Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE5A56D28F1F11F19F4B71BBCE1D38B0.roa
File:                     EE5A56D28F1F11F19F4B71BBCE1D38B0.roa (raw, json)
Hash identifier:          TTe81z6O1uyVqSfKj0zfx7QZFXAjK7RLkQcy9Q5se9I=
Subject key identifier:   58:B3:75:1E:A4:AF:61:43:88:4E:1F:A1:AC:C7:6D:5D:9C:C4:41:49
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C98F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE5A56D28F1F11F19F4B71BBCE1D38B0.roa
Signing time:             Mon 03 Aug 2026 09:44:33 +0000
ROA not before:           Mon 03 Aug 2026 09:44:29 +0000
ROA not after:            Thu 06 May 2027 09:44:29 +0000
asID:                     141109
IP address blocks:        45.198.6.0/23 maxlen: 24
                          45.198.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117135 (0x1c98f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  3 09:44:29 2026 GMT
            Not After : May  6 09:44:29 2027 GMT
        Subject: CN=6a706301-be84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0c:74:41:d0:31:54:c2:ce:f9:7a:33:9a:2a:
                    e9:44:93:04:30:ab:db:c3:15:65:99:1a:b8:5e:61:
                    28:35:8e:0b:08:13:fd:be:cb:af:25:fa:f9:92:b9:
                    a3:ce:85:22:c5:6f:de:03:94:0d:62:59:9f:4d:a7:
                    49:1b:35:bf:e3:b9:b1:2f:5a:af:71:50:1e:59:82:
                    22:b6:1d:e0:1f:37:32:ac:8a:de:8b:39:7d:85:86:
                    1d:43:7d:a9:74:47:e4:59:0b:c1:3b:18:09:37:ad:
                    1f:3a:5a:00:51:b0:18:c6:52:0b:7d:c1:7d:57:28:
                    72:f5:18:9b:69:a6:f1:a8:f4:8f:d6:8b:82:4e:56:
                    5c:ce:0f:48:e9:24:dc:0e:ed:fc:45:6e:94:96:5c:
                    d5:8e:2b:98:9c:82:af:5a:f4:e9:a8:76:62:68:e1:
                    c4:98:49:06:f2:af:7a:6b:38:80:0e:6f:cb:71:a4:
                    ca:67:c0:74:2d:c2:96:eb:e7:44:a5:21:4e:e2:9f:
                    dc:95:4f:b6:8a:fd:bb:1a:80:0f:90:40:eb:c5:6f:
                    81:63:34:1d:9b:6b:e6:c5:e9:84:bb:da:69:7c:35:
                    a6:f7:32:38:fe:ff:66:c4:99:1a:c1:db:92:98:11:
                    1f:49:54:3e:84:02:4b:0e:00:2d:41:03:b5:7a:99:
                    44:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B3:75:1E:A4:AF:61:43:88:4E:1F:A1:AC:C7:6D:5D:9C:C4:41:49
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EE5A56D28F1F11F19F4B71BBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:69:26:ef:dd:30:db:e6:ff:3b:5e:9e:4a:60:5a:a5:c8:d3:
         9c:b9:c6:5d:2e:cd:69:e5:b2:b5:c9:fa:bb:43:d2:60:2c:5a:
         b4:3b:d8:23:8b:58:51:00:f5:09:e5:ed:a2:18:6e:db:2f:41:
         53:3b:d3:38:21:20:66:47:37:1b:ff:35:51:e8:b6:0d:96:f6:
         56:0e:b7:ba:75:d7:31:56:c0:23:85:e7:c7:26:7e:d8:af:02:
         c3:f2:b9:d3:15:64:01:09:44:88:a0:38:31:9c:da:f1:26:a5:
         5d:3c:b9:00:db:ef:e6:a2:23:29:03:36:87:07:82:a5:6b:d9:
         35:d4:04:56:1d:82:73:6a:6d:45:61:b7:d5:e0:4f:38:77:29:
         69:72:79:00:e5:4c:e2:84:a1:6d:8a:9b:61:ef:a3:67:f3:31:
         e2:83:95:8b:94:35:e2:87:31:43:5f:c8:ca:e0:13:b6:bc:a7:
         64:fd:e2:90:11:de:77:00:aa:07:74:d6:c1:19:50:f7:19:3c:
         b4:12:fb:93:0a:a9:6f:35:52:cb:e5:82:7d:61:e0:67:bf:39:
         45:24:aa:bc:a9:72:93:d2:25:98:35:5e:d2:fd:53:5a:61:a5:
         86:60:7b:b5:f3:03:11:a4:88:57:f1:b8:b6:5c:06:b4:fe:9e:
         fe:29:d2:35
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcmPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODAzMDk0NDI5WhcNMjcwNTA2MDk0NDI5WjAYMRYw
FAYDVQQDEw02YTcwNjMwMS1iZTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuAx0QdAxVMLO+XozmirpRJMEMKvbwxVlmRq4XmEoNY4LCBP9vsuvJfr5
krmjzoUixW/eA5QNYlmfTadJGzW/47mxL1qvcVAeWYIith3gHzcyrIreizl9hYYd
Q32pdEfkWQvBOxgJN60fOloAUbAYxlILfcF9Vyhy9RibaabxqPSP1ouCTlZczg9I
6STcDu38RW6UllzVjiuYnIKvWvTpqHZiaOHEmEkG8q96aziADm/LcaTKZ8B0LcKW
6+dEpSFO4p/clU+2iv27GoAPkEDrxW+BYzQdm2vmxemEu9ppfDWm9zI4/v9mxJka
wduSmBEfSVQ+hAJLDgAtQQO1eplE9wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFiz
dR6kr2FDiE4foazHbV2cxEFJMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FRTVBNTZEMjhGMUYxMUYxOUY0QjcxQkJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcYGMA0GCSqGSIb3DQEBCwUA
A4IBAQC5aSbv3TDb5v87Xp5KYFqlyNOcucZdLs1p5bK1yfq7Q9JgLFq0O9gji1hR
APUJ5e2iGG7bL0FTO9M4ISBmRzcb/zVR6LYNlvZWDre6ddcxVsAjhefHJn7YrwLD
8rnTFWQBCUSIoDgxnNrxJqVdPLkA2+/moiMpAzaHB4Kla9k11ARWHYJzam1FYbfV
4E84dylpcnkA5UzihKFtipth76Nn8zHig5WLlDXihzFDX8jK4BO2vKdk/eKQEd53
AKoHdNbBGVD3GTy0EvuTCqlvNVLL5YJ9YeBnvzlFJKq8qXKT0iWYNV7S/VNaYaWG
YHu18wMRpIhX8bi2XAa0/p7+KdI1
-----END CERTIFICATE-----