Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94D708F2949D11F1BB02F6FCCE1D38B0.roa
File:                     94D708F2949D11F1BB02F6FCCE1D38B0.roa (raw, json)
Hash identifier:          1MCEX+E4RVuLQSZEMLs13wvEM6uEHZUalX4K5XkMBAs=
Subject key identifier:   09:26:9A:5E:A4:AC:F2:6F:82:2F:94:5B:88:5C:58:5E:E9:F6:C4:89
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CAFB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94D708F2949D11F1BB02F6FCCE1D38B0.roa
Signing time:             Mon 10 Aug 2026 09:26:36 +0000
ROA not before:           Mon 10 Aug 2026 09:26:32 +0000
ROA not after:            Mon 07 Sep 2026 09:26:32 +0000
asID:                     214049
IP address blocks:        45.194.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117499 (0x1cafb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 10 09:26:32 2026 GMT
            Not After : Sep  7 09:26:32 2026 GMT
        Subject: CN=6a79994b-3a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fd:b9:6b:da:73:e0:72:cc:b7:f8:e6:36:be:
                    cf:cd:18:c9:be:94:99:45:74:b4:97:f0:bf:4f:0b:
                    d0:fe:90:22:54:61:25:9e:20:c0:2f:1a:7f:df:a8:
                    b9:a7:fd:d9:dd:a5:6a:85:c2:25:4f:21:f9:01:76:
                    9f:8a:8d:aa:92:9b:14:42:f1:55:96:19:34:79:ac:
                    92:3b:fd:19:c2:40:bf:31:fa:14:5c:3b:5d:bb:c4:
                    72:2e:63:30:b6:a4:13:fb:eb:8a:2a:1e:27:2d:3e:
                    e0:ba:72:d5:39:1b:a8:8b:c5:84:72:56:2c:6c:d9:
                    bd:83:52:f7:ce:01:8e:fd:9c:57:be:ea:15:4e:f1:
                    cb:52:72:07:b8:35:2c:61:01:a1:81:1e:d6:ec:15:
                    d0:91:7b:70:71:a8:be:70:18:a7:f8:20:32:f8:13:
                    4b:2a:8f:6f:bc:11:91:fd:62:6a:e1:ea:00:fc:45:
                    9b:aa:38:6b:96:fb:00:ef:71:57:8c:a5:2d:5c:db:
                    57:1f:a3:23:7b:85:97:0c:10:86:b1:89:9e:56:f6:
                    d2:e4:4a:4b:eb:e5:7e:49:d4:7a:16:e6:9b:56:61:
                    7b:05:d1:a1:f1:91:2f:c3:f4:c2:37:81:ad:d8:e1:
                    fd:45:1f:0c:6d:b4:65:3e:df:cc:5b:89:88:54:47:
                    10:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:26:9A:5E:A4:AC:F2:6F:82:2F:94:5B:88:5C:58:5E:E9:F6:C4:89
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94D708F2949D11F1BB02F6FCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:7c:1f:9f:9b:63:f7:a1:15:cf:db:5b:33:07:37:cb:60:fc:
         3b:f0:ed:80:e6:13:45:7a:77:94:1a:90:28:04:f6:e1:d9:74:
         7a:4c:f4:ea:1a:c1:0b:0e:ab:f1:36:35:8a:a2:e0:be:9f:e4:
         1f:2d:e8:7c:e8:76:a7:91:14:d9:b3:c0:d1:d5:9a:3a:1f:9d:
         2d:79:9e:73:21:3f:fa:81:1b:9a:a0:70:2a:b4:6d:f5:a8:cf:
         1a:32:c7:dd:47:aa:21:f9:b6:23:54:39:c2:4e:71:60:6c:05:
         1f:a4:69:b5:32:26:51:18:cb:36:63:88:3d:ec:1a:27:7e:78:
         53:f6:69:54:88:b4:ce:85:01:8c:2c:7c:fa:0f:d0:3a:2f:0c:
         ee:88:1a:20:d4:6b:25:73:c8:a9:4e:d2:d3:65:85:d7:ad:04:
         32:dc:39:57:c3:88:ce:0a:5e:86:16:cb:f1:fa:74:16:97:cc:
         72:2f:7b:59:00:a2:cd:c4:da:0c:ab:cc:ab:1b:64:8f:70:20:
         3a:3d:a7:58:96:74:71:39:ae:01:29:45:b6:2f:21:c2:63:41:
         b3:d5:85:b8:dd:47:0b:e4:bf:4f:98:19:d0:ff:ce:e7:1e:55:
         69:ac:59:f3:99:3e:86:1d:6b:01:64:ab:d5:ac:78:90:19:34:
         34:79:c6:cc
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcr7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODEwMDkyNjMyWhcNMjYwOTA3MDkyNjMyWjAYMRYw
FAYDVQQDEw02YTc5OTk0Yi0zYTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0f25a9pz4HLMt/jmNr7PzRjJvpSZRXS0l/C/TwvQ/pAiVGElniDALxp/
36i5p/3Z3aVqhcIlTyH5AXafio2qkpsUQvFVlhk0eaySO/0ZwkC/MfoUXDtdu8Ry
LmMwtqQT++uKKh4nLT7gunLVORuoi8WEclYsbNm9g1L3zgGO/ZxXvuoVTvHLUnIH
uDUsYQGhgR7W7BXQkXtwcai+cBin+CAy+BNLKo9vvBGR/WJq4eoA/EWbqjhrlvsA
73FXjKUtXNtXH6Mje4WXDBCGsYmeVvbS5EpL6+V+SdR6FuabVmF7BdGh8ZEvw/TC
N4Gt2OH9RR8MbbRlPt/MW4mIVEcQkwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAkm
ml6krPJvgi+UW4hcWF7p9sSJMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NEQ3MDhGMjk0OUQxMUYxQkIwMkY2RkNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcIGMA0GCSqGSIb3DQEBCwUA
A4IBAQAMfB+fm2P3oRXP21szBzfLYPw78O2A5hNFeneUGpAoBPbh2XR6TPTqGsEL
DqvxNjWKouC+n+QfLeh86HankRTZs8DR1Zo6H50teZ5zIT/6gRuaoHAqtG31qM8a
MsfdR6oh+bYjVDnCTnFgbAUfpGm1MiZRGMs2Y4g97BonfnhT9mlUiLTOhQGMLHz6
D9A6LwzuiBog1Gslc8ipTtLTZYXXrQQy3DlXw4jOCl6GFsvx+nQWl8xyL3tZAKLN
xNoMq8yrG2SPcCA6PadYlnRxOa4BKUW2LyHCY0Gz1YW43UcL5L9PmBnQ/87nHlVp
rFnzmT6GHWsBZKvVrHiQGTQ0ecbM
-----END CERTIFICATE-----