Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F7ECAB2A77611F18439A8F5CE1D38B0.roa
File:                     7F7ECAB2A77611F18439A8F5CE1D38B0.roa (raw, json)
Hash identifier:          Hm1rBCVfvqnhPXuJlrAjIRX4gU/PiYtCzNKrlkRU/rM=
Subject key identifier:   1F:5E:44:82:62:0C:E7:0C:AC:9B:88:5D:18:CF:3A:15:30:2F:31:D1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D2DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F7ECAB2A77611F18439A8F5CE1D38B0.roa
Signing time:             Thu 03 Sep 2026 09:04:41 +0000
ROA not before:           Thu 03 Sep 2026 09:04:37 +0000
ROA not after:            Thu 22 Oct 2026 09:04:37 +0000
asID:                     402506
IP address blocks:        45.205.24.0/21 maxlen: 24
                          45.207.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119516 (0x1d2dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  3 09:04:37 2026 GMT
            Not After : Oct 22 09:04:37 2026 GMT
        Subject: CN=6a993829-0d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fe:e3:50:a4:22:21:0c:fe:39:b2:6a:48:7a:
                    f5:49:fd:d1:a0:c4:15:03:81:2d:c7:e3:3b:49:0b:
                    d1:51:f9:16:32:36:3a:6a:c3:5e:63:ca:76:22:2f:
                    ea:30:4b:d2:41:4d:40:f8:84:a1:f4:18:4b:d0:ad:
                    a4:5c:0e:75:1c:92:36:45:35:74:97:3d:b2:a8:8d:
                    17:e7:8b:0b:b3:17:75:de:a7:cf:b0:59:3c:0e:55:
                    ed:b3:56:91:b8:81:bd:87:9d:2d:d1:13:2a:b1:78:
                    a3:14:48:a7:f9:7a:40:70:f1:40:da:0a:12:a4:0a:
                    0f:87:aa:fe:4c:c3:d7:37:2f:2e:8c:0c:2f:a1:c8:
                    30:18:02:aa:d9:bc:1c:92:26:26:02:33:94:58:74:
                    95:ed:99:e7:b6:b7:4f:9e:df:57:c4:93:60:6c:5e:
                    7b:b8:60:14:d5:00:c5:0a:fe:99:8e:0c:98:c3:0c:
                    2a:32:63:ae:a7:bf:d0:5c:c1:67:eb:c1:df:63:88:
                    12:69:39:36:77:4f:01:d5:5b:a2:c8:da:78:f5:84:
                    a5:5d:95:96:da:3f:07:b3:a8:98:42:bd:4e:21:5f:
                    6f:70:5c:08:b4:17:8b:aa:8b:5f:ad:40:8e:28:ba:
                    a5:91:e3:e4:f1:90:dc:1c:37:9b:89:d9:56:2d:9b:
                    d6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5E:44:82:62:0C:E7:0C:AC:9B:88:5D:18:CF:3A:15:30:2F:31:D1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F7ECAB2A77611F18439A8F5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.24.0/21
                  45.207.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         81:6c:2b:e9:16:0a:ae:5c:96:fc:f8:63:99:d5:9f:46:c9:b3:
         91:e8:c5:3b:81:9d:be:15:ca:e3:03:d6:ca:09:cc:f4:9f:be:
         d9:67:c2:0e:a8:eb:0c:90:ac:c2:a5:7d:a9:7c:bf:f2:9f:39:
         7c:60:26:40:bb:dc:95:c6:a0:ef:87:a2:8a:66:fe:fb:cf:68:
         dc:60:a3:2b:eb:46:3b:ca:57:d3:99:fe:07:dd:16:8e:75:47:
         8e:a9:b8:dc:99:80:5d:c1:be:1f:e2:86:ec:44:12:b6:d7:88:
         3b:0e:b8:17:b0:0e:7c:63:1a:77:31:99:6c:a9:5b:19:b2:d2:
         0b:82:c9:93:6c:d1:f1:13:f4:1a:08:ae:5d:42:2d:d8:bb:3c:
         e7:19:c2:88:61:b0:24:c4:0a:6d:f8:02:42:4e:ef:0f:f5:18:
         16:93:ad:17:e0:4b:78:92:1f:0e:b4:d6:e1:1e:0b:74:59:c5:
         dc:63:e3:38:dd:5a:62:e6:d0:9c:f1:7b:10:5c:78:1a:87:e9:
         ec:02:07:51:75:27:41:75:00:53:64:46:12:09:0f:da:0d:e5:
         0c:d0:42:c2:df:9a:9c:05:65:9c:a5:6b:7a:81:6c:54:58:c9:
         d8:1a:b3:37:ae:c8:ed:24:db:9a:34:5b:d7:d8:b7:bb:ef:31:
         e7:1e:a5:60
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAdLcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTAzMDkwNDM3WhcNMjYxMDIyMDkwNDM3WjAYMRYw
FAYDVQQDEw02YTk5MzgyOS0wZDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2f7jUKQiIQz+ObJqSHr1Sf3RoMQVA4Etx+M7SQvRUfkWMjY6asNeY8p2
Ii/qMEvSQU1A+ISh9BhL0K2kXA51HJI2RTV0lz2yqI0X54sLsxd13qfPsFk8DlXt
s1aRuIG9h50t0RMqsXijFEin+XpAcPFA2goSpAoPh6r+TMPXNy8ujAwvocgwGAKq
2bwckiYmAjOUWHSV7ZnntrdPnt9XxJNgbF57uGAU1QDFCv6ZjgyYwwwqMmOup7/Q
XMFn68HfY4gSaTk2d08B1VuiyNp49YSlXZWW2j8Hs6iYQr1OIV9vcFwItBeLqotf
rUCOKLqlkePk8ZDcHDebidlWLZvWHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9e
RIJiDOcMrJuIXRjPOhUwLzHRMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RjdFQ0FCMkE3NzYxMUYxODQzOUE4RjVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLc0YAwQDLc/IMA0GCSqGSIb3
DQEBCwUAA4IBAQCBbCvpFgquXJb8+GOZ1Z9GybOR6MU7gZ2+FcrjA9bKCcz0n77Z
Z8IOqOsMkKzCpX2pfL/ynzl8YCZAu9yVxqDvh6KKZv77z2jcYKMr60Y7ylfTmf4H
3RaOdUeOqbjcmYBdwb4f4obsRBK214g7DrgXsA58Yxp3MZlsqVsZstILgsmTbNHx
E/QaCK5dQi3YuzznGcKIYbAkxApt+AJCTu8P9RgWk60X4Et4kh8OtNbhHgt0WcXc
Y+M43Vpi5tCc8XsQXHgah+nsAgdRdSdBdQBTZEYSCQ/aDeUM0ELC35qcBWWcpWt6
gWxUWMnYGrM3rsjtJNuaNFvX2Le77zHnHqVg
-----END CERTIFICATE-----