Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA71A6EA9C8311F1BE18A3E3CE1D38B0.roa
File:                     DA71A6EA9C8311F1BE18A3E3CE1D38B0.roa (raw, json)
Hash identifier:          tyBjrMGfxKAWWboGM7ewFS6IZUaCbeX4B0ME+vKhdwk=
Subject key identifier:   C3:2E:F4:6F:05:D1:9B:C6:CA:5A:1D:26:DA:05:7A:3A:93:95:25:21
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CEC6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA71A6EA9C8311F1BE18A3E3CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 10:42:35 +0000
ROA not before:           Thu 20 Aug 2026 10:42:31 +0000
ROA not after:            Sat 10 Oct 2026 10:42:31 +0000
asID:                     395793
IP address blocks:        45.192.228.0/24 maxlen: 24
                          45.192.229.0/24 maxlen: 24
                          45.192.230.0/24 maxlen: 24
                          45.192.231.0/24 maxlen: 24
                          45.192.232.0/22 maxlen: 24
                          45.192.236.0/22 maxlen: 24
                          45.192.239.0/24 maxlen: 24
                          45.192.244.0/24 maxlen: 24
                          45.197.6.0/23 maxlen: 24
                          45.198.183.0/24 maxlen: 24
                          45.201.21.0/24 maxlen: 24
                          45.201.22.0/24 maxlen: 24
                          45.201.23.0/24 maxlen: 24
                          45.201.24.0/23 maxlen: 24
                          45.201.24.0/24 maxlen: 24
                          45.201.25.0/24 maxlen: 24
                          45.201.26.0/24 maxlen: 24
                          45.201.31.0/24 maxlen: 24
                          45.206.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118470 (0x1cec6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 10:42:31 2026 GMT
            Not After : Oct 10 10:42:31 2026 GMT
        Subject: CN=6a86da1b-5054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:1e:f6:a2:02:91:36:ed:b2:6b:38:f7:95:
                    bc:f6:08:50:ca:3d:84:05:9a:55:99:51:4a:8b:6a:
                    96:ec:2f:52:89:02:33:de:cc:63:85:bd:4c:fd:ca:
                    b1:a8:6a:a0:d1:8e:27:f7:d3:54:4b:16:ca:cd:5f:
                    1b:07:18:eb:e7:85:c3:22:d7:7a:bb:61:82:14:c3:
                    d6:da:24:41:f9:49:5e:58:11:68:2b:c9:40:b9:05:
                    ac:ad:1d:0d:3c:40:a5:bc:80:de:eb:b6:8e:4f:6a:
                    aa:bd:36:10:91:b7:ae:78:6b:11:4a:6b:de:46:3a:
                    d3:8f:8d:49:64:60:45:51:68:b7:47:58:79:9b:92:
                    8b:8b:e0:ad:13:c5:fd:c0:b9:17:1f:85:f9:15:b6:
                    52:c8:5d:5b:9e:df:0b:4b:27:65:95:00:26:7e:97:
                    9b:ea:4f:ed:ba:55:3a:ae:d8:0f:e5:52:3c:0b:14:
                    8c:2d:a5:12:c1:97:4b:2d:65:61:6d:3e:8d:8e:10:
                    df:61:53:69:6b:93:54:ce:54:af:e2:d3:be:6e:95:
                    c5:9f:cc:8a:11:cb:f1:91:fd:f8:14:ec:3f:63:31:
