Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F91250EAB8B11F1B72BE2A5CE1D38B0.roa
File:                     2F91250EAB8B11F1B72BE2A5CE1D38B0.roa (raw, json)
Hash identifier:          dKxEfzd5hOzflB9QnAU6ZhMhYUZ9HeOKv9SaOHdj69I=
Subject key identifier:   95:90:EE:8A:C6:47:F2:78:BC:4A:A5:0C:A7:A9:1E:C2:34:95:1C:C5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D413
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F91250EAB8B11F1B72BE2A5CE1D38B0.roa
Signing time:             Tue 08 Sep 2026 13:42:51 +0000
ROA not before:           Tue 08 Sep 2026 13:42:47 +0000
ROA not after:            Wed 04 Nov 2026 13:42:47 +0000
asID:                     25160
IP address blocks:        45.201.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119827 (0x1d413)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  8 13:42:47 2026 GMT
            Not After : Nov  4 13:42:47 2026 GMT
        Subject: CN=6aa010db-d43f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:50:59:6e:32:77:c9:66:86:26:86:e5:24:e4:
                    12:8e:e3:32:24:05:c8:40:35:de:b0:bf:90:56:4f:
                    ea:71:c8:c6:df:ea:bd:e6:70:3d:c0:00:e9:de:e7:
                    ce:e3:b8:e4:c2:34:cc:4b:28:e2:13:fc:08:3d:c7:
                    e2:97:97:49:84:25:4e:7a:25:08:01:d2:1a:ad:44:
                    01:78:6c:e7:6d:0d:ab:90:7f:0e:7d:80:39:7b:1f:
                    8e:e3:a5:05:9e:36:c8:99:2f:7d:2e:56:47:24:fa:
                    92:12:80:f0:59:cd:65:a3:cc:a2:02:36:3c:4f:88:
                    4e:d6:ae:c7:9c:7c:b0:06:d2:ef:bb:1b:cc:c5:3d:
                    cc:6c:d2:83:ea:0b:65:d5:e5:43:93:8e:79:86:24:
                    6f:04:91:2d:de:12:72:a2:e7:e8:1e:0b:4c:76:68:
                    a8:82:b4:82:10:09:9b:66:fc:63:18:c4:01:fc:bf:
                    17:d8:28:df:23:85:7e:4b:5c:cd:e7:84:29:c7:1a:
                    1c:d6:0d:dc:db:85:43:29:41:15:63:cd:07:4b:b6:
                    1a:98:2a:d3:96:9e:89:00:b6:6f:73:3a:af:16:2b:
                    30:bc:44:be:8a:cb:3b:7e:c8:a0:69:2d:7f:bd:0e:
                    a1:61:f6:65:92:f4:d0:bc:e0:68:e7:bb:cb:bd:cb:
                    cd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:90:EE:8A:C6:47:F2:78:BC:4A:A5:0C:A7:A9:1E:C2:34:95:1C:C5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F91250EAB8B11F1B72BE2A5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:ce:22:53:e9:77:66:2d:43:f7:fe:39:c3:6b:85:a7:bf:b8:
         00:0c:c7:81:18:bb:57:8f:6d:dc:b6:ab:9e:b8:45:a7:d6:9f:
         41:37:7b:5d:6b:c5:b6:e2:11:1c:68:94:38:1d:0c:61:68:62:
         94:e1:ec:89:42:8c:1b:f2:18:b4:f3:c5:80:ef:e0:5c:bb:f9:
         f4:f3:88:93:5a:93:8e:3e:89:0b:40:e6:de:be:fd:79:78:5b:
         7e:f5:4d:d8:be:19:02:07:29:19:63:4a:0d:18:04:7e:0e:b3:
         ba:09:50:6a:3e:e8:c9:6a:9c:79:cf:39:ed:34:1a:44:05:d9:
         b1:41:5c:cd:78:f6:9b:b4:2b:5b:c4:da:eb:8a:50:36:6a:04:
         cd:58:e0:76:e3:7b:1c:ad:72:f5:4f:31:f9:09:8a:cd:2b:15:
         ed:b5:06:54:62:fc:f7:f4:1c:51:36:a6:a1:46:23:8a:3c:d5:
         9f:e5:b6:bd:44:7b:d2:3c:84:55:13:a3:33:7a:87:c0:e3:06:
         1c:44:6e:54:70:bf:d7:c5:3a:00:38:73:54:9e:2e:2f:a5:1b:
         c4:ed:6a:37:da:d3:66:70:4b:05:24:ba:3d:dc:3b:45:2d:22:
         f0:49:b6:4f:84:d1:78:a1:68:9b:c5:32:ff:b5:e3:8e:15:28:
         a1:42:3c:e3
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdQTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTA4MTM0MjQ3WhcNMjYxMTA0MTM0MjQ3WjAYMRYw
FAYDVQQDEw02YWEwMTBkYi1kNDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvlBZbjJ3yWaGJoblJOQSjuMyJAXIQDXesL+QVk/qccjG3+q95nA9wADp
3ufO47jkwjTMSyjiE/wIPcfil5dJhCVOeiUIAdIarUQBeGznbQ2rkH8OfYA5ex+O
46UFnjbImS99LlZHJPqSEoDwWc1lo8yiAjY8T4hO1q7HnHywBtLvuxvMxT3MbNKD
6gtl1eVDk455hiRvBJEt3hJyoufoHgtMdmiogrSCEAmbZvxjGMQB/L8X2CjfI4V+
S1zN54Qpxxoc1g3c24VDKUEVY80HS7YamCrTlp6JALZvczqvFiswvES+iss7fsig
aS1/vQ6hYfZlkvTQvOBo57vLvcvNAQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJWQ
7orGR/J4vEqlDKepHsI0lRzFMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yRjkxMjUwRUFCOEIxMUYxQjcyQkUyQTVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLckMMA0GCSqGSIb3DQEBCwUA
A4IBAQCHziJT6XdmLUP3/jnDa4Wnv7gADMeBGLtXj23ctqueuEWn1p9BN3tda8W2
4hEcaJQ4HQxhaGKU4eyJQowb8hi088WA7+Bcu/n084iTWpOOPokLQObevv15eFt+
9U3YvhkCBykZY0oNGAR+DrO6CVBqPujJapx5zzntNBpEBdmxQVzNePabtCtbxNrr
ilA2agTNWOB243scrXL1TzH5CYrNKxXttQZUYvz39BxRNqahRiOKPNWf5ba9RHvS
PIRVE6MzeofA4wYcRG5UcL/XxToAOHNUni4vpRvE7Wo32tNmcEsFJLo93DtFLSLw
SbZPhNF4oWibxTL/teOOFSihQjzj
-----END CERTIFICATE-----