Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F10195ACC48111F1B1E349A4CE1D38B0.roa
File:                     F10195ACC48111F1B1E349A4CE1D38B0.roa (raw, json)
Hash identifier:          NMRUIpEQz32at0Uqh1kn6gCB5c1Php9EIrZimSaapA4=
Subject key identifier:   C6:88:57:87:2B:78:35:E5:4F:B8:7C:34:46:36:8E:40:51:F9:76:6A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC58
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F10195ACC48111F1B1E349A4CE1D38B0.roa
Signing time:             Sat 10 Oct 2026 08:09:40 +0000
ROA not before:           Sat 10 Oct 2026 08:09:36 +0000
ROA not after:            Thu 05 Nov 2026 08:09:36 +0000
asID:                     149440
IP address blocks:        45.194.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121944 (0x1dc58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 10 08:09:36 2026 GMT
            Not After : Nov  5 08:09:36 2026 GMT
        Subject: CN=6ac9f2c4-b03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:b1:51:5e:1e:15:07:22:06:52:b5:4a:9d:
                    24:ea:77:09:a9:35:18:60:18:36:b6:15:8f:03:68:
                    65:22:96:12:84:a2:5d:80:ae:20:23:fd:8f:60:3c:
                    4d:f7:33:84:1c:71:47:d5:88:bf:ff:00:68:51:c4:
                    29:6f:55:f0:43:f4:2f:6e:cf:82:3b:0a:aa:a6:5a:
                    80:3d:e6:b0:2b:00:98:d0:77:6e:47:bb:f4:90:d0:
                    df:8f:f0:b4:aa:e6:47:dd:58:15:ae:04:12:0f:06:
                    5a:69:40:4b:7c:e7:1a:cb:ca:1b:e8:41:a3:a1:a8:
                    76:7d:05:d6:50:38:09:ae:64:62:ad:61:60:74:df:
                    b1:fc:cd:3e:c1:76:5e:22:f6:06:25:18:39:ab:1b:
                    1f:48:a0:c7:b9:5c:70:52:0c:10:28:d1:e3:7f:d7:
                    89:16:1e:6c:ab:a3:ba:74:d9:24:a7:e3:5c:1f:91:
                    ae:ae:38:94:0c:b9:0c:7a:43:3f:6b:33:f1:ab:18:
                    1c:41:ab:74:c8:50:05:4c:af:43:e0:18:22:c5:f5:
                    44:19:37:3e:c4:ac:3b:ec:ab:82:e5:fe:23:18:c1:
                    75:c6:80:f3:a8:ab:8d:cb:0f:5f:50:be:78:ae:73:
                    fd:4d:93:72:ca:e6:04:b7:ed:1f:bf:f7:11:6d:a2:
                    f6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:88:57:87:2B:78:35:E5:4F:B8:7C:34:46:36:8E:40:51:F9:76:6A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F10195ACC48111F1B1E349A4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:52:9a:c8:09:2d:13:13:45:ae:f2:4d:6f:59:a1:f8:f7:a6:
         1a:92:e7:48:e6:63:61:62:36:9a:39:ac:3d:fa:3a:6c:b4:27:
         1d:af:c7:f9:ad:aa:81:f7:45:fb:75:96:67:e0:a1:a2:05:ff:
         94:3d:14:8a:f1:8d:5f:1f:c5:27:ab:33:7a:4b:87:20:6b:b5:
         2f:16:b3:ca:97:69:34:67:1e:a8:f3:1b:1b:a0:c4:2f:48:ab:
         b4:e4:71:e6:1c:d4:db:1e:d5:20:ce:4a:46:4e:66:7a:7e:bf:
         c9:eb:6c:be:01:c3:8f:3f:bd:76:3b:7f:de:99:6b:02:7b:6a:
         3b:5c:93:3a:73:5b:70:60:1c:07:d8:18:65:84:d2:4f:04:7e:
         5f:f6:ea:d9:41:53:58:ac:69:00:6e:5b:98:e3:b8:3b:66:1d:
         28:ac:81:3a:e7:03:c7:cf:ba:28:47:ce:7f:22:da:3a:95:86:
         94:61:59:a6:98:a9:fe:dd:13:ed:d2:18:77:ac:83:a0:a7:1f:
         54:ac:b4:9f:3f:a6:eb:42:d4:f8:d5:71:a6:6b:db:e5:cf:f6:
         26:6d:01:c1:0d:cf:ad:a5:5a:7c:23:5e:0e:bd:67:ee:b4:a2:
         83:3a:9f:81:68:75:3e:4b:9e:fb:6f:39:33:a9:3f:fc:4e:4b:
         c6:f4:51:16
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdxYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDEwMDgwOTM2WhcNMjYxMTA1MDgwOTM2WjAYMRYw
FAYDVQQDEw02YWM5ZjJjNC1iMDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtguxUV4eFQciBlK1Sp0k6ncJqTUYYBg2thWPA2hlIpYShKJdgK4gI/2P
YDxN9zOEHHFH1Yi//wBoUcQpb1XwQ/Qvbs+COwqqplqAPeawKwCY0HduR7v0kNDf
j/C0quZH3VgVrgQSDwZaaUBLfOcay8ob6EGjoah2fQXWUDgJrmRirWFgdN+x/M0+
wXZeIvYGJRg5qxsfSKDHuVxwUgwQKNHjf9eJFh5sq6O6dNkkp+NcH5GurjiUDLkM
ekM/azPxqxgcQat0yFAFTK9D4BgixfVEGTc+xKw77KuC5f4jGMF1xoDzqKuNyw9f
UL54rnP9TZNyyuYEt+0fv/cRbaL2bQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMaI
V4creDXlT7h8NEY2jkBR+XZqMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GMTAxOTVBQ0M0ODExMUYxQjFFMzQ5QTRDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcIbMA0GCSqGSIb3DQEBCwUA
A4IBAQCOUprICS0TE0Wu8k1vWaH496YakudI5mNhYjaaOaw9+jpstCcdr8f5raqB
90X7dZZn4KGiBf+UPRSK8Y1fH8UnqzN6S4cga7UvFrPKl2k0Zx6o8xsboMQvSKu0
5HHmHNTbHtUgzkpGTmZ6fr/J62y+AcOPP712O3/emWsCe2o7XJM6c1twYBwH2Bhl
hNJPBH5f9urZQVNYrGkAbluY47g7Zh0orIE65wPHz7ooR85/Ito6lYaUYVmmmKn+
3RPt0hh3rIOgpx9UrLSfP6brQtT41XGma9vlz/YmbQHBDc+tpVp8I14OvWfutKKD
Op+BaHU+S577bzkzqT/8TkvG9FEW
-----END CERTIFICATE-----