Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D26B29B8C93C11F1A904B500CF1D38B0.roa
File:                     D26B29B8C93C11F1A904B500CF1D38B0.roa (raw, json)
Hash identifier:          bqxE84Idbna6td4KuPMfYOv/zLc/z1UmBEeqIpTY/4g=
Subject key identifier:   6E:19:26:69:65:16:57:73:FE:EF:42:76:34:F0:B1:ED:80:ED:97:AE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DDEA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D26B29B8C93C11F1A904B500CF1D38B0.roa
Signing time:             Fri 16 Oct 2026 08:37:29 +0000
ROA not before:           Fri 16 Oct 2026 08:37:25 +0000
ROA not after:            Wed 06 Oct 2027 08:37:25 +0000
asID:                     32848
IP address blocks:        45.199.170.0/24 maxlen: 24
                          45.199.171.0/24 maxlen: 24
                          45.199.172.0/24 maxlen: 24
                          45.199.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122346 (0x1ddea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 16 08:37:25 2026 GMT
            Not After : Oct  6 08:37:25 2027 GMT
        Subject: CN=6ad1e249-3bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0a:82:36:1c:18:08:1f:cc:ec:16:8f:b0:b3:
                    9d:a8:9b:5e:c2:35:e7:60:65:4b:d9:f5:b9:92:5b:
                    af:c1:c0:fb:34:1b:eb:69:ea:d4:83:8c:78:a3:57:
                    a5:75:a9:ae:1b:89:3b:42:6c:ac:12:07:95:ae:11:
                    57:b5:19:58:30:ea:fb:c0:ca:a6:a3:b6:bd:a4:fe:
                    6c:67:34:c3:5a:8c:3e:f8:a3:02:4b:19:3b:34:09:
                    55:16:d5:3f:5c:f1:4e:44:18:76:4c:66:b7:dd:02:
                    a6:03:9f:06:cc:a1:7a:83:29:87:c0:9d:99:e4:5b:
                    8c:e3:21:3f:e9:f0:a7:0d:94:2c:12:51:35:5f:3d:
                    d3:74:3e:59:ab:b8:95:84:7d:2b:ff:fa:f8:9f:c3:
                    ef:1d:10:b7:d9:18:ba:89:13:e2:33:a8:95:d4:4f:
                    ee:18:60:37:3d:70:59:bd:25:9a:b2:58:fa:d7:91:
                    17:3d:60:0c:c5:31:34:20:6f:9c:32:c1:37:e0:5d:
                    6c:b9:60:f6:ef:79:67:09:eb:97:38:75:5e:44:6f:
                    90:3d:cd:85:9c:67:4f:08:49:0f:17:7f:a3:7e:d3:
                    f6:21:f5:8f:6d:12:74:8a:8b:80:40:5c:41:ba:3f:
                    77:62:14:b4:e3:fc:14:8c:20:4b:c7:41:e8:21:63:
                    0a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:19:26:69:65:16:57:73:FE:EF:42:76:34:F0:B1:ED:80:ED:97:AE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D26B29B8C93C11F1A904B500CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.170.0-45.199.173.255

    Signature Algorithm: sha256WithRSAEncryption
         71:5a:eb:65:67:37:05:f5:5c:34:81:ac:3c:1c:dc:6a:a5:f2:
         2e:aa:e5:21:28:e7:95:03:d6:e2:d9:02:c2:d7:1e:6c:a1:30:
         45:bf:c7:e3:25:5e:e7:d5:fa:c5:5f:d9:80:5b:05:de:ba:31:
         11:d2:e6:76:fc:88:6a:a1:33:31:83:bc:f3:57:e7:d0:d1:fa:
         29:4e:14:91:88:de:29:f4:57:c3:5d:0e:ae:cf:98:53:da:c0:
         da:74:18:0d:2a:cd:5b:e4:8c:94:b4:9e:67:69:6b:af:83:52:
         67:c8:87:53:1c:9f:10:5d:9b:69:8d:a7:33:7e:79:0a:04:52:
         89:33:e0:81:f3:3c:e1:13:03:c1:d8:94:34:cc:e8:91:81:ba:
         26:d5:c5:12:8e:35:3d:a8:e2:71:5d:56:99:df:f4:c5:15:bf:
         6a:1f:45:e6:d5:3f:53:27:ea:31:42:a7:04:c2:9e:b2:04:67:
         f8:50:13:68:f5:04:f3:ff:0b:a6:a7:fe:8b:c4:09:d3:fa:bd:
         60:56:ba:44:f9:16:93:b2:bd:0f:23:94:26:cc:d1:87:11:fe:
         42:03:60:23:d2:4c:e7:5e:de:90:16:42:75:94:ca:2a:2d:ba:
         65:bd:16:6d:ad:72:06:f2:b7:be:ff:f1:04:ce:b0:d1:17:3f:
         a3:24:93:a6
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAd3qMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDE2MDgzNzI1WhcNMjcxMDA2MDgzNzI1WjAYMRYw
FAYDVQQDEw02YWQxZTI0OS0zYmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5gqCNhwYCB/M7BaPsLOdqJtewjXnYGVL2fW5kluvwcD7NBvraerUg4x4
o1eldamuG4k7QmysEgeVrhFXtRlYMOr7wMqmo7a9pP5sZzTDWow++KMCSxk7NAlV
FtU/XPFORBh2TGa33QKmA58GzKF6gymHwJ2Z5FuM4yE/6fCnDZQsElE1Xz3TdD5Z
q7iVhH0r//r4n8PvHRC32Ri6iRPiM6iV1E/uGGA3PXBZvSWaslj615EXPWAMxTE0
IG+cMsE34F1suWD273lnCeuXOHVeRG+QPc2FnGdPCEkPF3+jftP2IfWPbRJ0iouA
QFxBuj93YhS04/wUjCBLx0HoIWMKiwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFG4Z
JmllFldz/u9CdjTwse2A7ZeuMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMjZCMjlCOEM5M0MxMUYxQTkwNEI1MDBDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAEtx6oDBAEtx6wwDQYJKoZI
hvcNAQELBQADggEBAHFa62VnNwX1XDSBrDwc3Gql8i6q5SEo55UD1uLZAsLXHmyh
MEW/x+MlXufV+sVf2YBbBd66MRHS5nb8iGqhMzGDvPNX59DR+ilOFJGI3in0V8Nd
Dq7PmFPawNp0GA0qzVvkjJS0nmdpa6+DUmfIh1McnxBdm2mNpzN+eQoEUokz4IHz
POETA8HYlDTM6JGBuibVxRKONT2o4nFdVpnf9MUVv2ofRebVP1Mn6jFCpwTCnrIE
Z/hQE2j1BPP/C6an/ovECdP6vWBWukT5FpOyvQ8jlCbM0YcR/kIDYCPSTOde3pAW
QnWUyiotumW9Fm2tcgbyt77/8QTOsNEXP6Mkk6Y=
-----END CERTIFICATE-----