Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D24391D6B6A011F1B67F1FF5CE1D38B0.roa
File:                     D24391D6B6A011F1B67F1FF5CE1D38B0.roa (raw, json)
Hash identifier:          HWPhFduPT2jy00l5Wpm3l9HcDgNJ4PCmDuyisO74X3Y=
Subject key identifier:   08:B6:E6:4B:68:5C:A7:00:4F:F4:F8:18:FF:DE:5D:BB:85:EA:6B:08
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D83A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D24391D6B6A011F1B67F1FF5CE1D38B0.roa
Signing time:             Tue 22 Sep 2026 16:15:27 +0000
ROA not before:           Tue 22 Sep 2026 16:15:23 +0000
ROA not after:            Thu 29 Oct 2026 16:15:23 +0000
asID:                     62240
IP address blocks:        45.192.32.0/24 maxlen: 24
                          45.192.33.0/24 maxlen: 24
                          45.192.34.0/24 maxlen: 24
                          45.192.35.0/24 maxlen: 24
                          45.192.36.0/24 maxlen: 24
                          45.192.37.0/24 maxlen: 24
                          45.192.38.0/24 maxlen: 24
                          45.192.39.0/24 maxlen: 24
                          45.192.40.0/24 maxlen: 24
                          45.192.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120890 (0x1d83a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 16:15:23 2026 GMT
            Not After : Oct 29 16:15:23 2026 GMT
        Subject: CN=6ab2a99f-3420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d3:4b:5c:2a:e5:db:d7:c6:72:47:68:87:dd:
                    b8:7c:7b:3e:50:8a:aa:78:78:e3:6b:e4:6a:11:a5:
                    70:bb:42:f3:6c:61:77:5c:75:f3:8a:1c:a7:91:4e:
                    ca:69:37:c3:3a:ce:bb:1a:c5:20:65:0f:db:13:c6:
                    d2:a2:f9:46:4b:82:d8:40:cc:0c:f3:21:6f:2a:2e:
                    aa:3a:01:8b:31:45:f5:7a:4c:ef:0b:b6:0e:31:d8:
                    b2:f2:4a:65:47:bb:18:47:f9:be:7b:c3:df:f4:dc:
                    60:71:19:2d:88:5c:46:b1:58:af:8d:72:e2:a3:e3:
                    53:1b:48:ae:27:19:43:72:b3:16:a7:14:e2:0a:40:
                    bf:cf:cb:f4:63:f7:61:16:f7:0d:51:60:bd:cc:a1:
                    35:fd:bb:23:1a:3e:5a:ca:41:a3:1e:bf:0d:01:f7:
                    92:f9:d9:41:1c:83:01:c0:a6:6f:17:54:98:1c:43:
                    0d:1e:4e:6f:f6:5d:74:15:e6:9f:fd:cf:58:ed:22:
                    b3:53:cb:75:9e:c0:e3:6b:79:ce:a5:8b:fc:40:b6:
                    4d:db:a2:4f:06:6e:85:ce:f8:79:72:a8:2e:28:0b:
                    a0:68:14:09:fb:ba:ff:95:9b:88:51:87:11:3a:90:
                    e5:32:89:db:b3:2d:33:0f:bc:0c:7e:14:4f:75:8d:
                    b5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B6:E6:4B:68:5C:A7:00:4F:F4:F8:18:FF:DE:5D:BB:85:EA:6B:08
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D24391D6B6A011F1B67F1FF5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.32.0-45.192.41.255

    Signature Algorithm: sha256WithRSAEncryption
         38:f2:14:27:d9:b6:d7:68:4b:8a:b9:81:b4:1b:89:4c:ba:02:
         1c:c9:28:8d:08:3e:14:33:84:aa:74:16:bf:73:d6:0d:b9:ef:
         98:92:d7:95:5f:c5:e1:f6:ab:28:14:d4:e8:21:95:49:3c:10:
         64:f8:d0:60:33:e5:5c:01:28:10:0b:d8:a8:c1:00:db:d1:b1:
         1e:e3:3d:94:66:d1:0f:81:db:17:48:df:17:4a:88:bc:71:25:
         30:68:98:db:96:bb:36:01:60:8f:0e:c0:3a:f9:da:ac:00:61:
         dc:04:73:75:f7:65:40:df:9c:73:7a:02:1a:c9:59:3d:c2:88:
         dc:b4:47:8d:04:1e:3c:97:1c:6f:49:f6:c3:11:96:84:67:ee:
         2a:80:d2:70:0e:bc:0a:87:97:71:d7:86:67:0f:89:e6:c9:ba:
         3c:89:43:8c:c5:74:e1:56:37:77:02:40:53:e1:14:f3:31:35:
         82:7d:74:3d:31:e8:7f:60:31:ea:cc:9d:15:b4:c6:14:9b:52:
         74:3d:d8:28:65:11:97:99:c2:e9:05:38:bb:82:cf:07:9f:30:
         b0:a4:b0:1f:8c:7d:65:e0:2b:36:e8:24:a7:12:23:d1:4d:a3:
         52:a1:53:5c:18:32:2e:54:da:83:4f:8e:55:b7:ee:e3:7c:de:
         8c:5e:02:f8
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAdg6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTIyMTYxNTIzWhcNMjYxMDI5MTYxNTIzWjAYMRYw
FAYDVQQDEw02YWIyYTk5Zi0zNDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA09NLXCrl29fGckdoh924fHs+UIqqeHjja+RqEaVwu0LzbGF3XHXzihyn
kU7KaTfDOs67GsUgZQ/bE8bSovlGS4LYQMwM8yFvKi6qOgGLMUX1ekzvC7YOMdiy
8kplR7sYR/m+e8Pf9NxgcRktiFxGsVivjXLio+NTG0iuJxlDcrMWpxTiCkC/z8v0
Y/dhFvcNUWC9zKE1/bsjGj5aykGjHr8NAfeS+dlBHIMBwKZvF1SYHEMNHk5v9l10
Feaf/c9Y7SKzU8t1nsDja3nOpYv8QLZN26JPBm6Fzvh5cqguKAugaBQJ+7r/lZuI
UYcROpDlMonbsy0zD7wMfhRPdY214QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFAi2
5ktoXKcAT/T4GP/eXbuF6msIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMjQzOTFENkI2QTAxMUYxQjY3RjFGRjVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAUtwCADBAEtwCgwDQYJKoZI
hvcNAQELBQADggEBADjyFCfZttdoS4q5gbQbiUy6AhzJKI0IPhQzhKp0Fr9z1g25
75iS15VfxeH2qygU1OghlUk8EGT40GAz5VwBKBAL2KjBANvRsR7jPZRm0Q+B2xdI
3xdKiLxxJTBomNuWuzYBYI8OwDr52qwAYdwEc3X3ZUDfnHN6AhrJWT3CiNy0R40E
HjyXHG9J9sMRloRn7iqA0nAOvAqHl3HXhmcPiebJujyJQ4zFdOFWN3cCQFPhFPMx
NYJ9dD0x6H9gMerMnRW0xhSbUnQ92ChlEZeZwukFOLuCzwefMLCksB+MfWXgKzbo
JKcSI9FNo1KhU1wYMi5U2oNPjlW37uN83oxeAvg=
-----END CERTIFICATE-----