                    bb:d5:a7:cc:57:97:90:58:c5:de:38:80:c1:fe:e4:
                    53:ba:66:24:1b:b2:48:b8:ff:d2:b9:35:30:01:7b:
                    42:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2E:F4:6F:05:D1:9B:C6:CA:5A:1D:26:DA:05:7A:3A:93:95:25:21
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA71A6EA9C8311F1BE18A3E3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.228.0-45.192.239.255
                  45.192.244.0/24
                  45.197.6.0/23
                  45.198.183.0/24
                  45.201.21.0-45.201.26.255
                  45.201.31.0/24
                  45.206.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:ab:2f:bb:c8:ef:1c:a9:1f:2b:0b:62:15:79:5c:c9:5d:c6:
         4d:dd:2a:d9:b0:94:7f:83:9f:f5:a2:f7:77:64:ee:98:ad:49:
         7d:b2:25:6a:06:2f:1f:59:33:0f:c8:21:1a:18:d9:c0:8e:ed:
         a2:4b:78:99:d2:35:5e:a4:95:53:3e:ad:d5:4a:13:af:fe:13:
         ae:ab:11:47:18:14:c0:90:38:e4:c9:0c:63:4a:fd:0d:8d:e3:
         ab:7a:60:66:c0:ac:07:d5:b9:a4:15:d8:65:99:97:70:2b:e5:
         da:16:4c:83:23:13:69:02:80:66:8b:e9:c2:11:db:91:55:67:
         59:c1:22:0d:4e:94:e9:a6:ed:8f:08:79:0c:91:1b:27:8f:66:
         dd:ad:4b:b9:63:3e:d6:2d:07:be:60:b2:a7:4d:8f:00:50:4d:
         2c:bc:d8:46:b0:5a:94:dc:0e:8a:55:ae:23:1f:1c:a7:1e:70:
         41:76:32:88:73:78:77:1b:6d:06:58:ad:e1:02:78:3e:00:45:
         da:3a:8c:de:8c:16:fe:71:24:04:2a:65:2c:8c:31:ea:c1:86:
         c8:13:61:65:11:36:a5:5c:48:b4:be:cf:a7:76:47:bb:9e:5f:
         c9:e1:8b:93:7e:75:89:45:84:e1:6c:44:d2:9c:f5:21:45:da:
         6f:92:bd:0e
-----BEGIN CERTIFICATE-----
MIIFtTCCBJ2gAwIBAgIDAc7GMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODIwMTA0MjMxWhcNMjYxMDEwMTA0MjMxWjAYMRYw
FAYDVQQDEw02YTg2ZGExYi01MDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtUke9qICkTbtsms495W89ghQyj2EBZpVmVFKi2qW7C9SiQIz3sxjhb1M
/cqxqGqg0Y4n99NUSxbKzV8bBxjr54XDItd6u2GCFMPW2iRB+UleWBFoK8lAuQWs
rR0NPEClvIDe67aOT2qqvTYQkbeueGsRSmveRjrTj41JZGBFUWi3R1h5m5KLi+Ct
E8X9wLkXH4X5FbZSyF1bnt8LSydllQAmfpeb6k/tulU6rtgP5VI8CxSMLaUSwZdL
LWVhbT6NjhDfYVNpa5NUzlSv4tO+bpXFn8yKEcvxkf34FOw/YzG71afMV5eQWMXe
OIDB/uRTumYkG7JIuP/SuTUwAXtC/QIDAQABo4IC1jCCAtIwHQYDVR0OBBYEFMMu
9G8F0ZvGylodJtoFejqTlSUhMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQTcxQTZFQTlDODMxMUYxQkUxOEEzRTNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6MAwDBAItwOQDBAQtwOADBAAtwPQD
BAEtxQYDBAAtxrcwDAMEAC3JFQMEAC3JGgMEAC3JHwMEAC3OQjANBgkqhkiG9w0B
AQsFAAOCAQEAbqsvu8jvHKkfKwtiFXlcyV3GTd0q2bCUf4Of9aL3d2TumK1JfbIl
agYvH1kzD8ghGhjZwI7tokt4mdI1XqSVUz6t1UoTr/4TrqsRRxgUwJA45MkMY0r9
DY3jq3pgZsCsB9W5pBXYZZmXcCvl2hZMgyMTaQKAZovpwhHbkVVnWcEiDU6U6abt
jwh5DJEbJ49m3a1LuWM+1i0HvmCyp02PAFBNLLzYRrBalNwOilWuIx8cpx5wQXYy
iHN4dxttBlit4QJ4PgBF2jqM3owW/nEkBCplLIwx6sGGyBNhZRE2pVxItL7Pp3ZH
u55fyeGLk351iUWE4WxE0pz1IUXab5K9Dg==
-----END CERTIFICATE-----