Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF2AA2A0BB0B11F18BB471D1CE1D38B0.roa
File:                     BF2AA2A0BB0B11F18BB471D1CE1D38B0.roa (raw, json)
Hash identifier:          9KRveiURbZ2IMXEsBJm1iK4gNQVPbNDylyD3nV3uPy8=
Subject key identifier:   7F:F9:BD:B4:3E:6F:2E:53:13:74:DC:05:DB:75:0E:FD:7B:85:06:3A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D93C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF2AA2A0BB0B11F18BB471D1CE1D38B0.roa
Signing time:             Mon 28 Sep 2026 07:10:55 +0000
ROA not before:           Mon 28 Sep 2026 07:10:51 +0000
ROA not after:            Sun 01 Nov 2026 07:10:51 +0000
asID:                     202972
IP address blocks:        45.194.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 09:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121148 (0x1d93c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 28 07:10:51 2026 GMT
            Not After : Nov  1 07:10:51 2026 GMT
        Subject: CN=6aba12ff-0ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:bd:2c:50:76:f1:1a:73:5b:fb:b4:88:7f:
                    be:aa:8f:72:f2:26:f7:f0:a3:08:e1:5c:6a:9f:5b:
                    8b:28:04:a2:bf:ff:eb:06:cc:3e:db:db:48:18:f9:
                    b6:e4:af:ea:fa:fc:06:3f:62:46:b9:79:23:42:b6:
                    af:7e:b6:aa:5c:84:7a:ab:c1:fe:85:eb:ba:b9:87:
                    a9:cc:9b:ea:07:54:c5:75:42:09:3d:fd:f1:6c:b8:
                    3d:09:af:a7:5e:4a:71:e6:73:7d:3c:0d:4f:19:b9:
                    6e:cc:d1:9d:12:c8:77:e4:2a:f3:81:c0:1d:74:f2:
                    41:52:20:d5:6c:4a:c6:03:7e:2d:3c:35:a5:c1:f4:
                    ae:49:c6:12:e5:6c:ef:83:78:b5:ae:cb:2a:10:21:
                    ad:e5:74:45:e9:d3:1a:03:ec:3e:20:49:76:02:87:
                    9b:f0:95:49:3f:c1:ff:00:c5:e8:66:27:c9:6b:94:
                    46:cb:41:11:28:f3:1d:54:e3:44:63:1c:1a:cb:fa:
                    9f:1c:ac:87:fb:18:b3:de:18:59:ec:fa:fc:72:ab:
                    7d:7e:7e:b6:f3:8f:56:6e:73:ec:79:01:03:58:a0:
                    b2:48:65:90:4c:d3:88:96:16:99:7e:e8:2c:03:69:
                    d9:ba:05:2d:42:25:d3:f8:83:91:a2:5b:68:72:2c:
                    df:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F9:BD:B4:3E:6F:2E:53:13:74:DC:05:DB:75:0E:FD:7B:85:06:3A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF2AA2A0BB0B11F18BB471D1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:5d:27:cb:44:67:41:92:93:f0:cc:f2:6f:b8:3a:2b:c0:1d:
         a2:6f:1f:37:52:49:96:a0:ab:56:a3:aa:5e:fb:35:19:f8:2f:
         04:e5:b5:73:7d:ea:ab:af:3d:ea:2c:da:50:a6:c3:71:a4:d8:
         b4:a8:f7:20:64:f4:bd:b6:ef:27:b3:b0:1a:72:af:af:98:29:
         55:28:06:49:2a:d8:47:0e:bc:cf:a8:ac:ae:38:57:8b:58:d8:
         a2:62:fe:c2:0c:52:2f:e4:5b:4e:79:85:20:97:89:c5:0a:93:
         5e:ec:77:8c:35:85:6b:06:1b:fe:a1:9c:60:95:87:d3:8d:63:
         43:a8:c9:38:34:68:d8:be:7b:63:57:a9:d7:a6:4a:69:ae:75:
         11:96:e8:ba:4e:4a:c3:ef:bd:ef:30:73:6e:7d:80:c8:4d:aa:
         f9:b4:59:c4:df:ac:95:72:94:4e:3f:85:14:39:a0:8f:75:8d:
         da:1a:5f:4b:74:8d:8b:33:73:cd:33:a2:9e:e0:4d:6c:1f:44:
         89:45:c8:51:f4:b1:45:4f:89:29:6b:a8:6f:a1:6d:7d:db:d8:
         60:2a:3a:d8:e2:06:42:11:ed:76:5d:b2:9a:ab:ba:61:ab:72:
         d6:20:33:7d:48:57:c8:b7:76:13:6c:53:3f:f4:fe:bc:78:f4:
         34:c8:bb:8d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdk8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTI4MDcxMDUxWhcNMjYxMTAxMDcxMDUxWjAYMRYw
FAYDVQQDEw02YWJhMTJmZi0wYWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAq8O9LFB28RpzW/u0iH++qo9y8ib38KMI4Vxqn1uLKASiv//rBsw+29tI
GPm25K/q+vwGP2JGuXkjQravfraqXIR6q8H+heu6uYepzJvqB1TFdUIJPf3xbLg9
Ca+nXkpx5nN9PA1PGbluzNGdEsh35CrzgcAddPJBUiDVbErGA34tPDWlwfSuScYS
5Wzvg3i1rssqECGt5XRF6dMaA+w+IEl2Aoeb8JVJP8H/AMXoZifJa5RGy0ERKPMd
VONEYxway/qfHKyH+xiz3hhZ7Pr8cqt9fn62849WbnPseQEDWKCySGWQTNOIlhaZ
fugsA2nZugUtQiXT+IORoltocizfHwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFH/5
vbQ+by5TE3TcBdt1Dv17hQY6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CRjJBQTJBMEJCMEIxMUYxOEJCNDcxRDFDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcJ4MA0GCSqGSIb3DQEBCwUA
A4IBAQALXSfLRGdBkpPwzPJvuDorwB2ibx83UkmWoKtWo6pe+zUZ+C8E5bVzfeqr
rz3qLNpQpsNxpNi0qPcgZPS9tu8ns7Aacq+vmClVKAZJKthHDrzPqKyuOFeLWNii
Yv7CDFIv5FtOeYUgl4nFCpNe7HeMNYVrBhv+oZxglYfTjWNDqMk4NGjYvntjV6nX
pkpprnURlui6TkrD773vMHNufYDITar5tFnE36yVcpROP4UUOaCPdY3aGl9LdI2L
M3PNM6Ke4E1sH0SJRchR9LFFT4kpa6hvoW1929hgKjrY4gZCEe12XbKaq7phq3LW
IDN9SFfIt3YTbFM/9P68ePQ0yLuN
-----END CERTIFICATE-----