Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF50A718BA6311F183B77606CF1D38B0.roa
File:                     CF50A718BA6311F183B77606CF1D38B0.roa (raw, json)
Hash identifier:          QPfK9x2yDMEeFg63BmQgkZLp5UQtjmPyHcUw0kz/epo=
Subject key identifier:   97:49:BE:A2:F1:D3:E3:11:A9:DE:AA:88:F4:1A:07:E5:92:C1:8A:F2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D935
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF50A718BA6311F183B77606CF1D38B0.roa
Signing time:             Sun 27 Sep 2026 11:08:47 +0000
ROA not before:           Sun 27 Sep 2026 11:08:43 +0000
ROA not after:            Tue 03 Nov 2026 11:08:43 +0000
asID:                     401362
IP address blocks:        45.201.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 25 Oct 2026 08:20:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121141 (0x1d935)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 27 11:08:43 2026 GMT
            Not After : Nov  3 11:08:43 2026 GMT
        Subject: CN=6ab8f93f-29a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c6:5a:eb:5e:e2:29:63:33:f8:33:08:d0:d3:
                    e6:b7:17:04:c6:f1:0c:ca:97:1c:c2:65:5a:68:d7:
                    59:80:03:24:62:f4:46:39:b6:d9:c3:f7:13:c2:b6:
                    31:3c:67:e9:92:b1:bc:a6:09:a1:b4:1f:00:70:8e:
                    31:4d:7a:9c:f1:2e:d0:98:23:1e:2c:68:b5:0a:15:
                    9a:ca:d8:5d:c7:ab:42:eb:8b:97:37:76:79:07:18:
                    a6:2f:5e:78:ee:b5:c1:c0:e3:c0:68:9e:34:4f:14:
                    fe:5b:b6:94:d0:a7:28:a0:5b:a2:1f:cb:4a:88:a0:
                    41:4c:9f:2a:d8:b6:3b:e1:cb:42:ef:e0:75:b4:62:
                    44:ca:54:92:8c:dc:e2:ef:55:01:65:87:87:3f:52:
                    af:6f:db:99:3e:94:49:6d:1c:7b:3a:34:86:5d:11:
                    5c:f2:d6:4e:ab:49:25:ce:00:2a:2b:cd:7b:1d:59:
                    36:f1:6b:d8:8e:e0:c3:8e:f4:ba:6e:65:9e:f8:b9:
                    41:1c:c7:9a:6e:b6:64:db:7d:17:6b:34:6f:ff:a5:
                    28:2b:5b:e5:a3:92:7f:e3:e0:f5:40:53:0c:7f:63:
                    c8:47:26:a7:5d:72:b0:15:3c:d1:ab:13:b2:55:ef:
                    2b:07:8a:27:77:29:9f:21:0a:cb:07:25:c8:00:2b:
                    84:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:49:BE:A2:F1:D3:E3:11:A9:DE:AA:88:F4:1A:07:E5:92:C1:8A:F2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF50A718BA6311F183B77606CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:a0:a1:4a:83:cd:60:44:97:f6:7f:2c:08:bc:a8:79:00:08:
         ed:18:12:45:97:5e:e2:a7:89:f7:58:f6:74:c0:06:69:c3:62:
         af:4b:57:94:83:d2:5b:23:36:b9:f3:d5:fa:ca:d9:3a:95:e4:
         9e:be:13:91:ad:58:18:4a:03:0f:ba:55:ce:a7:56:32:3c:5b:
         08:13:27:b6:01:96:89:15:87:a8:8d:7d:50:c2:31:6d:20:c2:
         2f:c3:60:4d:52:a8:5a:7d:90:6f:a1:8d:ab:fe:ca:18:ca:27:
         bd:8f:f4:7f:fb:99:74:e0:7b:45:42:5b:fa:76:0a:9b:f3:45:
         13:6e:08:54:8e:3b:55:68:c4:27:7c:b0:59:bb:8c:cb:57:bb:
         57:85:3b:4d:4b:f3:60:ce:fe:67:b0:82:4a:97:84:a5:15:87:
         cd:9d:2b:f5:53:dd:3a:ef:03:22:14:57:0c:85:59:78:49:7a:
         c6:98:e5:42:42:10:05:0e:3f:ee:11:3f:26:2d:c6:c3:41:88:
         6a:32:64:95:3b:fa:d0:4e:f5:19:a7:f7:ee:d1:42:56:be:d3:
         f2:82:26:97:ce:6a:ae:7b:16:f7:b9:fa:a0:f9:c1:ee:f0:a7:
         d0:f2:c5:a7:53:ee:20:56:c7:26:5a:bf:4a:3b:fe:24:69:02:
         26:7b:c6:e0
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdk1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTI3MTEwODQzWhcNMjYxMTAzMTEwODQzWjAYMRYw
FAYDVQQDEw02YWI4ZjkzZi0yOWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA28Za617iKWMz+DMI0NPmtxcExvEMypccwmVaaNdZgAMkYvRGObbZw/cT
wrYxPGfpkrG8pgmhtB8AcI4xTXqc8S7QmCMeLGi1ChWaythdx6tC64uXN3Z5Bxim
L1547rXBwOPAaJ40TxT+W7aU0KcooFuiH8tKiKBBTJ8q2LY74ctC7+B1tGJEylSS
jNzi71UBZYeHP1Kvb9uZPpRJbRx7OjSGXRFc8tZOq0klzgAqK817HVk28WvYjuDD
jvS6bmWe+LlBHMeabrZk230XazRv/6UoK1vlo5J/4+D1QFMMf2PIRyanXXKwFTzR
qxOyVe8rB4ondymfIQrLByXIACuEoQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJdJ
vqLx0+MRqd6qiPQaB+WSwYryMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRjUwQTcxOEJBNjMxMUYxODNCNzc2MDZDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALckIMA0GCSqGSIb3DQEBCwUA
A4IBAQBZoKFKg81gRJf2fywIvKh5AAjtGBJFl17ip4n3WPZ0wAZpw2KvS1eUg9Jb
Iza589X6ytk6leSevhORrVgYSgMPulXOp1YyPFsIEye2AZaJFYeojX1QwjFtIMIv
w2BNUqhafZBvoY2r/soYyie9j/R/+5l04HtFQlv6dgqb80UTbghUjjtVaMQnfLBZ
u4zLV7tXhTtNS/Ngzv5nsIJKl4SlFYfNnSv1U9067wMiFFcMhVl4SXrGmOVCQhAF
Dj/uET8mLcbDQYhqMmSVO/rQTvUZp/fu0UJWvtPygiaXzmquexb3ufqg+cHu8KfQ
8sWnU+4gVscmWr9KO/4kaQIme8bg
-----END CERTIFICATE-----