Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3237DD08C6811F1A168BAA2CE1D38B0.roa
File:                     D3237DD08C6811F1A168BAA2CE1D38B0.roa (raw, json)
Hash identifier:          zkJZhf4zBO74S1Ez9o+fTe8N+wrDKiYLnye7/hxedWc=
Subject key identifier:   65:A6:0F:A3:B5:4E:63:4C:B9:DE:EE:73:78:A5:E7:2F:95:7C:66:C3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C8CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3237DD08C6811F1A168BAA2CE1D38B0.roa
Signing time:             Thu 30 Jul 2026 22:48:47 +0000
ROA not before:           Thu 30 Jul 2026 22:48:43 +0000
ROA not after:            Thu 03 Sep 2026 22:48:43 +0000
asID:                     62425
IP address blocks:        45.198.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116940 (0x1c8cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 30 22:48:43 2026 GMT
            Not After : Sep  3 22:48:43 2026 GMT
        Subject: CN=6a6bd4cf-d403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:38:47:ac:17:b7:02:37:14:8f:94:bd:44:04:
                    b1:cf:ab:59:4f:43:36:22:45:d2:e3:8e:b5:77:ec:
                    db:5e:bc:37:03:c9:56:08:e1:34:02:b0:67:94:18:
                    90:b1:da:f9:88:47:62:6c:78:97:10:8e:cb:1a:02:
                    ff:e9:fe:85:a8:9e:fa:69:ef:29:a0:c8:eb:30:b1:
                    12:e9:4c:a9:b0:ee:bb:62:ee:29:89:a7:70:82:25:
                    76:6c:a4:4c:60:11:59:7d:1f:27:4a:02:a6:2b:ff:
                    be:a3:f5:25:67:15:b5:0f:40:c7:3c:9b:a0:46:8a:
                    59:c4:2e:b9:dd:43:7e:be:0b:2c:1f:97:08:69:d1:
                    5c:6b:6a:b8:ee:22:48:01:b9:3f:60:11:a4:c4:2c:
                    9c:d8:23:cc:f8:ca:75:93:dc:52:7e:8d:23:cc:b7:
                    b1:da:8a:d9:85:f9:84:2e:46:05:ef:3a:4c:20:e4:
                    6c:08:82:6e:c3:3c:ea:5c:9a:a0:4a:d2:1b:00:9d:
                    15:52:c8:74:68:a6:70:b8:87:76:0c:77:9e:b4:e4:
                    4f:07:42:45:76:37:40:25:56:ce:03:5d:63:6f:ab:
                    ed:11:eb:bd:40:e5:1b:3f:ae:ed:53:c5:c1:1d:f8:
                    c4:e7:2a:57:83:e7:35:21:32:fb:b7:00:32:a3:41:
                    69:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A6:0F:A3:B5:4E:63:4C:B9:DE:EE:73:78:A5:E7:2F:95:7C:66:C3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D3237DD08C6811F1A168BAA2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:5e:ce:e9:45:de:6f:21:c6:30:ae:d0:b5:72:90:68:75:38:
         b1:96:96:a4:9c:1b:72:a2:64:a7:be:57:69:37:39:90:15:ff:
         93:bc:27:eb:38:c8:d5:66:5f:7c:56:50:da:63:1b:b0:1b:a0:
         c5:fc:81:3b:24:d9:a3:86:18:86:52:78:c4:b0:08:a1:d2:4e:
         0a:3e:2a:84:3d:51:6c:ed:d6:8e:44:2c:b5:2c:97:2d:48:7a:
         63:38:a6:d2:c6:0d:6b:44:97:69:a8:1f:aa:26:57:ee:0d:2d:
         1b:80:0e:6f:13:05:75:14:b3:31:a2:b9:00:a2:4e:dc:91:cb:
         58:d5:43:24:e7:7e:b8:a5:7a:82:ca:5a:af:18:cc:85:69:0a:
         0f:d0:3d:f4:56:c9:fb:40:98:f9:91:80:19:17:cd:cd:9f:17:
         a9:2b:08:b7:ce:0a:79:71:3d:4b:58:48:89:ab:cb:3a:8b:8e:
         54:73:07:0a:0e:1c:c5:f1:bd:18:dd:f3:41:44:20:e2:f3:ff:
         64:82:cb:b0:36:f6:2e:a9:ab:bf:76:05:9a:63:16:ca:df:a7:
         0a:53:10:34:3c:40:2a:69:b6:80:a9:79:07:b0:f9:81:f8:17:
         0c:c9:f5:2a:94:fe:fa:dc:02:38:93:ca:d9:a4:eb:7a:73:f2:
         a4:07:c1:87
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcjMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzMwMjI0ODQzWhcNMjYwOTAzMjI0ODQzWjAYMRYw
FAYDVQQDEw02YTZiZDRjZi1kNDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsjhHrBe3AjcUj5S9RASxz6tZT0M2IkXS4461d+zbXrw3A8lWCOE0ArBn
lBiQsdr5iEdibHiXEI7LGgL/6f6FqJ76ae8poMjrMLES6UypsO67Yu4piadwgiV2
bKRMYBFZfR8nSgKmK/++o/UlZxW1D0DHPJugRopZxC653UN+vgssH5cIadFca2q4
7iJIAbk/YBGkxCyc2CPM+Mp1k9xSfo0jzLex2orZhfmELkYF7zpMIORsCIJuwzzq
XJqgStIbAJ0VUsh0aKZwuId2DHeetORPB0JFdjdAJVbOA11jb6vtEeu9QOUbP67t
U8XBHfjE5ypXg+c1ITL7twAyo0FpTwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGWm
D6O1TmNMud7uc3il5y+VfGbDMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMzIzN0REMDhDNjgxMUYxQTE2OEJBQTJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcZEMA0GCSqGSIb3DQEBCwUA
A4IBAQBmXs7pRd5vIcYwrtC1cpBodTixlpaknBtyomSnvldpNzmQFf+TvCfrOMjV
Zl98VlDaYxuwG6DF/IE7JNmjhhiGUnjEsAih0k4KPiqEPVFs7daORCy1LJctSHpj
OKbSxg1rRJdpqB+qJlfuDS0bgA5vEwV1FLMxorkAok7ckctY1UMk5364pXqCylqv
GMyFaQoP0D30Vsn7QJj5kYAZF83NnxepKwi3zgp5cT1LWEiJq8s6i45UcwcKDhzF
8b0Y3fNBRCDi8/9kgsuwNvYuqau/dgWaYxbK36cKUxA0PEAqabaAqXkHsPmB+BcM
yfUqlP763AI4k8rZpOt6c/KkB8GH
-----END CERTIFICATE-----