Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5089802934211F1888D23C6CE1D38B0.roa
File:                     D5089802934211F1888D23C6CE1D38B0.roa (raw, json)
Hash identifier:          YnXras25P41JrL9jypLyGcMwxS64riNdC3AcVwqP0UU=
Subject key identifier:   73:D8:19:59:D5:85:0A:A9:06:0A:03:AC:00:6A:5A:3D:77:1C:27:19
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CA98
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5089802934211F1888D23C6CE1D38B0.roa
Signing time:             Sat 08 Aug 2026 16:04:28 +0000
ROA not before:           Sat 08 Aug 2026 16:04:24 +0000
ROA not after:            Sun 13 Sep 2026 16:04:24 +0000
asID:                     154383
IP address blocks:        45.197.9.0/24 maxlen: 24
                          45.201.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 29 Aug 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117400 (0x1ca98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  8 16:04:24 2026 GMT
            Not After : Sep 13 16:04:24 2026 GMT
        Subject: CN=6a77538c-e6bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:82:e8:e2:0b:2e:d7:7f:8b:71:64:b0:68:
                    48:97:81:41:fa:aa:35:da:f1:41:0e:57:cd:c4:b0:
                    fd:4e:b2:80:62:9f:4b:c7:cf:33:88:85:a8:bb:0c:
                    70:37:d4:ab:0a:81:aa:41:b0:91:08:34:30:c7:3f:
                    62:10:5f:6a:0d:ce:be:26:8f:9c:aa:b9:a7:86:f4:
                    97:71:de:0a:8e:0c:37:3b:c9:7f:68:9d:87:3e:99:
                    f3:9b:96:f3:cb:7a:3b:a8:f1:6f:02:e0:e0:9f:76:
                    49:b0:63:a8:05:32:36:05:33:af:e6:70:0c:4c:5b:
                    ce:e0:b8:a6:90:89:64:11:cc:2c:d1:57:fb:f0:1e:
                    b2:e9:e7:d4:2a:a2:75:a3:1a:60:46:3c:bf:30:d8:
                    c0:c5:b6:df:da:0d:15:fc:a5:69:4c:b1:86:b8:1d:
                    10:ce:4f:d7:c1:e0:76:d4:19:81:fb:52:6b:60:82:
                    5f:81:3e:24:4c:a4:c7:f0:a3:5c:b4:fe:f4:f9:27:
                    9a:98:86:3d:b5:8e:59:fa:c9:0f:c6:97:82:e2:cb:
                    cc:1d:79:84:ff:42:bb:a2:e6:42:82:6b:83:76:8e:
                    08:fc:73:e8:66:fc:37:bc:d5:a7:ad:c0:89:70:23:
                    86:b7:01:0b:b6:fd:64:14:44:9b:a8:66:3b:dd:af:
                    0e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D8:19:59:D5:85:0A:A9:06:0A:03:AC:00:6A:5A:3D:77:1C:27:19
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5089802934211F1888D23C6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.9.0/24
                  45.201.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:71:32:b3:31:cb:e7:a2:8f:84:33:40:47:2a:8e:9b:3e:f6:
         ce:02:5a:d2:4f:53:c0:c8:f6:d9:c2:13:cc:ab:0c:62:51:26:
         6b:86:d1:58:e7:8a:9c:09:7a:6d:9a:db:52:71:e1:21:c7:5b:
         48:de:a8:99:93:21:22:7c:1a:86:af:85:95:3b:ec:6a:ab:0f:
         fc:99:2c:75:f6:29:26:59:ca:97:94:5f:90:58:f9:2f:29:04:
         2f:e3:36:9e:f4:21:c3:e5:41:cf:65:3d:6b:a8:e9:1e:42:5d:
         16:38:1d:38:0c:37:6a:66:97:e4:cb:3d:7c:51:78:02:4a:69:
         9a:ce:67:56:2b:49:f6:a9:2a:f6:6e:0d:85:c0:87:a6:ef:19:
         58:2f:c8:f8:ab:3b:6b:1e:9e:15:c2:ab:7d:c5:b5:93:91:6b:
         d0:05:45:7e:a4:ae:cb:04:ec:fd:0c:71:c5:07:bc:dd:c5:73:
         0c:36:77:78:73:19:bd:f2:0d:fe:4a:6f:bb:bd:38:bf:e9:0e:
         43:d9:ab:ac:6f:34:23:da:9a:31:9f:42:a3:39:14:25:4c:fb:
         c8:41:72:d0:e7:34:75:76:f2:10:90:e4:dc:17:8c:8f:ce:e6:
         ea:cd:da:b8:3e:0c:46:f1:b3:99:1a:9e:e7:ec:59:62:bf:b5:
         98:d2:dd:79
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAcqYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODA4MTYwNDI0WhcNMjYwOTEzMTYwNDI0WjAYMRYw
FAYDVQQDEw02YTc3NTM4Yy1lNmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu0GC6OILLtd/i3FksGhIl4FB+qo12vFBDlfNxLD9TrKAYp9Lx88ziIWo
uwxwN9SrCoGqQbCRCDQwxz9iEF9qDc6+Jo+cqrmnhvSXcd4Kjgw3O8l/aJ2HPpnz
m5bzy3o7qPFvAuDgn3ZJsGOoBTI2BTOv5nAMTFvO4LimkIlkEcws0Vf78B6y6efU
KqJ1oxpgRjy/MNjAxbbf2g0V/KVpTLGGuB0Qzk/XweB21BmB+1JrYIJfgT4kTKTH
8KNctP70+SeamIY9tY5Z+skPxpeC4svMHXmE/0K7ouZCgmuDdo4I/HPoZvw3vNWn
rcCJcCOGtwELtv1kFESbqGY73a8OiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPY
GVnVhQqpBgoDrABqWj13HCcZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9ENTA4OTgwMjkzNDIxMUYxODg4RDIzQzZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALcUJAwQALckiMA0GCSqGSIb3
DQEBCwUAA4IBAQAdcTKzMcvnoo+EM0BHKo6bPvbOAlrST1PAyPbZwhPMqwxiUSZr
htFY54qcCXptmttSceEhx1tI3qiZkyEifBqGr4WVO+xqqw/8mSx19ikmWcqXlF+Q
WPkvKQQv4zae9CHD5UHPZT1rqOkeQl0WOB04DDdqZpfkyz18UXgCSmmazmdWK0n2
qSr2bg2FwIem7xlYL8j4qztrHp4Vwqt9xbWTkWvQBUV+pK7LBOz9DHHFB7zdxXMM
Nnd4cxm98g3+Sm+7vTi/6Q5D2ausbzQj2poxn0KjORQlTPvIQXLQ5zR1dvIQkOTc
F4yPzubqzdq4PgxG8bOZGp7n7Fliv7WY0t15
-----END CERTIFICATE-----