Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E98C953CC3BA11F18F0C2B12CF1D38B0.roa
File:                     E98C953CC3BA11F18F0C2B12CF1D38B0.roa (raw, json)
Hash identifier:          zfl+IFxED4b4/TlyqqfbZZR5vE8AabxKhXyhHWwUjRw=
Subject key identifier:   06:38:DA:29:4D:25:DF:16:AF:54:CD:1F:46:27:AE:76:83:A8:E2:F2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC1C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E98C953CC3BA11F18F0C2B12CF1D38B0.roa
Signing time:             Fri 09 Oct 2026 08:24:58 +0000
ROA not before:           Fri 09 Oct 2026 08:24:53 +0000
ROA not after:            Thu 12 Nov 2026 08:24:53 +0000
asID:                     212513
IP address blocks:        45.196.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121884 (0x1dc1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  9 08:24:53 2026 GMT
            Not After : Nov 12 08:24:53 2026 GMT
        Subject: CN=6ac8a4da-911e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:50:46:84:32:3f:26:86:ba:42:52:51:28:9b:
                    52:53:4f:06:fa:2b:50:9c:3c:d3:60:ba:46:4d:b0:
                    a4:5c:9b:97:f7:88:e0:ac:4a:3a:8f:cb:cc:42:ba:
                    ad:29:b4:0d:52:86:71:68:ff:20:1b:f9:1c:35:64:
                    1d:ee:7b:ee:68:23:9f:7f:35:52:78:7f:4d:a9:47:
                    83:07:7a:83:5f:47:a5:d3:3d:f5:90:81:86:3e:4d:
                    d0:74:23:47:f4:74:10:f2:df:25:32:80:1d:f6:8c:
                    48:24:30:22:58:04:ef:85:cf:d1:3f:d4:fa:b1:c0:
                    8e:e5:25:32:be:25:c7:23:3f:a4:28:4d:0b:d1:52:
                    c0:a5:41:68:0b:38:aa:ea:35:3a:d3:2e:4c:69:35:
                    60:63:4a:f0:d2:9e:7a:e2:c1:f0:6b:c6:9d:e9:0a:
                    60:38:54:60:74:1f:96:4b:05:5a:90:15:c6:cb:8e:
                    fa:6f:f1:2b:7f:eb:ab:c2:0e:5f:24:e3:cd:67:5c:
                    e0:8b:ba:67:f8:4e:b5:73:63:65:35:63:69:ff:01:
                    ac:f3:8b:33:63:00:ac:1f:70:ba:58:d1:83:fe:de:
                    6b:bf:dd:84:fe:c0:8a:64:6b:34:ff:66:33:a7:e6:
                    78:6d:6e:4e:1e:6d:f8:1a:73:76:c4:05:e0:d3:c0:
                    f4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:38:DA:29:4D:25:DF:16:AF:54:CD:1F:46:27:AE:76:83:A8:E2:F2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E98C953CC3BA11F18F0C2B12CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:c4:b3:89:66:4c:3f:11:22:18:55:41:e9:6b:cc:7e:6c:0c:
         0b:a2:16:98:25:2e:fa:4d:c1:5f:d6:71:cc:31:13:63:77:26:
         3e:18:98:e9:76:cc:30:66:22:69:82:51:16:ea:98:1a:d8:5d:
         45:6d:e0:ba:e5:57:61:b1:35:ad:c4:7a:93:3c:31:89:e0:59:
         69:9f:24:50:9e:4c:b7:73:30:ed:a9:87:70:5f:a5:e6:90:19:
         d0:b5:d5:fe:bd:23:b6:ee:bd:7f:e7:44:02:f2:3f:b7:eb:b1:
         2b:b0:6f:ca:3b:2d:41:7c:2c:c2:fc:2a:b7:0b:a0:81:dd:e9:
         17:25:ac:b9:92:d5:8c:bf:28:35:fa:bf:b4:d3:4b:da:92:28:
         78:e5:ca:a4:06:3f:8d:c2:4b:e8:4a:14:9a:e7:f9:45:07:7e:
         34:7c:41:10:b7:52:67:49:81:30:93:d3:8a:d1:b6:33:be:56:
         b4:37:69:41:64:b1:ff:e8:6a:d2:01:fe:57:4f:a6:62:1c:92:
         50:21:eb:a4:e8:3a:5a:a8:d9:d5:b5:de:5a:30:b3:2f:12:cc:
         d8:f8:31:84:73:c9:26:eb:9c:90:44:2b:d5:7e:de:ce:5b:0a:
         18:12:65:e9:96:65:6f:c1:78:54:2b:b5:b8:13:30:41:c2:d1:
         b6:a7:56:c3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdwcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDA5MDgyNDUzWhcNMjYxMTEyMDgyNDUzWjAYMRYw
FAYDVQQDEw02YWM4YTRkYS05MTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0lBGhDI/Joa6QlJRKJtSU08G+itQnDzTYLpGTbCkXJuX94jgrEo6j8vM
QrqtKbQNUoZxaP8gG/kcNWQd7nvuaCOffzVSeH9NqUeDB3qDX0el0z31kIGGPk3Q
dCNH9HQQ8t8lMoAd9oxIJDAiWATvhc/RP9T6scCO5SUyviXHIz+kKE0L0VLApUFo
Cziq6jU60y5MaTVgY0rw0p564sHwa8ad6QpgOFRgdB+WSwVakBXGy476b/Erf+ur
wg5fJOPNZ1zgi7pn+E61c2NlNWNp/wGs84szYwCsH3C6WNGD/t5rv92E/sCKZGs0
/2Yzp+Z4bW5OHm34GnN2xAXg08D0OQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAY4
2ilNJd8Wr1TNH0YnrnaDqOLyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FOThDOTUzQ0MzQkExMUYxOEYwQzJCMTJDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcToMA0GCSqGSIb3DQEBCwUA
A4IBAQB6xLOJZkw/ESIYVUHpa8x+bAwLohaYJS76TcFf1nHMMRNjdyY+GJjpdsww
ZiJpglEW6pga2F1FbeC65VdhsTWtxHqTPDGJ4FlpnyRQnky3czDtqYdwX6XmkBnQ
tdX+vSO27r1/50QC8j+367ErsG/KOy1BfCzC/Cq3C6CB3ekXJay5ktWMvyg1+r+0
00vakih45cqkBj+NwkvoShSa5/lFB340fEEQt1JnSYEwk9OK0bYzvla0N2lBZLH/
6GrSAf5XT6ZiHJJQIeuk6DpaqNnVtd5aMLMvEszY+DGEc8km65yQRCvVft7OWwoY
EmXplmVvwXhUK7W4EzBBwtG2p1bD
-----END CERTIFICATE-----