Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A79B76DE9AD911F1A03630CFCE1D38B0.roa
File:                     A79B76DE9AD911F1A03630CFCE1D38B0.roa (raw, json)
Hash identifier:          M33gr0vghnyEA3EuzPuaFRiGEmmGhEmfWpYFcxXTVMM=
Subject key identifier:   E2:23:0F:56:24:C2:D8:D7:7A:42:0C:97:2F:A1:81:78:09:12:93:CA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CD73
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A79B76DE9AD911F1A03630CFCE1D38B0.roa
Signing time:             Tue 18 Aug 2026 07:51:44 +0000
ROA not before:           Tue 18 Aug 2026 07:51:40 +0000
ROA not after:            Thu 24 Sep 2026 07:51:40 +0000
asID:                     204741
IP address blocks:        45.195.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118131 (0x1cd73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 18 07:51:40 2026 GMT
            Not After : Sep 24 07:51:40 2026 GMT
        Subject: CN=6a840f10-915b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:27:69:9b:3c:8d:5d:f8:c8:63:cb:0c:8a:54:
                    25:c6:78:d2:d6:ae:90:bb:8e:8f:b1:c9:cc:5c:8e:
                    66:17:b1:af:4d:3d:4b:bd:55:91:75:47:6f:48:2b:
                    79:73:54:24:dc:a4:70:9f:bf:30:75:75:d8:fd:5b:
                    2a:4c:2d:07:e2:a6:e6:6a:85:3c:ce:61:3f:0a:6a:
                    a1:8a:69:ab:2a:30:b3:84:14:3a:24:b9:ad:02:28:
                    dd:d1:79:77:d9:96:72:66:db:bc:1f:07:bf:85:ed:
                    93:0e:42:62:88:64:ad:75:93:fd:40:b1:0c:5c:36:
                    20:79:d7:6c:93:d3:f3:06:e5:09:cc:29:09:4c:9f:
                    bd:f4:3e:07:23:4a:da:e9:62:a2:c1:11:76:af:38:
                    03:ba:a4:83:fa:ed:f5:28:79:f3:79:a2:87:df:16:
                    03:79:2e:e9:a8:d8:0c:b1:5d:49:3f:86:37:1c:38:
                    70:04:db:5a:0c:74:0a:20:c5:30:36:3e:5c:4c:f2:
                    76:4a:d8:03:9d:b3:1a:19:bf:ff:c8:f5:bd:6c:e9:
                    a6:65:66:02:f0:a7:7d:74:51:7a:10:aa:55:7e:fd:
                    9e:0a:4a:2a:3e:7c:84:20:51:57:34:bd:a1:32:2d:
                    a1:e1:a4:bb:ed:ed:01:45:78:37:c2:1f:1f:ea:b2:
                    90:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:23:0F:56:24:C2:D8:D7:7A:42:0C:97:2F:A1:81:78:09:12:93:CA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A79B76DE9AD911F1A03630CFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:5d:58:a4:0d:60:cb:24:90:04:a8:06:1e:76:5d:25:08:7b:
         22:c3:65:c3:ac:96:6c:2b:f0:db:75:d7:a6:1a:cd:c7:cf:74:
         ac:5b:9c:fb:50:73:eb:6b:70:5d:f2:95:88:9c:6e:45:41:e5:
         3f:2b:a5:1e:e2:0b:e7:38:95:bd:7e:82:f1:b4:ac:22:2d:24:
         5d:1e:55:c4:aa:e0:ba:47:25:a2:f7:f1:a5:50:d3:68:63:79:
         76:54:e1:b0:23:44:00:1f:6c:92:72:e8:d5:2c:cc:1b:d2:26:
         53:3c:dd:26:9f:a5:ba:c6:e2:f5:9f:b2:2e:c7:5a:4a:c0:8e:
         79:15:d2:5c:16:3b:a2:29:73:86:b4:df:b1:57:b3:62:af:06:
         00:91:d8:44:b8:9a:4f:2c:c6:9a:2b:f8:bc:d3:fa:48:d8:1d:
         ff:89:ec:95:f5:6a:33:75:0d:a4:7b:6b:d1:26:03:38:4f:07:
         8b:aa:2e:10:41:cc:8d:e1:83:62:42:56:ab:1c:dc:b3:8f:cd:
         23:2e:96:56:0f:11:58:98:8c:ec:0b:48:73:0b:85:3b:38:83:
         4d:12:6c:97:25:e6:ee:e0:29:f5:d0:27:9c:ba:77:6c:d3:95:
         44:c8:08:07:56:5a:a2:9e:af:d6:c0:54:0e:7a:85:86:f3:d3:
         1c:5a:fe:94
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAc1zMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODE4MDc1MTQwWhcNMjYwOTI0MDc1MTQwWjAYMRYw
FAYDVQQDEw02YTg0MGYxMC05MTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoCdpmzyNXfjIY8sMilQlxnjS1q6Qu46PscnMXI5mF7GvTT1LvVWRdUdv
SCt5c1Qk3KRwn78wdXXY/VsqTC0H4qbmaoU8zmE/CmqhimmrKjCzhBQ6JLmtAijd
0Xl32ZZyZtu8Hwe/he2TDkJiiGStdZP9QLEMXDYgeddsk9PzBuUJzCkJTJ+99D4H
I0ra6WKiwRF2rzgDuqSD+u31KHnzeaKH3xYDeS7pqNgMsV1JP4Y3HDhwBNtaDHQK
IMUwNj5cTPJ2StgDnbMaGb//yPW9bOmmZWYC8Kd9dFF6EKpVfv2eCkoqPnyEIFFX
NL2hMi2h4aS77e0BRXg3wh8f6rKQWwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOIj
D1YkwtjXekIMly+hgXgJEpPKMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BNzlCNzZERTlBRDkxMUYxQTAzNjMwQ0ZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcNQMA0GCSqGSIb3DQEBCwUA
A4IBAQADXVikDWDLJJAEqAYedl0lCHsiw2XDrJZsK/DbddemGs3Hz3SsW5z7UHPr
a3Bd8pWInG5FQeU/K6Ue4gvnOJW9foLxtKwiLSRdHlXEquC6RyWi9/GlUNNoY3l2
VOGwI0QAH2yScujVLMwb0iZTPN0mn6W6xuL1n7Iux1pKwI55FdJcFjuiKXOGtN+x
V7NirwYAkdhEuJpPLMaaK/i80/pI2B3/ieyV9WozdQ2ke2vRJgM4TweLqi4QQcyN
4YNiQlarHNyzj80jLpZWDxFYmIzsC0hzC4U7OINNEmyXJebu4Cn10Cecunds05VE
yAgHVlqinq/WwFQOeoWG89McWv6U
-----END CERTIFICATE-----