Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/883ACFACADBB11F1B7E1BFF0CE1D38B0.roa
File:                     883ACFACADBB11F1B7E1BFF0CE1D38B0.roa (raw, json)
Hash identifier:          i5YQseluLtLvDbhXb1Hq+bXqm6CZqwwqKqROCegRe8U=
Subject key identifier:   1F:D0:0B:98:49:95:1B:86:53:8C:BB:4E:A9:4E:D6:2D:B1:2F:D1:C9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D53D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/883ACFACADBB11F1B7E1BFF0CE1D38B0.roa
Signing time:             Fri 11 Sep 2026 08:33:58 +0000
ROA not before:           Fri 11 Sep 2026 08:33:54 +0000
ROA not after:            Sun 18 Oct 2026 08:33:54 +0000
asID:                     22773
IP address blocks:        45.194.75.0/24 maxlen: 24
                          45.204.80.0/20 maxlen: 24
                          45.206.80.0/20 maxlen: 24
                          45.206.96.0/19 maxlen: 24
                          45.207.27.0/24 maxlen: 24
                          45.207.29.0/24 maxlen: 24
                          45.207.31.0/24 maxlen: 24
                          45.207.45.0/24 maxlen: 24
                          45.207.166.0/24 maxlen: 24
                          45.207.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120125 (0x1d53d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 11 08:33:54 2026 GMT
            Not After : Oct 18 08:33:54 2026 GMT
        Subject: CN=6aa3bcf6-d2e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:29:1c:af:9d:07:65:44:27:39:19:f4:e7:ca:
                    ef:8a:fe:b7:54:47:34:86:5a:40:e5:6d:d0:c0:a2:
                    57:99:ed:97:fb:d8:91:a5:d4:34:22:8c:0d:ea:6b:
                    bb:f8:79:53:5a:55:c5:88:99:13:5a:6f:15:92:b6:
                    99:16:f8:c3:a2:26:ee:a9:4a:7a:2d:9a:db:1b:cd:
                    5f:4b:9c:a9:c3:09:6f:ea:fe:e9:e5:1c:e8:38:be:
                    04:d5:91:0d:cb:b7:79:19:4e:cc:b5:01:62:2d:73:
                    5d:6d:0f:5e:50:fd:6e:c3:3f:0e:27:40:77:34:50:
                    67:36:49:5d:7c:4b:dd:d6:1e:d1:16:9e:6a:ab:67:
                    57:b0:2f:78:65:79:30:d5:30:f5:e6:9d:53:97:f8:
                    2e:0e:f8:52:bc:44:8d:49:e0:ec:dc:21:e4:55:58:
                    70:4f:6d:12:32:2e:d1:9f:e2:6b:ca:ad:4d:dc:e1:
                    af:67:b7:2d:f7:10:30:5c:12:8d:d1:76:e1:1c:09:
                    b9:3b:5e:7f:05:70:96:46:db:70:8e:da:52:7b:e5:
                    fc:a2:55:d8:20:34:b2:62:e9:8b:d6:19:02:4f:b1:
                    25:86:ee:b5:82:34:63:50:34:3f:e6:d7:98:03:c9:
                    c3:3a:29:b7:18:19:d4:c0:60:22:14:e2:2b:0e:8b:
