Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8C93662C3BB11F1ABDBD716CF1D38B0.roa
File:                     A8C93662C3BB11F1ABDBD716CF1D38B0.roa (raw, json)
Hash identifier:          rdmB7qM9KeinM2ZtYzNwv1GmK33TWaGsbb8F8HiZINM=
Subject key identifier:   05:06:A7:26:64:DA:E0:0E:C7:A6:A4:F6:89:26:01:9C:4C:AD:AB:31
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC21
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8C93662C3BB11F1ABDBD716CF1D38B0.roa
Signing time:             Fri 09 Oct 2026 08:30:19 +0000
ROA not before:           Fri 09 Oct 2026 08:30:14 +0000
ROA not after:            Tue 17 Nov 2026 08:30:14 +0000
asID:                     273824
IP address blocks:        45.194.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121889 (0x1dc21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  9 08:30:14 2026 GMT
            Not After : Nov 17 08:30:14 2026 GMT
        Subject: CN=6ac8a61a-cd74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4e:db:cc:4e:ce:41:82:0b:78:c5:7b:9a:ff:
                    43:db:7f:c4:d1:04:83:25:9b:4a:5d:c2:3c:a4:87:
                    cd:30:be:a3:8b:6a:10:5f:aa:62:a1:a1:74:12:47:
                    e2:93:23:8b:f6:5a:22:04:49:fc:bf:e9:6f:b5:7f:
                    a6:63:2d:bb:e9:2d:02:b7:e7:5e:a4:d5:03:4f:41:
                    9c:d9:52:e7:5a:dc:5f:5e:41:f1:2a:fc:16:d8:95:
                    bf:92:de:66:fd:1c:1b:5a:aa:a1:38:cf:c3:f0:c0:
                    70:4c:b9:8c:35:2a:6c:87:a7:96:6a:dd:82:8c:fc:
                    42:d9:b8:9c:28:53:ab:e8:09:49:42:11:70:ff:c8:
                    72:0b:25:7d:2c:5a:c9:17:d2:af:de:aa:03:c2:45:
                    7c:ae:ca:e2:d3:a9:f0:46:94:d9:6b:2e:d6:27:86:
                    e4:4a:46:aa:2a:74:24:f0:f6:ab:0b:c6:cc:c2:bd:
                    d7:f5:e8:44:57:6d:8d:4a:ef:85:c2:1b:fc:9b:5d:
                    a3:05:26:b7:f8:f2:ed:7b:d7:fd:e7:b0:3a:65:17:
                    68:dd:b7:b7:a1:60:de:5e:a9:9c:dc:d2:48:ae:f0:
                    49:86:f6:7c:4e:58:27:67:2e:eb:2e:9d:1a:2c:3c:
                    d4:12:cd:5f:dc:45:0b:6b:18:30:61:c0:c6:ed:b0:
                    93:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:06:A7:26:64:DA:E0:0E:C7:A6:A4:F6:89:26:01:9C:4C:AD:AB:31
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A8C93662C3BB11F1ABDBD716CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:72:4e:cd:46:8d:80:d2:6f:53:30:04:f5:9e:e0:26:19:ff:
         22:30:33:a9:63:c4:80:93:3d:b5:b9:14:5b:93:d1:45:e4:eb:
         5c:d8:43:85:d8:23:92:cf:0f:e0:6d:df:70:b1:96:f6:df:00:
         23:d4:82:36:3d:6d:2c:a2:fe:15:ae:f9:8f:80:0a:a4:a8:a1:
         87:ca:b4:0c:10:ee:f7:77:d1:c7:2b:9b:5c:df:3d:58:d5:d8:
         dc:7c:ac:cc:da:62:9a:80:e2:1b:b3:d7:b7:c3:23:82:8a:47:
         fc:cb:1e:e4:8d:01:21:47:0c:c5:57:60:17:04:07:85:7e:04:
         24:a9:98:e8:dc:51:a9:d8:d2:d7:9e:36:d1:18:82:d5:1d:a3:
         9e:21:90:a2:16:e1:33:7e:8c:99:20:68:7f:36:69:a3:ea:bc:
         b9:4b:cd:9a:75:c9:2f:1f:1e:1d:b0:e6:ff:d3:07:a2:67:ba:
         b0:63:35:2e:5f:26:e3:43:5d:e3:4f:5d:ca:0d:6c:05:30:c6:
         0b:9e:4f:81:78:75:dc:c0:44:57:a8:37:26:2e:b5:c2:78:60:
         a8:93:cb:c2:0b:6e:55:5e:6d:ee:fb:5e:17:af:ef:a6:1c:43:
         52:f0:65:68:75:23:69:f5:fd:7b:9a:40:00:38:d4:06:12:75:
         d4:c4:ae:cb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdwhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDA5MDgzMDE0WhcNMjYxMTE3MDgzMDE0WjAYMRYw
FAYDVQQDEw02YWM4YTYxYS1jZDc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsk7bzE7OQYILeMV7mv9D23/E0QSDJZtKXcI8pIfNML6ji2oQX6pioaF0
EkfikyOL9loiBEn8v+lvtX+mYy276S0Ct+depNUDT0Gc2VLnWtxfXkHxKvwW2JW/
kt5m/RwbWqqhOM/D8MBwTLmMNSpsh6eWat2CjPxC2bicKFOr6AlJQhFw/8hyCyV9
LFrJF9Kv3qoDwkV8rsri06nwRpTZay7WJ4bkSkaqKnQk8ParC8bMwr3X9ehEV22N
Su+Fwhv8m12jBSa3+PLte9f957A6ZRdo3be3oWDeXqmc3NJIrvBJhvZ8TlgnZy7r
Lp0aLDzUEs1f3EULaxgwYcDG7bCT9QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAUG
pyZk2uAOx6ak9okmAZxMrasxMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BOEM5MzY2MkMzQkIxMUYxQUJEQkQ3MTZDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcJ7MA0GCSqGSIb3DQEBCwUA
A4IBAQBAck7NRo2A0m9TMAT1nuAmGf8iMDOpY8SAkz21uRRbk9FF5Otc2EOF2COS
zw/gbd9wsZb23wAj1II2PW0sov4VrvmPgAqkqKGHyrQMEO73d9HHK5tc3z1Y1djc
fKzM2mKagOIbs9e3wyOCikf8yx7kjQEhRwzFV2AXBAeFfgQkqZjo3FGp2NLXnjbR
GILVHaOeIZCiFuEzfoyZIGh/Nmmj6ry5S82adckvHx4dsOb/0weiZ7qwYzUuXybj
Q13jT13KDWwFMMYLnk+BeHXcwERXqDcmLrXCeGCok8vCC25VXm3u+14Xr++mHENS
8GVodSNp9f17mkAAONQGEnXUxK7L
-----END CERTIFICATE-----