Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5289420970611F1AB5AAB1ECF1D38B0.roa
File:                     B5289420970611F1AB5AAB1ECF1D38B0.roa (raw, json)
Hash identifier:          nwL3qCNLLtZzYEQOkutNqvMA3taoYV2MjIGdYwK7ybQ=
Subject key identifier:   73:C5:7A:4F:43:D2:53:66:78:0D:E3:C6:6A:1F:B8:52:0F:FB:9F:C0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CC9C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5289420970611F1AB5AAB1ECF1D38B0.roa
Signing time:             Thu 13 Aug 2026 11:04:09 +0000
ROA not before:           Thu 13 Aug 2026 11:04:05 +0000
ROA not after:            Thu 24 Sep 2026 11:04:05 +0000
asID:                     32043
IP address blocks:        45.196.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117916 (0x1cc9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 13 11:04:05 2026 GMT
            Not After : Sep 24 11:04:05 2026 GMT
        Subject: CN=6a7da4a9-c2c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b0:f2:7a:cb:4c:db:bc:6b:9e:7e:17:b4:79:
                    95:3a:8b:8a:19:af:66:89:a1:ad:8f:67:8a:16:cb:
                    88:e2:01:d4:1b:49:47:48:d8:d3:8b:95:4f:76:3f:
                    16:96:47:5b:78:41:a6:8f:3f:83:b3:29:4a:8b:f7:
                    9f:34:53:6a:2a:0f:e7:39:27:e2:d5:7d:d2:5b:71:
                    4c:bc:39:61:db:72:55:7d:39:02:72:97:44:29:ef:
                    a7:05:49:aa:a2:2a:3d:49:c7:86:9e:f0:6d:96:9f:
                    e0:4c:66:33:10:23:84:39:75:4e:26:82:55:1c:a9:
                    bf:82:76:0c:bd:47:f9:2c:68:54:4a:e0:b4:a2:5f:
                    b7:88:c0:b9:af:9a:f5:67:e2:04:03:18:05:c4:9d:
                    e5:40:9a:3c:8f:65:99:17:1d:07:3c:af:ae:fd:4e:
                    0c:22:8f:a6:5c:23:01:5a:ae:7c:f6:3e:bb:6c:b4:
                    f4:f7:58:21:91:da:65:66:80:80:c3:86:67:ca:24:
                    7d:db:b8:b3:d6:0d:db:87:e1:93:39:6b:ab:96:cb:
                    53:fb:f3:35:e9:86:12:e6:d1:e0:6f:14:5c:da:b2:
                    84:b3:00:29:af:67:81:2b:20:41:c4:9e:2e:97:4f:
                    7c:0d:7f:7f:92:5f:65:41:f4:b7:b0:aa:95:4d:15:
                    be:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C5:7A:4F:43:D2:53:66:78:0D:E3:C6:6A:1F:B8:52:0F:FB:9F:C0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5289420970611F1AB5AAB1ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:ab:3c:27:13:43:e8:b3:b0:97:b6:4c:5a:63:8e:b3:90:43:
         39:db:37:6e:aa:8f:07:00:2d:82:23:1b:da:e5:b6:89:b4:1b:
         f8:50:08:6d:b4:86:48:9b:0f:8a:0b:d7:f0:78:8a:6a:57:9f:
         7f:9c:ef:18:d3:60:e8:a5:7f:0e:f2:24:b3:65:51:f0:c0:6d:
         65:19:87:28:ac:ae:99:47:1c:73:ac:f7:dd:15:ed:b1:73:03:
         17:08:ec:8b:d1:71:83:1f:2c:fd:da:a4:7a:3a:72:6b:86:cb:
         cc:25:2d:30:26:b2:80:f7:d9:bc:60:27:cd:b2:72:75:95:b8:
         6c:b7:c4:85:fe:72:76:23:19:84:24:61:8e:71:0d:e3:87:6a:
         31:9b:d0:bc:28:1d:b5:ac:93:18:aa:ba:0e:f1:25:3d:73:4c:
         c2:6d:d2:fb:7c:4a:25:6a:4b:f9:dd:c3:4c:84:3e:f5:ea:b4:
         7a:43:12:b2:a7:e4:12:65:9b:5a:0d:73:6b:fb:b7:b3:43:1b:
         23:f3:f5:fa:c5:15:dd:d1:9c:2a:a7:d1:b2:75:1a:3b:81:90:
         cb:3b:65:03:5b:f1:21:05:bb:8e:cd:ae:73:a5:bd:03:8f:9f:
         fe:ce:0f:f0:5b:92:56:a5:3e:6a:f0:4b:e3:e1:83:a7:cf:c9:
         43:6b:5b:a8
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcycMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODEzMTEwNDA1WhcNMjYwOTI0MTEwNDA1WjAYMRYw
FAYDVQQDEw02YTdkYTRhOS1jMmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA07DyestM27xrnn4XtHmVOouKGa9miaGtj2eKFsuI4gHUG0lHSNjTi5VP
dj8WlkdbeEGmjz+DsylKi/efNFNqKg/nOSfi1X3SW3FMvDlh23JVfTkCcpdEKe+n
BUmqoio9SceGnvBtlp/gTGYzECOEOXVOJoJVHKm/gnYMvUf5LGhUSuC0ol+3iMC5
r5r1Z+IEAxgFxJ3lQJo8j2WZFx0HPK+u/U4MIo+mXCMBWq589j67bLT091ghkdpl
ZoCAw4ZnyiR927iz1g3bh+GTOWurlstT+/M16YYS5tHgbxRc2rKEswApr2eBKyBB
xJ4ul098DX9/kl9lQfS3sKqVTRW+EQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHPF
ek9D0lNmeA3jxmofuFIP+5/AMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CNTI4OTQyMDk3MDYxMUYxQUI1QUFCMUVDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcRAMA0GCSqGSIb3DQEBCwUA
A4IBAQAwqzwnE0Pos7CXtkxaY46zkEM52zduqo8HAC2CIxva5baJtBv4UAhttIZI
mw+KC9fweIpqV59/nO8Y02DopX8O8iSzZVHwwG1lGYcorK6ZRxxzrPfdFe2xcwMX
COyL0XGDHyz92qR6OnJrhsvMJS0wJrKA99m8YCfNsnJ1lbhst8SF/nJ2IxmEJGGO
cQ3jh2oxm9C8KB21rJMYqroO8SU9c0zCbdL7fEolakv53cNMhD716rR6QxKyp+QS
ZZtaDXNr+7ezQxsj8/X6xRXd0Zwqp9GydRo7gZDLO2UDW/EhBbuOza5zpb0Dj5/+
zg/wW5JWpT5q8Evj4YOnz8lDa1uo
-----END CERTIFICATE-----