Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0245AE8B0D211F191D082A8CE1D38B0.roa
File:                     E0245AE8B0D211F191D082A8CE1D38B0.roa (raw, json)
Hash identifier:          +1cZaYwiut1ao8wF6cRZfV6qxUnHvYoP19hsNQjDNew=
Subject key identifier:   5D:06:AB:2E:63:CB:D5:FD:0D:AE:DF:93:AA:0D:06:32:76:59:5A:AF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D609
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0245AE8B0D211F191D082A8CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 06:58:38 +0000
ROA not before:           Tue 15 Sep 2026 06:58:34 +0000
ROA not after:            Wed 21 Oct 2026 06:58:34 +0000
asID:                     63099
IP address blocks:        45.192.14.0/24 maxlen: 24
                          45.192.15.0/24 maxlen: 24
                          45.192.16.0/24 maxlen: 24
                          45.196.68.0/24 maxlen: 24
                          45.197.135.0/24 maxlen: 24
                          45.198.84.0/24 maxlen: 24
                          45.198.104.0/24 maxlen: 24
                          45.198.176.0/24 maxlen: 24
                          45.198.226.0/24 maxlen: 24
                          45.201.36.0/24 maxlen: 24
                          45.201.39.0/24 maxlen: 24
                          45.202.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120329 (0x1d609)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 06:58:34 2026 GMT
            Not After : Oct 21 06:58:34 2026 GMT
        Subject: CN=6aa8ec9e-76b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0c:84:c7:79:47:ab:e6:91:67:1f:a7:58:59:
                    28:d0:17:d8:5d:2d:ad:e2:21:b2:fe:3a:44:44:16:
                    e6:93:10:64:eb:7c:94:c0:15:03:37:56:e9:bf:40:
                    67:06:17:5d:7e:4e:48:fe:46:7d:e3:fa:68:67:61:
                    8d:4d:68:f2:b5:61:2b:c1:ab:99:5b:76:f5:1a:14:
                    1e:a9:1f:8b:56:18:bf:70:00:73:5a:c9:54:ad:b9:
                    cf:b4:f4:45:51:47:a6:6e:58:91:1a:6d:fa:b5:b8:
                    8b:15:d0:14:74:0c:13:c4:0e:b2:9a:dd:32:39:84:
                    ad:9d:e4:b0:2b:b6:cf:88:1c:fb:09:1c:85:2e:1f:
                    5e:74:80:cf:2c:7b:f9:c9:d4:d3:0f:72:54:64:bd:
                    4d:14:dd:34:3a:90:27:c3:e1:08:91:bd:e1:32:30:
                    88:e2:61:93:14:54:00:55:4a:ae:39:ea:82:7f:da:
                    de:af:33:e1:3a:c7:9b:61:c6:00:9d:43:ce:57:52:
                    31:d1:fb:a1:e0:ec:fa:ff:f8:ef:46:de:2a:c8:3a:
                    7f:7b:7e:00:ef:49:34:51:1a:e7:06:34:72:9a:31:
                    f1:ef:de:d6:90:e5:45:79:31:d7:fb:8d:88:72:88:
                    48:0b:7b:54:cb:78:83:5a:ac:7a:55:bf:7a:a8:3d:
