Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2F64BBCC3B411F1986220EBCE1D38B0.roa
File:                     C2F64BBCC3B411F1986220EBCE1D38B0.roa (raw, json)
Hash identifier:          yGKalAZM91x2jMMdtv10GpCrL/juR9+vjAjw42dK97A=
Subject key identifier:   D8:C9:40:7D:7F:37:0F:25:90:36:F0:37:63:A4:B2:53:BF:60:A8:57
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC03
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2F64BBCC3B411F1986220EBCE1D38B0.roa
Signing time:             Fri 09 Oct 2026 07:40:56 +0000
ROA not before:           Fri 09 Oct 2026 07:40:51 +0000
ROA not after:            Mon 19 Oct 2026 07:40:51 +0000
asID:                     18186
IP address blocks:        45.194.16.0/24 maxlen: 24
                          45.194.17.0/24 maxlen: 24
                          45.194.18.0/24 maxlen: 24
                          45.194.19.0/24 maxlen: 24
                          45.194.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 07:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121859 (0x1dc03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  9 07:40:51 2026 GMT
            Not After : Oct 19 07:40:51 2026 GMT
        Subject: CN=6ac89a88-ff92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ef:6b:ad:6a:75:80:60:b5:00:4b:18:15:24:
                    fb:9b:ae:f9:cf:05:61:f6:ea:4c:db:2c:4c:42:b9:
                    44:dd:56:5b:7a:1d:8e:a2:74:8f:73:75:e2:0a:59:
                    8d:91:58:c6:69:d3:08:17:78:0e:d5:ad:c5:b7:d0:
                    3b:76:b4:0f:95:dd:bd:c6:28:eb:68:c9:dd:1f:5c:
                    bf:2d:4a:da:f6:3b:8f:27:09:f2:93:09:21:34:80:
                    31:f1:22:71:c1:d3:26:78:02:de:f1:61:94:0b:47:
                    d7:5b:71:9a:b6:08:19:83:1f:8f:9e:01:76:d7:43:
                    c1:42:bc:7c:6e:dc:a4:b2:1c:fd:7c:29:a0:0d:d8:
                    6b:19:be:8d:12:c7:ab:a9:cb:db:22:e8:e9:32:12:
                    e3:2d:7b:f2:ae:58:89:64:1a:31:de:26:fd:10:0b:
                    5e:44:25:cf:ee:98:1e:89:6e:8b:ff:7a:25:f8:ae:
                    fa:44:a4:a9:b2:51:11:9b:68:b9:4d:b7:a2:7c:57:
                    11:89:93:47:2c:ee:2a:c0:33:c2:47:c3:40:db:46:
                    51:3d:8f:fc:43:e6:7f:ef:84:fe:ae:ec:3e:fa:a4:
                    53:d7:69:9c:37:2c:26:3e:da:5d:c6:3e:5d:27:a5:
                    d4:e9:c9:66:74:20:73:49:b0:9e:7b:3d:44:64:a8:
                    ff:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C9:40:7D:7F:37:0F:25:90:36:F0:37:63:A4:B2:53:BF:60:A8:57
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2F64BBCC3B411F1986220EBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.16.0/22
                  45.194.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:65:c4:83:7e:f4:19:7e:4c:4a:0c:4a:8e:d5:e5:7b:2b:23:
         67:e9:a8:a7:cc:66:b6:f4:60:e0:37:cb:60:df:bd:1e:3e:94:
         f3:16:f7:b7:7c:74:c2:dd:3d:dd:4f:f1:21:25:83:ee:77:7c:
         47:e9:d8:f5:1d:d3:00:4e:bf:e2:d1:a5:3d:71:de:74:e4:28:
         96:a3:d6:64:ac:55:56:20:c6:62:bb:fc:09:90:20:9a:1b:02:
         e7:29:f8:90:4f:9d:cb:b4:87:f7:74:98:4b:bd:ee:e0:b6:f3:
         58:f5:e0:c7:db:6a:76:aa:38:24:22:20:73:a4:ee:e9:6d:df:
         1d:21:77:f1:e2:20:95:19:43:f0:3a:19:53:30:c6:06:c8:f6:
         9f:b8:51:fc:40:2c:14:92:66:ed:c6:4e:19:55:22:24:88:39:
         47:55:e0:21:9c:0b:64:50:11:50:2b:30:72:f3:d0:33:a9:1b:
         18:8a:7c:eb:a3:35:35:c8:86:f4:54:73:82:d4:fb:e2:10:23:
         f3:20:27:d1:62:66:58:1d:c5:da:51:56:e1:16:7f:51:f9:85:
         34:da:1c:33:8c:cd:aa:71:f4:73:7d:a9:6d:61:b9:3a:bf:b9:
         b6:ff:cb:14:e9:73:36:ab:b3:8a:d2:e8:1f:ad:3f:9c:e7:44:
         c1:0e:2f:f2
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAdwDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDA5MDc0MDUxWhcNMjYxMDE5MDc0MDUxWjAYMRYw
FAYDVQQDEw02YWM4OWE4OC1mZjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnu9rrWp1gGC1AEsYFST7m675zwVh9upM2yxMQrlE3VZbeh2OonSPc3Xi
ClmNkVjGadMIF3gO1a3Ft9A7drQPld29xijraMndH1y/LUra9juPJwnykwkhNIAx
8SJxwdMmeALe8WGUC0fXW3GatggZgx+PngF210PBQrx8btykshz9fCmgDdhrGb6N
EserqcvbIujpMhLjLXvyrliJZBox3ib9EAteRCXP7pgeiW6L/3ol+K76RKSpslER
m2i5TbeifFcRiZNHLO4qwDPCR8NA20ZRPY/8Q+Z/74T+ruw++qRT12mcNywmPtpd
xj5dJ6XU6clmdCBzSbCeez1EZKj/vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjJ
QH1/Nw8lkDbwN2OkslO/YKhXMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMkY2NEJCQ0MzQjQxMUYxOTg2MjIwRUJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLcIQAwQALcIWMA0GCSqGSIb3
DQEBCwUAA4IBAQBLZcSDfvQZfkxKDEqO1eV7KyNn6ainzGa29GDgN8tg370ePpTz
Fve3fHTC3T3dT/EhJYPud3xH6dj1HdMATr/i0aU9cd505CiWo9ZkrFVWIMZiu/wJ
kCCaGwLnKfiQT53LtIf3dJhLve7gtvNY9eDH22p2qjgkIiBzpO7pbd8dIXfx4iCV
GUPwOhlTMMYGyPafuFH8QCwUkmbtxk4ZVSIkiDlHVeAhnAtkUBFQKzBy89AzqRsY
inzrozU1yIb0VHOC1PviECPzICfRYmZYHcXaUVbhFn9R+YU02hwzjM2qcfRzfalt
Ybk6v7m2/8sU6XM2q7OK0ugfrT+c50TBDi/y
-----END CERTIFICATE-----