Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B130A438B98511F19C703AE1CE1D38B0.roa
File:                     B130A438B98511F19C703AE1CE1D38B0.roa (raw, json)
Hash identifier:          CSmgBGf0bfZOXiiXDr1gpohzQVCtMSPRVhu3hWlbm2w=
Subject key identifier:   28:29:AB:80:D5:28:1C:E5:E2:A2:39:12:E6:9C:FF:4C:C7:FB:D2:02
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D8DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B130A438B98511F19C703AE1CE1D38B0.roa
Signing time:             Sat 26 Sep 2026 08:38:48 +0000
ROA not before:           Sat 26 Sep 2026 08:38:41 +0000
ROA not after:            Sun 01 Nov 2026 08:38:41 +0000
asID:                     44559
IP address blocks:        45.196.140.0/24 maxlen: 24
                          45.196.141.0/24 maxlen: 24
                          45.196.142.0/24 maxlen: 24
                          45.196.143.0/24 maxlen: 24
                          45.196.152.0/24 maxlen: 24
                          45.196.198.0/24 maxlen: 24
                          45.196.199.0/24 maxlen: 24
                          45.202.119.0/24 maxlen: 24
                          45.202.125.0/24 maxlen: 24
                          45.202.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121050 (0x1d8da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 26 08:38:41 2026 GMT
            Not After : Nov  1 08:38:41 2026 GMT
        Subject: CN=6ab78498-203a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:02:fb:e2:80:13:c3:c5:a1:75:51:a2:63:79:
                    1e:a4:14:9d:aa:8a:a8:0b:c1:07:f3:b7:52:b8:3f:
                    95:eb:06:e3:5d:70:92:2b:36:9c:ed:fc:3e:e5:1b:
                    6c:7c:45:17:ff:2a:1e:7f:0a:f1:c8:37:a3:7b:1f:
                    00:84:47:76:4c:72:50:d0:aa:dc:18:29:ca:44:b3:
                    e5:e7:be:85:d2:05:a5:a7:41:ed:e6:47:65:e3:76:
                    1d:d5:6e:97:db:8a:ba:5f:76:60:b0:ee:14:de:75:
                    8f:05:e4:d2:c1:12:13:bb:e4:17:87:14:67:e1:38:
                    e5:f2:37:2b:ad:4e:fb:d0:e1:08:fb:94:23:6a:30:
                    44:8a:fc:3e:0f:d3:b9:63:75:f1:66:62:25:39:bd:
                    83:e0:d2:a7:2d:30:45:e6:de:e2:b5:14:d0:2a:e8:
                    07:8c:07:5b:33:0e:85:3d:fe:1f:fb:7e:b8:90:a8:
                    33:00:f8:eb:19:68:4c:7f:cf:5d:44:96:c3:0e:eb:
                    07:c6:0d:72:e6:df:5c:2e:2d:76:b3:fa:71:1b:3f:
                    7b:3b:20:19:21:d3:1b:64:d6:dc:e0:ae:22:9e:ac:
                    c0:cc:7a:e3:29:22:71:7b:26:94:0c:43:29:c7:46:
                    f7:2e:11:17:b6:30:b5:ed:06:c7:f3:6c:f7:60:67:
                    76:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:29:AB:80:D5:28:1C:E5:E2:A2:39:12:E6:9C:FF:4C:C7:FB:D2:02
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B130A438B98511F19C703AE1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.140.0/22
                  45.196.152.0/24
                  45.196.198.0/23
                  45.202.119.0/24
                  45.202.125.0/24
                  45.202.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:7b:a3:8e:4a:3e:ad:73:d1:74:9b:b7:19:d0:3d:9d:17:fd:
         6d:82:67:a0:0a:bf:dd:d9:31:99:e3:ae:c0:08:94:dd:c0:a0:
         ee:52:c5:ad:58:1d:c4:86:61:54:02:78:46:3b:92:6d:52:86:
         12:14:59:05:ed:75:cb:c3:4a:cf:44:26:dd:bb:84:7d:06:08:
         83:ed:ee:39:28:c1:fc:1b:d0:04:c8:6e:84:21:83:14:08:e5:
         3c:d2:ea:d4:92:91:09:6a:b8:d4:f8:f5:6b:aa:a8:91:96:f7:
         f3:60:ce:17:e2:36:d1:dc:45:5c:b7:70:f1:61:47:16:46:26:
         b1:00:08:53:1f:78:d0:43:91:02:bd:9f:06:32:02:56:2a:9f:
         5e:8e:10:58:6c:d2:ef:40:32:ca:0d:72:67:89:a5:00:da:53:
         44:4a:f3:02:cc:61:cd:7c:f3:8a:8b:7a:3c:07:e7:84:5e:29:
         62:a1:ed:58:34:2f:8d:66:32:13:33:ff:f3:34:8a:3a:6f:ac:
         21:c8:f1:4f:74:d4:be:a5:2e:94:61:49:53:d7:5d:a6:81:6a:
         8e:93:df:88:19:f0:3e:b3:7f:26:29:c8:43:61:01:e5:77:75:
         4e:3f:e7:d3:33:b3:38:68:27:92:f8:66:35:bd:21:a6:7a:8f:
         95:02:fe:ae
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgIDAdjaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTI2MDgzODQxWhcNMjYxMTAxMDgzODQxWjAYMRYw
FAYDVQQDEw02YWI3ODQ5OC0yMDNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1gL74oATw8WhdVGiY3kepBSdqoqoC8EH87dSuD+V6wbjXXCSKzac7fw+
5RtsfEUX/yoefwrxyDejex8AhEd2THJQ0KrcGCnKRLPl576F0gWlp0Ht5kdl43Yd
1W6X24q6X3ZgsO4U3nWPBeTSwRITu+QXhxRn4Tjl8jcrrU770OEI+5QjajBEivw+
D9O5Y3XxZmIlOb2D4NKnLTBF5t7itRTQKugHjAdbMw6FPf4f+364kKgzAPjrGWhM
f89dRJbDDusHxg1y5t9cLi12s/pxGz97OyAZIdMbZNbc4K4inqzAzHrjKSJxeyaU
DEMpx0b3LhEXtjC17QbH82z3YGd20QIDAQABo4ICwDCCArwwHQYDVR0OBBYEFCgp
q4DVKBzl4qI5Euac/0zH+9ICMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMTMwQTQzOEI5ODUxMUYxOUM3MDNBRTFDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCLcSMAwQALcSYAwQBLcTGAwQA
Lcp3AwQALcp9AwQALcp/MA0GCSqGSIb3DQEBCwUAA4IBAQCLe6OOSj6tc9F0m7cZ
0D2dF/1tgmegCr/d2TGZ467ACJTdwKDuUsWtWB3EhmFUAnhGO5JtUoYSFFkF7XXL
w0rPRCbdu4R9BgiD7e45KMH8G9AEyG6EIYMUCOU80urUkpEJarjU+PVrqqiRlvfz
YM4X4jbR3EVct3DxYUcWRiaxAAhTH3jQQ5ECvZ8GMgJWKp9ejhBYbNLvQDLKDXJn
iaUA2lNESvMCzGHNfPOKi3o8B+eEXilioe1YNC+NZjITM//zNIo6b6whyPFPdNS+
pS6UYUlT112mgWqOk9+IGfA+s38mKchDYQHld3VOP+fTM7M4aCeS+GY1vSGmeo+V
Av6u
-----END CERTIFICATE-----