e:c7:5a:00:d8:c7:92:76:82:
         e4:08:fb:60:19:76:59:29:b3:ef:f8:8b:c1:46:7c:1d:02:8e:
         d6:e9:91:75:be:37:f9:da:8c:ca:ee:cf:c0:d3:69:ba:d2:09:
         c9:09:47:7d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAc4UMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODE5MDY1OTI0WhcNMjgwODI1MDY1OTI0WjAYMRYw
FAYDVQQDEw02YTg1NTQ1MC04YmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuSH489MmHDHwJpUYR+tPjlArVQTa+8W/xTez0n9aE6UCE36s460/mAeE
HVvSaMDrLkwQ9RRiNY2kDivVzRQ967H3Tf7/LW7jTMvPKObWz8Zbumn6YV5v3Szu
RmmFuVosc1bD04lvtN/fNWvLI8Qpk/9tkYHkhlvqybKkIq13X0fNETRwFQhzis5h
PESjrpAdajQh7QaNT4vQ3pARkjzaoVu4Ij1Qn+RNcFWTTaHCujJ2NcwLxpXxM3Ib
bKPr6kLpF5cfT9VgthZishPzbJxYE83ayvwEkCI4qng5IRoOP0GYa2Rd3YxJiWr3
2s5CuQ+pzWfiS4I3UWKYrj7J074KkQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKuP
iqizJB+NGywPxx1MvBEm5EHPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84NEI1RDk3NjlCOUIxMUYxOTUwRjg3RThDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALce2MA0GCSqGSIb3DQEBCwUA
A4IBAQBF//gcmukvAieLE0gx2Xg6FhhN5QWQgGS21r7DIFWPx1yAILVIrSOtwFZN
o3GSu8E/BKYtd6Lz3Wxef3Zuq57ZxvQ+6SeGcGGO8nkyMwP5PpkNxbFwLixY/Jfv
yvQMBeiYWjgY7PIRaMPwfX7oyHulojmJPw3YV46jQNJV2F1bWpWNg+a9kWWYvclZ
EZeuGwoZqQoJod6fIQqY9WjkC/brTdxM6utrPSXjkwGbC6kH3JDUSXz9Rj6kP5NI
3g5/wqvZRWm7bg4Pkz478mPmaTYux1oA2MeSdoLkCPtgGXZZKbPv+IvBRnwdAo7W
6ZF1vjf52ozK7s/A02m60gnJCUd9
-----END CERTIFICATE-----