Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D910CB709BA011F19F5F2907CF1D38B0.roa
File:                     D910CB709BA011F19F5F2907CF1D38B0.roa (raw, json)
Hash identifier:          oqFBcDU6MKyIZDDWJKW7rjZ4tajVHjYRzY7YSVkZ3nk=
Subject key identifier:   04:29:79:CC:0A:AB:AC:CA:A4:0D:44:27:88:06:E3:0A:D1:B5:8A:AA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CE29
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D910CB709BA011F19F5F2907CF1D38B0.roa
Signing time:             Wed 19 Aug 2026 07:37:37 +0000
ROA not before:           Wed 19 Aug 2026 07:37:33 +0000
ROA not after:            Sun 08 Nov 2026 07:37:33 +0000
asID:                     137443
IP address blocks:        45.192.160.0/22 maxlen: 24
                          45.192.172.0/22 maxlen: 24
                          45.192.176.0/24 maxlen: 24
                          45.192.177.0/24 maxlen: 24
                          45.192.178.0/23 maxlen: 24
                          45.192.180.0/22 maxlen: 24
                          45.192.184.0/22 maxlen: 24
                          45.192.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118313 (0x1ce29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 19 07:37:33 2026 GMT
            Not After : Nov  8 07:37:33 2026 GMT
        Subject: CN=6a855d41-869d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:49:fa:6c:52:dd:32:cc:0b:c3:bc:c3:0c:3d:
                    37:9c:70:39:4b:19:d0:15:10:10:62:de:3c:7f:a0:
                    d0:54:60:bb:01:86:5f:98:75:00:14:77:be:aa:23:
                    7f:1c:c9:7a:b7:bc:9d:89:7e:d3:ef:f1:6c:39:b9:
                    c6:50:53:bc:a0:7f:1f:a9:65:71:47:1f:6e:45:11:
                    1a:78:99:24:8c:30:8f:55:b6:9a:26:53:37:e4:1f:
                    81:eb:51:7f:d1:a6:2d:ae:4f:66:02:ee:eb:2e:9d:
                    62:ae:b9:d7:dd:30:91:17:d7:21:21:b2:e6:f5:6b:
                    89:dc:5b:b3:9d:47:db:8f:00:0f:66:1b:61:db:9b:
                    02:28:e6:e4:b8:57:7e:a2:a9:b2:c5:35:7b:e3:76:
                    c7:0b:25:73:34:12:02:a8:7c:e5:46:9d:38:d5:ac:
                    69:ec:e0:75:ad:00:a7:07:28:ac:20:c3:0c:3f:c3:
                    80:a4:c1:54:ea:4e:9f:40:54:af:34:79:74:bb:05:
                    3f:a8:ff:86:24:ee:d0:52:70:7c:67:ae:0f:60:17:
                    7f:c2:83:aa:a4:b7:f7:3d:a5:7b:37:87:65:66:d0:
                    36:c2:bf:69:b4:04:8d:ff:cf:f8:90:4d:ec:c3:28:
                    9c:7c:9b:d8:e0:52:23:fa:58:14:5a:9f:14:8e:d2:
                    a9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:29:79:CC:0A:AB:AC:CA:A4:0D:44:27:88:06:E3:0A:D1:B5:8A:AA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D910CB709BA011F19F5F2907CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.160.0/22
                  45.192.172.0-45.192.191.255

    Signature Algorithm: sha256WithRSAEncryption
         96:37:64:dd:f5:cd:d4:f3:28:ab:c3:c1:cb:c8:32:d9:8f:dd:
         b0:ef:a7:a6:99:d3:52:cb:06:c5:a1:98:b5:19:6b:a5:6c:78:
         1c:f7:e6:df:c0:c1:5a:09:db:2c:1f:1c:a5:a6:7d:dd:55:c2:
         89:6d:c0:8f:6f:02:f9:1a:2f:93:2f:81:64:ce:e3:52:2f:5a:
         8e:4f:8f:ab:68:9a:12:ab:cf:27:84:ab:e1:bd:4a:50:92:f2:
         1e:3c:35:02:9e:f6:c8:33:59:00:07:cb:65:51:fa:53:7a:5a:
         ba:ae:8d:54:af:92:8f:a0:5c:1a:a6:fe:4e:49:b3:36:c8:e4:
         91:76:b3:79:c6:a0:9f:53:32:4a:9c:6a:05:3a:69:76:f2:ee:
         28:06:8f:48:ee:cd:12:1b:c7:7f:76:7e:42:29:7f:10:0b:f0:
         60:25:ef:79:79:31:20:7c:f1:f9:aa:91:9f:84:f5:6b:2e:29:
         1b:f6:7e:ea:f7:52:d9:1b:74:bf:3b:30:92:42:91:b2:90:b9:
         75:fc:24:d7:e9:1c:e3:8e:55:02:e8:dd:78:e1:aa:cf:80:4a:
         e2:ff:84:fe:ed:32:28:2e:5e:39:76:13:8b:c6:0a:07:e2:82:
         1c:24:74:c9:f6:03:a2:84:e1:6d:ef:9d:c1:bd:3a:2c:f0:06:
         27:78:23:52
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAc4pMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODE5MDczNzMzWhcNMjYxMTA4MDczNzMzWjAYMRYw
FAYDVQQDEw02YTg1NWQ0MS04NjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAukn6bFLdMswLw7zDDD03nHA5SxnQFRAQYt48f6DQVGC7AYZfmHUAFHe+
qiN/HMl6t7ydiX7T7/FsObnGUFO8oH8fqWVxRx9uRREaeJkkjDCPVbaaJlM35B+B
61F/0aYtrk9mAu7rLp1irrnX3TCRF9chIbLm9WuJ3FuznUfbjwAPZhth25sCKObk
uFd+oqmyxTV743bHCyVzNBICqHzlRp041axp7OB1rQCnByisIMMMP8OApMFU6k6f
QFSvNHl0uwU/qP+GJO7QUnB8Z64PYBd/woOqpLf3PaV7N4dlZtA2wr9ptASN/8/4
kE3swyicfJvY4FIj+lgUWp8UjtKpfQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFAQp
ecwKq6zKpA1EJ4gG4wrRtYqqMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EOTEwQ0I3MDlCQTAxMUYxOUY1RjI5MDdDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCLcCgMAwDBAItwKwDBAYtwIAw
DQYJKoZIhvcNAQELBQADggEBAJY3ZN31zdTzKKvDwcvIMtmP3bDvp6aZ01LLBsWh
mLUZa6VseBz35t/AwVoJ2ywfHKWmfd1VwoltwI9vAvkaL5MvgWTO41IvWo5Pj6to
mhKrzyeEq+G9SlCS8h48NQKe9sgzWQAHy2VR+lN6WrqujVSvko+gXBqm/k5JszbI
5JF2s3nGoJ9TMkqcagU6aXby7igGj0juzRIbx392fkIpfxAL8GAl73l5MSB88fmq
kZ+E9WsuKRv2fur3UtkbdL87MJJCkbKQuXX8JNfpHOOOVQLo3Xjhqs+ASuL/hP7t
MiguXjl2E4vGCgfighwkdMn2A6KE4W3vncG9OizwBid4I1I=
-----END CERTIFICATE-----