Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4EEB9E0ADD011F1B1DF3BEDCE1D38B0.roa
File:                     B4EEB9E0ADD011F1B1DF3BEDCE1D38B0.roa (raw, json)
Hash identifier:          dcO2EmAjqj9QpXySOzOGz7hgwnkV3g/GPY7uT0qchs4=
Subject key identifier:   23:8C:5F:C5:7B:D6:26:03:A3:EA:30:6D:87:F7:9F:72:6D:79:A9:FE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D561
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4EEB9E0ADD011F1B1DF3BEDCE1D38B0.roa
Signing time:             Fri 11 Sep 2026 11:05:33 +0000
ROA not before:           Fri 11 Sep 2026 11:05:29 +0000
ROA not after:            Fri 16 Oct 2026 11:05:29 +0000
asID:                     401434
IP address blocks:        45.196.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120161 (0x1d561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 11 11:05:29 2026 GMT
            Not After : Oct 16 11:05:29 2026 GMT
        Subject: CN=6aa3e07d-e987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e2:b4:ff:12:9a:4c:cf:e6:bc:8b:2b:1e:49:
                    3e:9e:36:1b:60:92:18:1d:76:c3:1e:7f:a4:a0:3e:
                    d0:c5:ef:a4:79:0f:de:31:00:c0:7a:f3:5a:58:1d:
                    02:24:a0:b2:7c:16:ed:0d:94:22:89:29:dc:5a:59:
                    75:3a:49:e6:ca:c6:a3:6e:24:67:f4:6d:55:69:bc:
                    eb:9e:c1:c1:1e:6c:ae:d0:b4:0c:dd:3b:a8:7b:f7:
                    04:1b:36:8a:df:f4:80:cb:16:aa:b4:cb:6d:85:22:
                    94:ac:01:1b:04:c2:9e:5c:81:f9:49:04:42:45:3d:
                    79:49:13:d9:3f:5b:f7:90:7a:f9:8b:76:88:82:2b:
                    06:79:cf:40:41:05:c7:c9:ff:90:3c:71:9c:2d:21:
                    a1:5c:a1:ec:4b:d4:51:81:35:ae:1d:27:4f:67:98:
                    e3:37:d3:1b:28:99:f6:54:af:4a:b0:02:ed:d2:c3:
                    b5:f1:64:76:25:68:44:db:fa:8d:05:fb:56:17:52:
                    bf:9e:fe:df:32:3b:e2:79:8c:86:d7:20:ca:06:a5:
                    f2:05:3d:5e:bf:ad:be:f6:59:bc:df:c6:ed:f0:a1:
                    6b:3a:b3:66:a4:a2:72:13:8d:ac:7e:46:ef:e1:3e:
                    1a:8c:7b:0b:e9:47:c3:12:54:fd:56:ce:d4:ef:73:
                    73:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8C:5F:C5:7B:D6:26:03:A3:EA:30:6D:87:F7:9F:72:6D:79:A9:FE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4EEB9E0ADD011F1B1DF3BEDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:a1:45:8c:da:aa:23:d1:26:5a:dc:6b:45:b8:b0:4e:84:34:
         4a:a5:c9:b1:33:ec:10:61:f8:4b:62:50:98:7c:a1:74:43:94:
         f6:95:76:cb:70:ac:87:fb:d7:eb:44:be:49:5c:d1:26:66:6d:
         ee:93:80:40:66:d4:0e:c7:89:9f:1d:37:55:3b:e1:e6:96:f4:
         24:c0:88:9e:b0:f4:0a:9e:8d:46:1a:dc:1e:b4:ce:bd:15:f6:
         1a:12:8d:07:51:b6:63:79:d2:bf:2b:11:76:eb:01:19:46:ea:
         f3:58:41:7d:68:23:62:db:56:48:5a:34:24:c7:6a:65:c7:a9:
         df:1d:43:ae:3d:d6:b5:13:04:3e:82:ab:e0:80:bc:0f:39:84:
         62:3b:63:7e:f8:7a:97:1c:de:25:b8:81:d6:b7:80:d2:e9:58:
         40:9d:21:8a:81:3a:80:38:7a:0f:94:8d:db:72:93:8d:cd:6f:
         cd:76:a6:58:9e:fe:84:41:26:e9:40:1c:fb:0c:69:8f:c9:c8:
         bb:5d:e1:e6:96:36:96:99:aa:e7:aa:3a:c3:f9:3a:9c:eb:d9:
         91:d2:7c:d2:2f:29:b9:e5:9e:f5:bc:90:48:e7:cb:71:36:b4:
         47:25:2f:af:62:63:92:81:52:81:a3:44:86:26:f6:93:06:4a:
         ba:ff:93:f5
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdVhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTExMTEwNTI5WhcNMjYxMDE2MTEwNTI5WjAYMRYw
FAYDVQQDEw02YWEzZTA3ZC1lOTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvuK0/xKaTM/mvIsrHkk+njYbYJIYHXbDHn+koD7Qxe+keQ/eMQDAevNa
WB0CJKCyfBbtDZQiiSncWll1OknmysajbiRn9G1VabzrnsHBHmyu0LQM3Tuoe/cE
GzaK3/SAyxaqtMtthSKUrAEbBMKeXIH5SQRCRT15SRPZP1v3kHr5i3aIgisGec9A
QQXHyf+QPHGcLSGhXKHsS9RRgTWuHSdPZ5jjN9MbKJn2VK9KsALt0sO18WR2JWhE
2/qNBftWF1K/nv7fMjvieYyG1yDKBqXyBT1ev62+9lm838bt8KFrOrNmpKJyE42s
fkbv4T4ajHsL6UfDElT9Vs7U73NzGQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCOM
X8V71iYDo+owbYf3n3Jtean+MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CNEVFQjlFMEFERDAxMUYxQjFERjNCRURDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcTYMA0GCSqGSIb3DQEBCwUA
A4IBAQCdoUWM2qoj0SZa3GtFuLBOhDRKpcmxM+wQYfhLYlCYfKF0Q5T2lXbLcKyH
+9frRL5JXNEmZm3uk4BAZtQOx4mfHTdVO+HmlvQkwIiesPQKno1GGtwetM69FfYa
Eo0HUbZjedK/KxF26wEZRurzWEF9aCNi21ZIWjQkx2plx6nfHUOuPda1EwQ+gqvg
gLwPOYRiO2N++HqXHN4luIHWt4DS6VhAnSGKgTqAOHoPlI3bcpONzW/NdqZYnv6E
QSbpQBz7DGmPyci7XeHmljaWmarnqjrD+Tqc69mR0nzSLym55Z71vJBI58txNrRH
JS+vYmOSgVKBo0SGJvaTBkq6/5P1
-----END CERTIFICATE-----