Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBBC32D8BBEF11F196751B1ECF1D38B0.roa
File:                     CBBC32D8BBEF11F196751B1ECF1D38B0.roa (raw, json)
Hash identifier:          zxU89E3nfCP/jh263pYUDPvPaKdRInj2Nvpl0z/48PY=
Subject key identifier:   22:81:B6:BF:84:8E:0B:CB:BF:65:54:1A:2B:91:84:BF:77:7E:69:9D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D984
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBBC32D8BBEF11F196751B1ECF1D38B0.roa
Signing time:             Tue 29 Sep 2026 10:23:22 +0000
ROA not before:           Tue 29 Sep 2026 10:23:17 +0000
ROA not after:            Wed 28 Oct 2026 10:23:17 +0000
asID:                     18229
IP address blocks:        45.198.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121220 (0x1d984)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 29 10:23:17 2026 GMT
            Not After : Oct 28 10:23:17 2026 GMT
        Subject: CN=6abb919a-e79f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c5:4b:44:9f:1c:49:13:21:78:70:58:f0:cf:
                    ce:ec:e4:18:2e:87:81:22:3d:08:01:4e:8f:41:59:
                    e1:fa:13:f8:37:71:d5:d3:c4:9e:e8:dd:73:c9:bb:
                    52:35:f9:80:93:c5:c0:db:e5:63:a0:e7:7c:40:44:
                    89:51:ad:3e:e6:6b:b2:6d:4e:30:a7:39:f9:d8:ba:
                    29:fe:0f:ba:ee:72:0f:ed:de:34:47:da:7d:4b:46:
                    1e:ef:df:00:cf:2f:d3:02:c0:da:cc:df:57:58:5a:
                    30:72:f0:08:42:3d:f6:b7:94:30:e4:79:2f:4f:be:
                    8d:5e:dc:e9:ae:87:67:81:b0:da:7e:82:93:87:a5:
                    6e:44:e9:25:c7:e7:c1:1e:43:f3:2f:c7:7f:8e:e7:
                    76:57:c6:b0:2a:68:60:56:00:53:fc:11:16:25:4f:
                    0b:a6:20:7a:76:8b:b7:ff:94:7a:81:23:52:fa:38:
                    80:1a:ce:a3:7e:c8:64:ab:15:33:6f:c4:db:63:23:
                    b1:1f:18:8f:4b:f5:c8:2e:85:17:d3:15:72:55:50:
                    4c:be:52:b9:de:11:5c:07:96:ff:89:66:0b:fd:e4:
                    05:e2:c1:f2:9c:40:e1:ca:e3:0e:48:82:1b:d3:e2:
                    a7:bc:b3:9c:e3:3e:8b:27:58:32:0e:7e:6f:0b:50:
                    3f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:81:B6:BF:84:8E:0B:CB:BF:65:54:1A:2B:91:84:BF:77:7E:69:9D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBBC32D8BBEF11F196751B1ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:20:10:26:82:ea:64:06:71:43:2e:f3:30:c0:fc:22:68:31:
         dd:ce:e6:e9:50:08:3b:f6:7c:89:71:05:6b:b7:1f:97:3d:bd:
         f5:77:14:21:21:74:2c:f0:f4:40:7e:fd:a0:dc:01:8e:78:fa:
         4e:ce:b1:96:6c:f7:f5:e6:8f:fc:b6:c9:35:b6:6a:86:81:1c:
         07:32:f0:74:ca:8d:70:9a:65:9f:4c:17:f1:1c:66:6f:b6:7d:
         33:ac:f7:dd:63:6b:5c:b1:43:2d:4a:e6:64:5a:ce:7a:5d:e8:
         b7:f7:a6:9c:05:9f:57:6b:5d:2f:07:c8:50:53:67:c5:80:15:
         2d:c7:93:4c:23:46:e5:8c:7a:10:10:e1:5a:f7:84:e0:ca:41:
         89:fa:32:e8:3d:ac:f1:ce:06:dd:5e:f1:da:0d:38:53:aa:2e:
         ea:df:9b:0e:67:56:01:67:3b:ab:d1:7d:a9:7f:95:96:73:40:
         50:37:8b:87:91:c9:2b:93:9e:e2:dc:34:32:3d:34:b0:30:f0:
         32:84:1b:98:44:7f:30:79:f2:28:e6:3d:a9:6e:4f:78:25:a0:
         f4:59:e5:ea:13:d6:3f:3b:bb:ae:a8:24:79:2e:8b:15:d6:35:
         ae:d0:22:c1:e0:b8:fb:eb:86:45:7e:c5:6e:14:9c:6e:b4:e4:
         dc:36:b0:54
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdmEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTI5MTAyMzE3WhcNMjYxMDI4MTAyMzE3WjAYMRYw
FAYDVQQDEw02YWJiOTE5YS1lNzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArMVLRJ8cSRMheHBY8M/O7OQYLoeBIj0IAU6PQVnh+hP4N3HV08Se6N1z
ybtSNfmAk8XA2+VjoOd8QESJUa0+5muybU4wpzn52Lop/g+67nIP7d40R9p9S0Ye
798Azy/TAsDazN9XWFowcvAIQj32t5Qw5HkvT76NXtzprodngbDafoKTh6VuROkl
x+fBHkPzL8d/jud2V8awKmhgVgBT/BEWJU8LpiB6dou3/5R6gSNS+jiAGs6jfshk
qxUzb8TbYyOxHxiPS/XILoUX0xVyVVBMvlK53hFcB5b/iWYL/eQF4sHynEDhyuMO
SIIb0+KnvLOc4z6LJ1gyDn5vC1A/VwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCKB
tr+EjgvLv2VUGiuRhL93fmmdMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DQkJDMzJEOEJCRUYxMUYxOTY3NTFCMUVDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcbBMA0GCSqGSIb3DQEBCwUA
A4IBAQBIIBAmgupkBnFDLvMwwPwiaDHdzubpUAg79nyJcQVrtx+XPb31dxQhIXQs
8PRAfv2g3AGOePpOzrGWbPf15o/8tsk1tmqGgRwHMvB0yo1wmmWfTBfxHGZvtn0z
rPfdY2tcsUMtSuZkWs56Xei396acBZ9Xa10vB8hQU2fFgBUtx5NMI0bljHoQEOFa
94TgykGJ+jLoPazxzgbdXvHaDThTqi7q35sOZ1YBZzur0X2pf5WWc0BQN4uHkckr
k57i3DQyPTSwMPAyhBuYRH8wefIo5j2pbk94JaD0WeXqE9Y/O7uuqCR5LosV1jWu
0CLB4Lj764ZFfsVuFJxutOTcNrBU
-----END CERTIFICATE-----