Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC4AF0CC923D11F18BDD4A1DCF1D38B0.roa
File:                     BC4AF0CC923D11F18BDD4A1DCF1D38B0.roa (raw, json)
Hash identifier:          sTLaQ5Dk2ESbC/b6RzVvruB9BwpWdAq42EPYBBHzlBQ=
Subject key identifier:   1A:F2:70:32:53:3C:92:29:E3:C6:64:25:81:5C:A1:37:0B:0C:56:9B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CA41
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC4AF0CC923D11F18BDD4A1DCF1D38B0.roa
Signing time:             Fri 07 Aug 2026 08:55:28 +0000
ROA not before:           Fri 07 Aug 2026 08:55:24 +0000
ROA not after:            Thu 22 Apr 2027 08:55:24 +0000
asID:                     132813
IP address blocks:        45.195.52.0/22 maxlen: 24
                          45.195.56.0/23 maxlen: 24
                          45.204.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117313 (0x1ca41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  7 08:55:24 2026 GMT
            Not After : Apr 22 08:55:24 2027 GMT
        Subject: CN=6a759d80-7555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2b:5e:32:19:74:f6:6a:17:ad:1c:cf:8c:4d:
                    11:98:b2:5d:f5:6b:84:06:b3:e1:f0:60:c7:d5:c1:
                    37:7f:21:b6:d0:9b:67:3e:c8:8d:3d:41:54:72:a3:
                    5c:a9:1a:9a:5e:18:6f:d8:03:32:42:93:e3:cd:3b:
                    28:53:00:f5:2c:d5:ac:ca:7a:09:58:7a:a5:93:a3:
                    b8:6f:ff:56:b6:88:06:ee:62:b6:00:0b:11:8f:13:
                    dc:17:09:1f:cb:a2:61:4d:87:e0:8a:bf:48:53:25:
                    79:02:47:30:c6:52:51:28:90:01:90:45:0b:46:59:
                    70:5f:4b:02:6e:96:21:4a:2d:a1:4f:94:c5:0e:3c:
                    f9:36:05:0c:08:9b:4c:2a:e4:e5:d8:75:ac:24:62:
                    54:c6:3f:bd:de:44:91:55:5e:fd:70:07:4b:49:e4:
                    c9:8c:ae:3d:17:e9:29:c7:a7:20:8c:c3:50:81:d4:
                    5d:f3:ee:05:21:39:38:a4:1b:4b:64:6a:24:25:d5:
                    16:68:46:a1:f3:32:b3:df:fe:04:80:a8:a9:80:5b:
                    64:ea:4b:61:05:51:8e:1b:8b:77:42:18:7a:98:70:
                    8b:75:72:ea:6b:96:cf:65:cf:ce:1f:0b:fd:0d:2a:
                    b1:da:18:0e:5e:52:06:57:c3:39:69:5e:4a:bb:55:
                    ef:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F2:70:32:53:3C:92:29:E3:C6:64:25:81:5C:A1:37:0B:0C:56:9B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC4AF0CC923D11F18BDD4A1DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.52.0-45.195.57.255
                  45.204.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6d:13:a2:bc:b8:fa:18:3d:5b:da:d6:bf:6f:68:49:da:22:29:
         8c:ce:d8:20:9c:cb:f9:9d:55:d2:02:68:e9:7c:8c:f6:1e:3a:
         97:9f:9f:a1:68:e1:86:b4:85:12:4c:21:05:fd:6b:7f:01:97:
         65:b3:21:d8:34:28:e7:e1:66:fe:95:99:30:58:77:4e:1a:31:
         2e:16:c5:f4:5f:f2:c3:d9:db:7c:c4:a0:9d:3d:f0:4f:37:00:
         8d:ce:f7:25:13:e6:1d:04:b5:cf:e6:7e:4e:f5:62:d0:c9:e7:
         e7:b5:3c:c8:64:1f:bc:49:ad:fa:81:fd:07:27:79:9b:d5:45:
         5b:c7:70:1d:ed:ef:2a:23:86:d6:8f:a2:6c:8e:54:3e:b0:b8:
         d7:de:89:a6:cc:33:9f:ed:df:77:d1:9f:38:64:d9:63:37:c0:
         29:06:b2:65:dc:bc:15:52:83:8d:9f:d3:c5:9a:f6:03:7a:a5:
         79:7a:4e:91:22:45:bb:04:1d:24:bd:68:12:42:0d:2d:04:0b:
         19:4c:81:0b:5f:0f:5f:ad:cd:86:0d:84:aa:3e:63:94:62:e4:
         4f:f4:54:f7:24:0b:f5:5f:ea:0e:d2:12:f5:c9:eb:09:b5:01:
         3a:54:61:f3:4e:df:b2:8a:b6:cb:23:20:c9:de:68:d9:2c:08:
         c3:56:44:4c
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAcpBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODA3MDg1NTI0WhcNMjcwNDIyMDg1NTI0WjAYMRYw
FAYDVQQDEw02YTc1OWQ4MC03NTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2yteMhl09moXrRzPjE0RmLJd9WuEBrPh8GDH1cE3fyG20JtnPsiNPUFU
cqNcqRqaXhhv2AMyQpPjzTsoUwD1LNWsynoJWHqlk6O4b/9WtogG7mK2AAsRjxPc
Fwkfy6JhTYfgir9IUyV5AkcwxlJRKJABkEULRllwX0sCbpYhSi2hT5TFDjz5NgUM
CJtMKuTl2HWsJGJUxj+93kSRVV79cAdLSeTJjK49F+kpx6cgjMNQgdRd8+4FITk4
pBtLZGokJdUWaEah8zKz3/4EgKipgFtk6kthBVGOG4t3Qhh6mHCLdXLqa5bPZc/O
Hwv9DSqx2hgOXlIGV8M5aV5Ku1XvhwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFBry
cDJTPJIp48ZkJYFcoTcLDFabMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQzRBRjBDQzkyM0QxMUYxOEJERDRBMURDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAItwzQDBAEtwzgDBAMtzAgw
DQYJKoZIhvcNAQELBQADggEBAG0Tory4+hg9W9rWv29oSdoiKYzO2CCcy/mdVdIC
aOl8jPYeOpefn6Fo4Ya0hRJMIQX9a38Bl2WzIdg0KOfhZv6VmTBYd04aMS4WxfRf
8sPZ23zEoJ098E83AI3O9yUT5h0Etc/mfk71YtDJ5+e1PMhkH7xJrfqB/QcneZvV
RVvHcB3t7yojhtaPomyOVD6wuNfeiabMM5/t33fRnzhk2WM3wCkGsmXcvBVSg42f
08Wa9gN6pXl6TpEiRbsEHSS9aBJCDS0ECxlMgQtfD1+tzYYNhKo+Y5Ri5E/0VPck
C/Vf6g7SEvXJ6wm1ATpUYfNO37KKtssjIMneaNksCMNWREw=
-----END CERTIFICATE-----