Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7EAD6AAAA9911F18AC2BDF2CE1D38B0.roa
File:                     A7EAD6AAAA9911F18AC2BDF2CE1D38B0.roa (raw, json)
Hash identifier:          aIKRZBBQE1FYQVJ8i9gMNWpiBOnzKYnb5Gn1vWANiJM=
Subject key identifier:   00:6E:5F:28:84:D0:77:66:CC:D2:87:AD:0A:71:4F:09:BF:C2:8B:2D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D3C6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7EAD6AAAA9911F18AC2BDF2CE1D38B0.roa
Signing time:             Mon 07 Sep 2026 08:53:55 +0000
ROA not before:           Mon 07 Sep 2026 08:53:51 +0000
ROA not after:            Wed 14 Oct 2026 08:53:51 +0000
asID:                     60647
IP address blocks:        45.195.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119750 (0x1d3c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  7 08:53:51 2026 GMT
            Not After : Oct 14 08:53:51 2026 GMT
        Subject: CN=6a9e7ba3-7431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bd:be:81:45:d7:0c:8c:e7:de:c8:fc:bd:3e:
                    14:61:7a:37:b3:b2:72:d0:08:b3:de:fa:fb:4b:5e:
                    67:0a:6f:a0:65:49:b7:5d:07:30:b0:97:c2:73:e5:
                    4d:9d:f2:41:82:01:cc:53:25:da:15:76:77:e5:75:
                    c1:4d:8f:1e:b0:83:ef:cc:16:a1:4d:50:b2:47:97:
                    73:1e:58:40:95:8b:11:ec:01:e3:1b:66:6c:28:dc:
                    b1:5c:8d:60:b3:21:03:a4:8b:e8:34:b9:ae:38:d7:
                    2a:1a:25:35:44:7e:0b:c0:20:6a:4e:f6:f6:cf:2b:
                    4b:c6:d0:5d:a6:7f:21:08:3a:53:f7:3c:ee:62:65:
                    22:0b:00:35:df:dd:20:fb:e9:65:a0:5f:83:ff:f3:
                    01:ad:c0:ab:9f:1d:3e:55:c4:0d:ac:40:8f:c7:e0:
                    2b:ae:22:9f:54:00:d1:6f:b4:96:2b:fb:8b:61:f6:
                    06:bf:c5:66:d6:70:76:f0:7a:4b:3c:a5:43:c4:57:
                    73:59:7c:26:74:b3:3d:f0:8e:ac:05:e8:60:3b:eb:
                    90:ed:33:d4:d4:94:a4:1f:c5:80:c9:68:1e:67:42:
                    98:ae:3f:64:f7:9f:d8:25:47:ec:25:d5:bb:b8:25:
                    0b:67:cc:4c:85:83:10:e3:a7:eb:87:dd:c1:ca:49:
                    45:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6E:5F:28:84:D0:77:66:CC:D2:87:AD:0A:71:4F:09:BF:C2:8B:2D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7EAD6AAAA9911F18AC2BDF2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:8b:44:37:09:39:0c:21:2c:ba:3f:c3:67:8e:4d:ce:c2:ff:
         71:4f:37:14:6b:a4:bb:3b:19:86:5c:29:63:2a:0b:5d:d2:df:
         18:65:7b:94:b5:46:9e:f8:4f:1b:7e:14:ae:ad:c1:47:ff:cc:
         a5:d4:78:71:bf:2d:8c:12:21:d3:4b:f9:c4:bb:a5:78:c3:f4:
         93:d5:24:3b:35:72:db:00:4d:12:56:75:d6:c1:ba:91:76:cd:
         69:20:b8:03:df:f8:fc:04:9b:5d:ec:89:bd:84:2d:38:04:ee:
         8a:12:50:a4:3c:33:fa:ef:f9:56:53:6d:0f:23:4c:59:d8:8d:
         f2:c2:5c:bc:12:36:32:ea:21:bf:a1:db:18:19:18:13:3b:07:
         5d:f2:35:b5:0f:8d:31:6a:0e:22:92:1a:d6:ca:91:a7:43:ea:
         3c:e4:65:64:13:09:f5:8f:b6:5b:6d:90:5a:f9:52:7a:f6:e3:
         21:04:f9:0a:30:53:35:96:96:15:65:6b:a8:fa:42:50:2c:58:
         a7:c6:70:c4:83:7c:3e:87:a8:03:f4:cd:89:6d:91:35:c6:63:
         b5:3c:09:d6:00:5c:b7:f5:cd:b7:f7:c4:ef:39:aa:24:ee:be:
         9c:d6:d6:e5:76:a3:a5:ff:f7:6d:e2:94:3b:70:ed:0e:3e:a7:
         17:42:89:0d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdPGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTA3MDg1MzUxWhcNMjYxMDE0MDg1MzUxWjAYMRYw
FAYDVQQDEw02YTllN2JhMy03NDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3b2+gUXXDIzn3sj8vT4UYXo3s7Jy0Aiz3vr7S15nCm+gZUm3XQcwsJfC
c+VNnfJBggHMUyXaFXZ35XXBTY8esIPvzBahTVCyR5dzHlhAlYsR7AHjG2ZsKNyx
XI1gsyEDpIvoNLmuONcqGiU1RH4LwCBqTvb2zytLxtBdpn8hCDpT9zzuYmUiCwA1
390g++lloF+D//MBrcCrnx0+VcQNrECPx+ArriKfVADRb7SWK/uLYfYGv8Vm1nB2
8HpLPKVDxFdzWXwmdLM98I6sBehgO+uQ7TPU1JSkH8WAyWgeZ0KYrj9k95/YJUfs
JdW7uCULZ8xMhYMQ46frh93ByklFdwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFABu
XyiE0HdmzNKHrQpxTwm/wostMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BN0VBRDZBQUFBOTkxMUYxOEFDMkJERjJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcPmMA0GCSqGSIb3DQEBCwUA
A4IBAQCHi0Q3CTkMISy6P8Nnjk3Owv9xTzcUa6S7OxmGXCljKgtd0t8YZXuUtUae
+E8bfhSurcFH/8yl1Hhxvy2MEiHTS/nEu6V4w/ST1SQ7NXLbAE0SVnXWwbqRds1p
ILgD3/j8BJtd7Im9hC04BO6KElCkPDP67/lWU20PI0xZ2I3ywly8EjYy6iG/odsY
GRgTOwdd8jW1D40xag4ikhrWypGnQ+o85GVkEwn1j7ZbbZBa+VJ69uMhBPkKMFM1
lpYVZWuo+kJQLFinxnDEg3w+h6gD9M2JbZE1xmO1PAnWAFy39c2398TvOaok7r6c
1tbldqOl//dt4pQ7cO0OPqcXQokN
-----END CERTIFICATE-----