Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7BE7856B64D11F19DB62CE4CE1D38B0.roa
File:                     B7BE7856B64D11F19DB62CE4CE1D38B0.roa (raw, json)
Hash identifier:          XdW0bmj8CnU6jEWGnMGsi+LXIGy6uQJJnAqRPeIyNpc=
Subject key identifier:   E7:E3:B2:E7:E9:9C:3E:0E:FD:2A:5D:C6:9F:5D:9B:25:40:E9:C3:3A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D7A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7BE7856B64D11F19DB62CE4CE1D38B0.roa
Signing time:             Tue 22 Sep 2026 06:20:34 +0000
ROA not before:           Tue 22 Sep 2026 06:20:30 +0000
ROA not after:            Tue 27 Oct 2026 06:20:30 +0000
asID:                     402390
IP address blocks:        45.195.198.0/24 maxlen: 24
                          45.201.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120743 (0x1d7a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 06:20:30 2026 GMT
            Not After : Oct 27 06:20:30 2026 GMT
        Subject: CN=6ab21e32-3341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b3:58:c9:99:25:be:3b:ec:e8:b2:fc:62:36:
                    f1:e4:ff:6a:1b:17:4f:39:91:e3:15:07:45:47:2c:
                    16:b2:5b:ac:65:ea:9c:22:a5:3e:0d:2a:a9:7b:60:
                    9b:97:ed:07:2a:01:21:2f:35:09:b1:5e:35:4a:47:
                    82:f7:d9:33:60:5c:bb:33:61:70:3e:2f:f7:a3:a7:
                    2b:23:b0:b3:4a:7d:aa:00:a8:95:2f:97:f2:c7:24:
                    af:f0:e6:23:c1:f5:81:7b:28:66:9e:63:d3:e6:57:
                    ca:b7:d3:9f:2f:37:71:01:42:e5:da:71:f0:aa:80:
                    38:3f:fb:2c:6e:c5:40:30:67:b5:6c:44:85:98:f7:
                    00:78:21:c0:b0:81:87:57:f7:d0:a4:e1:8b:59:eb:
                    67:2f:a9:07:05:3f:3c:cb:55:e6:fd:dc:7d:7b:94:
                    87:f1:cc:d6:d7:b4:45:c8:d1:2e:bb:fa:4a:0d:5a:
                    5d:7e:67:e1:dd:e1:5b:d0:7d:c4:3e:ab:13:bb:03:
                    0c:e8:c0:80:5d:92:ff:2f:73:bb:26:35:71:b6:6d:
                    b5:e2:1e:c3:45:18:0d:68:be:a0:32:3a:da:2a:b7:
                    62:3a:55:8d:c7:36:de:be:35:0c:5d:88:cf:59:37:
                    73:ed:71:57:46:0e:26:3e:d1:2c:98:ab:49:b7:dc:
                    29:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E3:B2:E7:E9:9C:3E:0E:FD:2A:5D:C6:9F:5D:9B:25:40:E9:C3:3A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7BE7856B64D11F19DB62CE4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.198.0/24
                  45.201.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:72:62:08:5e:de:4c:d9:55:71:b9:b2:00:9f:73:0f:c5:d7:
         2d:bb:b6:b5:f0:15:a9:7c:d5:1d:b4:ca:3f:e4:dc:fe:61:90:
         41:46:33:2b:a9:22:eb:5f:67:0f:fb:0c:aa:c6:de:f4:71:4c:
         8e:a0:3c:93:29:3d:51:79:1b:1f:0e:ea:c4:97:a3:d6:ba:b3:
         bc:17:03:56:86:95:ba:50:5c:42:76:d9:96:18:82:84:b0:c0:
         9d:8a:ef:78:6e:aa:ee:67:d1:1b:97:f4:58:8c:5c:87:98:85:
         d1:47:98:3a:d3:7e:0e:b3:6c:57:4c:d6:74:5e:1b:32:80:ae:
         ff:59:65:01:01:b9:73:7e:43:c1:ae:41:d0:6f:63:f5:b6:5c:
         ed:18:c2:6b:26:97:3e:3f:b6:8e:cc:59:fc:85:08:6e:1b:fc:
         dc:11:01:9a:28:83:d8:42:69:5a:ba:64:86:12:c5:ec:00:2c:
         ff:04:dc:bb:29:46:d7:62:29:c2:80:d3:62:73:94:a1:27:57:
         70:b9:66:b4:de:db:c4:77:99:92:b9:fb:e7:b2:e7:20:d2:a2:
         94:f5:69:5a:e1:2b:c3:a7:03:8d:30:b3:78:24:8d:3b:0a:a8:
         a0:3d:4b:4f:ca:3b:3c:70:0a:a4:75:ed:71:62:12:d8:19:45:
         a4:7f:fc:8c
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAdenMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTIyMDYyMDMwWhcNMjYxMDI3MDYyMDMwWjAYMRYw
FAYDVQQDEw02YWIyMWUzMi0zMzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvLNYyZklvjvs6LL8Yjbx5P9qGxdPOZHjFQdFRywWslusZeqcIqU+DSqp
e2Cbl+0HKgEhLzUJsV41SkeC99kzYFy7M2FwPi/3o6crI7CzSn2qAKiVL5fyxySv
8OYjwfWBeyhmnmPT5lfKt9OfLzdxAULl2nHwqoA4P/ssbsVAMGe1bESFmPcAeCHA
sIGHV/fQpOGLWetnL6kHBT88y1Xm/dx9e5SH8czW17RFyNEuu/pKDVpdfmfh3eFb
0H3EPqsTuwMM6MCAXZL/L3O7JjVxtm214h7DRRgNaL6gMjraKrdiOlWNxzbevjUM
XYjPWTdz7XFXRg4mPtEsmKtJt9wpQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOfj
sufpnD4O/Spdxp9dmyVA6cM6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CN0JFNzg1NkI2NEQxMUYxOURCNjJDRTRDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALcPGAwQALckBMA0GCSqGSIb3
DQEBCwUAA4IBAQBJcmIIXt5M2VVxubIAn3MPxdctu7a18BWpfNUdtMo/5Nz+YZBB
RjMrqSLrX2cP+wyqxt70cUyOoDyTKT1ReRsfDurEl6PWurO8FwNWhpW6UFxCdtmW
GIKEsMCdiu94bqruZ9Ebl/RYjFyHmIXRR5g6034Os2xXTNZ0XhsygK7/WWUBAblz
fkPBrkHQb2P1tlztGMJrJpc+P7aOzFn8hQhuG/zcEQGaKIPYQmlaumSGEsXsACz/
BNy7KUbXYinCgNNic5ShJ1dwuWa03tvEd5mSufvnsucg0qKU9Wla4SvDpwONMLN4
JI07CqigPUtPyjs8cAqkde1xYhLYGUWkf/yM
-----END CERTIFICATE-----