                    81:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:06:AB:2E:63:CB:D5:FD:0D:AE:DF:93:AA:0D:06:32:76:59:5A:AF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0245AE8B0D211F191D082A8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.14.0-45.192.16.255
                  45.196.68.0/24
                  45.197.135.0/24
                  45.198.84.0/24
                  45.198.104.0/24
                  45.198.176.0/24
                  45.198.226.0/24
                  45.201.36.0/24
                  45.201.39.0/24
                  45.202.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:33:db:ea:9c:39:9d:14:46:ae:ff:7c:de:ac:3d:5c:cb:ee:
         d8:9a:5d:5d:ff:c3:d2:92:e5:97:56:0f:89:0f:6d:32:25:95:
         31:5a:13:1f:a9:bd:1a:ea:7c:15:e9:69:3e:50:3a:03:49:60:
         f0:aa:ef:6a:bb:ee:3c:39:c8:01:9f:d2:c3:ef:32:7c:da:94:
         c3:37:9d:06:e0:21:57:12:44:53:af:2b:a9:f4:5b:61:b5:fe:
         92:89:f6:24:d9:60:aa:1c:d5:05:d9:12:ee:82:7b:f4:0b:78:
         66:ec:85:8a:75:94:61:53:3a:30:5d:3f:d4:f5:f3:f1:41:ba:
         96:d5:b4:01:96:7d:f2:aa:0b:50:75:6d:ab:ab:53:80:73:8b:
         a8:d8:96:42:e0:22:e9:f3:13:f6:6c:6e:85:8f:fa:48:1c:84:
         c5:f1:db:e3:d0:d5:7a:d7:96:6d:dc:43:4a:1e:34:f6:3f:54:
         f2:e3:68:b1:24:b5:5a:f2:fe:b5:e9:d2:71:ec:4b:bc:04:2e:
         6c:96:bd:be:22:ba:0d:fd:a3:c5:60:51:e4:f9:18:94:d1:40:
         d2:e5:d0:f5:ff:42:74:50:b2:95:6f:5a:ee:a0:71:aa:e7:04:
         c5:9b:c9:ec:a0:b8:70:93:24:16:9e:cd:b3:2e:dd:e0:1e:89:
         5b:f6:47:89
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIDAdYJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTE1MDY1ODM0WhcNMjYxMDIxMDY1ODM0WjAYMRYw
FAYDVQQDEw02YWE4ZWM5ZS03NmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsgyEx3lHq+aRZx+nWFko0BfYXS2t4iGy/jpERBbmkxBk63yUwBUDN1bp
v0BnBhddfk5I/kZ94/poZ2GNTWjytWErwauZW3b1GhQeqR+LVhi/cABzWslUrbnP
tPRFUUembliRGm36tbiLFdAUdAwTxA6ymt0yOYStneSwK7bPiBz7CRyFLh9edIDP
LHv5ydTTD3JUZL1NFN00OpAnw+EIkb3hMjCI4mGTFFQAVUquOeqCf9rerzPhOseb
YcYAnUPOV1Ix0fuh4Oz6//jvRt4qyDp/e34A70k0URrnBjRymjHx797WkOVFeTHX
+42IcohIC3tUy3iDWqx6Vb96qD2BuwIDAQABo4IC4DCCAtwwHQYDVR0OBBYEFF0G
qy5jy9X9Da7fk6oNBjJ2WVqvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMDI0NUFFOEIwRDIxMUYxOTFEMDgyQThDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEMAwDBAEtwA4DBAAtwBADBAAtxEQD
BAAtxYcDBAAtxlQDBAAtxmgDBAAtxrADBAAtxuIDBAAtySQDBAAtyScDBAAtym8w
DQYJKoZIhvcNAQELBQADggEBAGcz2+qcOZ0URq7/fN6sPVzL7tiaXV3/w9KS5ZdW
D4kPbTIllTFaEx+pvRrqfBXpaT5QOgNJYPCq72q77jw5yAGf0sPvMnzalMM3nQbg
IVcSRFOvK6n0W2G1/pKJ9iTZYKoc1QXZEu6Ce/QLeGbshYp1lGFTOjBdP9T18/FB
upbVtAGWffKqC1B1baurU4Bzi6jYlkLgIunzE/ZsboWP+kgchMXx2+PQ1XrXlm3c
Q0oeNPY/VPLjaLEktVry/rXp0nHsS7wELmyWvb4iug39o8VgUeT5GJTRQNLl0PX/
QnRQspVvWu6gcarnBMWbyeyguHCTJBaezbMu3eAeiVv2R4k=
-----END CERTIFICATE-----