                    36:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D0:0B:98:49:95:1B:86:53:8C:BB:4E:A9:4E:D6:2D:B1:2F:D1:C9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/883ACFACADBB11F1B7E1BFF0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.75.0/24
                  45.204.80.0/20
                  45.206.80.0-45.206.127.255
                  45.207.27.0/24
                  45.207.29.0/24
                  45.207.31.0/24
                  45.207.45.0/24
                  45.207.166.0/24
                  45.207.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:85:15:d5:3b:e0:e6:a7:1c:09:b0:0b:2e:46:66:02:6c:ae:
         2a:93:15:f3:99:50:84:64:c7:dd:b3:e1:8d:03:e8:f3:6d:b1:
         3e:51:3f:cb:7b:6c:d0:30:c5:ae:8b:51:5c:8d:6d:14:9e:6b:
         ca:61:31:19:50:38:7b:de:12:0d:b5:20:6c:89:95:2a:6c:fa:
         df:8a:d1:ce:b2:f6:2d:79:5c:c7:18:5d:20:70:8f:46:03:ef:
         36:26:a8:e4:c4:5b:38:bc:3a:85:63:c5:e0:3e:9c:6d:ef:4a:
         e7:52:3b:09:af:4d:d8:8f:f8:81:ed:c0:a4:c6:4f:d0:9f:19:
         c1:c7:4f:b1:24:f3:eb:74:45:77:e9:06:b0:3e:c6:8c:7c:00:
         b4:0f:b2:19:95:0d:ef:6b:8a:7d:24:b5:da:22:df:fd:cb:3f:
         93:cd:59:71:23:3a:fb:62:44:5e:ac:da:99:83:f4:17:27:b2:
         a2:80:b1:b6:52:ab:a3:b9:f9:33:a0:40:51:93:8b:b9:94:9c:
         3c:04:e6:72:f8:8b:a8:08:23:56:97:3f:78:15:6a:d2:1c:31:
         75:f9:b8:19:0c:c9:c4:7d:fd:fd:48:6a:66:89:6e:a8:ce:f7:
         0d:0e:ec:ba:b3:21:2d:40:f0:c0:e9:b5:3a:09:f7:59:a6:19:
         24:15:be:d4
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIDAdU9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTExMDgzMzU0WhcNMjYxMDE4MDgzMzU0WjAYMRYw
FAYDVQQDEw02YWEzYmNmNi1kMmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtikcr50HZUQnORn058rviv63VEc0hlpA5W3QwKJXme2X+9iRpdQ0IowN
6mu7+HlTWlXFiJkTWm8VkraZFvjDoibuqUp6LZrbG81fS5ypwwlv6v7p5RzoOL4E
1ZENy7d5GU7MtQFiLXNdbQ9eUP1uwz8OJ0B3NFBnNkldfEvd1h7RFp5qq2dXsC94
ZXkw1TD15p1Tl/guDvhSvESNSeDs3CHkVVhwT20SMi7Rn+Jryq1N3OGvZ7ct9xAw
XBKN0XbhHAm5O15/BXCWRttwjtpSe+X8olXYIDSyYumL1hkCT7Elhu61gjRjUDQ/
5teYA8nDOim3GBnUwGAiFOIrDos2oQIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFB/Q
C5hJlRuGU4y7TqlO1i2xL9HJMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84ODNBQ0ZBQ0FEQkIxMUYxQjdFMUJGRjBDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQALcJLAwQELcxQMAwDBAQtzlAD
BActzgADBAAtzxsDBAAtzx0DBAAtzx8DBAAtzy0DBAAtz6YDBAQtz7AwDQYJKoZI
hvcNAQELBQADggEBAI6FFdU74OanHAmwCy5GZgJsriqTFfOZUIRkx92z4Y0D6PNt
sT5RP8t7bNAwxa6LUVyNbRSea8phMRlQOHveEg21IGyJlSps+t+K0c6y9i15XMcY
XSBwj0YD7zYmqOTEWzi8OoVjxeA+nG3vSudSOwmvTdiP+IHtwKTGT9CfGcHHT7Ek
8+t0RXfpBrA+xox8ALQPshmVDe9rin0ktdoi3/3LP5PNWXEjOvtiRF6s2pmD9Bcn
sqKAsbZSq6O5+TOgQFGTi7mUnDwE5nL4i6gII1aXP3gVatIcMXX5uBkMycR9/f1I
amaJbqjO9w0O7LqzIS1A8MDptToJ91mmGSQVvtQ=
-----END CERTIFICATE-----