Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C62C8796A30311F1B2C92803CF1D38B0.roa
File:                     C62C8796A30311F1B2C92803CF1D38B0.roa (raw, json)
Hash identifier:          xKd/m7cMT3IMRJ+wHCWCxcdDBnPTFeEOIFZg6/Tgc2Q=
Subject key identifier:   92:38:A5:B2:1D:B7:D7:32:57:7F:77:9C:72:06:49:EC:EA:F3:AC:F1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D1B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C62C8796A30311F1B2C92803CF1D38B0.roa
Signing time:             Fri 28 Aug 2026 17:13:23 +0000
ROA not before:           Fri 28 Aug 2026 17:13:19 +0000
ROA not after:            Mon 05 Oct 2026 17:13:19 +0000
asID:                     204741
IP address blocks:        45.194.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119221 (0x1d1b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 28 17:13:19 2026 GMT
            Not After : Oct  5 17:13:19 2026 GMT
        Subject: CN=6a91c1b3-7490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f2:59:23:7a:e8:38:73:cc:a7:ae:cc:14:2a:
                    af:69:ba:ee:17:33:f3:47:ad:f0:ae:f4:a9:d2:1f:
                    31:0a:a9:58:77:8c:98:d5:13:d5:e6:86:ef:32:83:
                    ad:cf:0e:1b:31:e8:f1:1b:fd:f3:b5:67:aa:01:ce:
                    b4:0f:d2:cc:d6:c1:8c:f5:50:c5:92:24:eb:99:b8:
                    a2:00:8e:66:47:a2:f7:b8:a8:59:bb:d4:82:10:8c:
                    3f:d1:51:4a:95:0b:de:f3:73:33:41:e6:df:b8:35:
                    af:8d:bd:6d:95:49:f5:c6:e6:f4:3b:55:78:89:2a:
                    f7:f1:24:a2:e4:c5:eb:d4:30:54:e5:5d:3f:4d:af:
                    65:d9:28:df:57:99:ee:ad:b9:e0:71:cf:b8:24:ed:
                    af:10:ca:f1:38:42:41:c6:98:1b:89:b3:79:70:f6:
                    b1:7f:6a:30:c2:8c:92:40:e1:1e:4f:60:f1:13:20:
                    ad:b0:81:2d:18:d2:87:9b:b0:6a:c4:93:ad:2f:0f:
                    36:96:b0:a5:8c:4e:0e:5c:27:62:0b:27:f6:2a:6e:
                    08:c0:97:5e:65:dc:a3:c6:ca:c5:c6:51:ce:7d:bf:
                    2f:9b:76:bd:85:89:06:45:85:65:f1:f9:42:a6:be:
                    98:1e:37:4f:bd:b3:0f:05:b3:b1:b2:c3:15:97:31:
                    aa:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:38:A5:B2:1D:B7:D7:32:57:7F:77:9C:72:06:49:EC:EA:F3:AC:F1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C62C8796A30311F1B2C92803CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:f1:b4:73:5f:92:5e:35:a9:0f:6a:2a:2b:86:ba:83:e4:73:
         bf:ec:15:a4:21:32:b4:d4:b9:3a:e8:5d:16:b2:16:b8:14:64:
         e3:5a:4f:ac:9d:6d:79:e7:42:da:b4:94:66:a6:ee:35:e8:0e:
         d7:b5:bd:9f:af:2c:e3:2a:bb:2c:a0:bc:09:4f:00:20:b9:14:
         21:49:c7:d1:4f:02:4d:a1:45:d3:19:69:9c:c4:97:13:a2:a7:
         db:c6:86:80:e6:94:54:74:f6:d2:0c:25:05:3f:0a:8e:13:36:
         97:db:66:73:9e:28:de:36:e5:3d:87:b2:c9:eb:12:66:e0:c9:
         d9:69:59:48:b9:f8:ed:b2:81:ce:db:bd:d4:74:17:6c:67:03:
         b8:4e:66:91:14:f1:f1:19:90:ba:8c:8d:25:2e:de:f6:19:f2:
         db:ec:16:34:56:14:d0:34:95:3c:3f:68:ee:7d:5b:cd:33:c6:
         49:26:2f:5c:0f:f1:63:fa:cd:aa:d3:f9:d0:43:1e:77:ad:25:
         44:4b:b9:f0:1c:c0:55:1d:4e:84:15:2a:f7:91:ac:84:17:d8:
         4e:fa:51:c3:e2:de:53:fd:43:3e:e5:f5:65:69:31:59:e1:c9:
         c1:a5:7a:24:ee:6a:f6:46:c2:6c:ea:9b:b3:02:4b:26:1b:52:
         a8:2d:fa:de
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdG1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODI4MTcxMzE5WhcNMjYxMDA1MTcxMzE5WjAYMRYw
FAYDVQQDEw02YTkxYzFiMy03NDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3vJZI3roOHPMp67MFCqvabruFzPzR63wrvSp0h8xCqlYd4yY1RPV5obv
MoOtzw4bMejxG/3ztWeqAc60D9LM1sGM9VDFkiTrmbiiAI5mR6L3uKhZu9SCEIw/
0VFKlQve83MzQebfuDWvjb1tlUn1xub0O1V4iSr38SSi5MXr1DBU5V0/Ta9l2Sjf
V5nurbngcc+4JO2vEMrxOEJBxpgbibN5cPaxf2owwoySQOEeT2DxEyCtsIEtGNKH
m7BqxJOtLw82lrCljE4OXCdiCyf2Km4IwJdeZdyjxsrFxlHOfb8vm3a9hYkGRYVl
8flCpr6YHjdPvbMPBbOxssMVlzGqLQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJI4
pbIdt9cyV393nHIGSezq86zxMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DNjJDODc5NkEzMDMxMUYxQjJDOTI4MDNDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcJBMA0GCSqGSIb3DQEBCwUA
A4IBAQBV8bRzX5JeNakPaiorhrqD5HO/7BWkITK01Lk66F0Wsha4FGTjWk+snW15
50LatJRmpu416A7Xtb2fryzjKrssoLwJTwAguRQhScfRTwJNoUXTGWmcxJcToqfb
xoaA5pRUdPbSDCUFPwqOEzaX22ZznijeNuU9h7LJ6xJm4MnZaVlIufjtsoHO273U
dBdsZwO4TmaRFPHxGZC6jI0lLt72GfLb7BY0VhTQNJU8P2jufVvNM8ZJJi9cD/Fj
+s2q0/nQQx53rSVES7nwHMBVHU6EFSr3kayEF9hO+lHD4t5T/UM+5fVlaTFZ4cnB
pXok7mr2RsJs6puzAksmG1KoLfre
-----END CERTIFICATE-----