Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F96380FAADBD11F192A147FDCE1D38B0.roa
File:                     F96380FAADBD11F192A147FDCE1D38B0.roa (raw, json)
Hash identifier:          dQ465D7QE0RpNGEdcBGii/B8m3dQtc38EQ1HsKev/cA=
Subject key identifier:   5B:CF:65:BE:1D:02:4B:BC:F1:62:DB:2D:76:B8:5A:19:20:04:2E:5E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D545
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F96380FAADBD11F192A147FDCE1D38B0.roa
Signing time:             Fri 11 Sep 2026 08:51:27 +0000
ROA not before:           Fri 11 Sep 2026 08:51:23 +0000
ROA not after:            Fri 15 Oct 2027 08:51:23 +0000
asID:                     142386
IP address blocks:        45.198.10.0/23 maxlen: 24
                          45.198.10.0/24 maxlen: 24
                          45.198.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120133 (0x1d545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 11 08:51:23 2026 GMT
            Not After : Oct 15 08:51:23 2027 GMT
        Subject: CN=6aa3c10f-2d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:99:a2:2a:5b:72:96:52:1b:68:1d:a9:86:
                    db:9c:21:0f:04:c7:a7:b8:b1:f6:57:76:0d:5b:4d:
                    a2:ca:45:9f:f1:a6:33:2f:ea:d4:c4:47:b7:fa:29:
                    5b:f1:f9:cd:ff:53:69:81:ec:67:c5:e2:ed:79:c1:
                    6d:1a:54:72:58:d2:fe:48:22:18:df:65:5e:d6:8e:
                    db:5f:7a:dc:88:86:3d:a5:be:96:81:ea:3d:d5:a9:
                    0d:cf:64:5d:f5:45:59:f5:4a:16:c0:41:3f:a9:6d:
                    ee:34:47:ff:0b:bd:6b:26:2f:2f:76:cf:f0:49:bf:
                    45:c4:b2:f7:98:f3:7b:95:83:75:90:0c:ce:6d:2f:
                    3d:d7:e0:06:fa:7e:13:6c:ff:b5:d3:aa:82:0e:af:
                    d0:cd:19:96:0d:f3:1f:7b:19:f2:25:b5:79:d3:5e:
                    e3:96:c1:ae:e3:2d:88:70:16:a5:d5:ba:63:bb:f1:
                    c2:7d:02:ce:dd:a2:40:dd:fc:01:6d:36:56:c7:e0:
                    75:ad:a4:86:6e:a0:2c:d9:a1:78:e4:11:29:98:55:
                    95:ed:6b:5c:1c:aa:40:69:ce:91:4c:6a:6f:d2:9d:
                    85:b4:ce:bb:f0:57:31:12:75:bf:ad:d6:6d:03:f8:
                    25:37:c0:a7:c6:43:cc:27:b6:14:70:0a:79:97:e8:
                    88:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CF:65:BE:1D:02:4B:BC:F1:62:DB:2D:76:B8:5A:19:20:04:2E:5E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F96380FAADBD11F192A147FDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:f2:f6:30:58:99:40:8e:44:80:6a:e3:b6:94:9c:ff:f7:3a:
         55:55:a1:b0:d0:05:e3:fe:7e:b1:6c:fb:44:d7:83:2a:8a:f4:
         d6:f6:0d:26:89:56:50:b4:5c:ce:67:e8:be:88:bf:ac:74:61:
         fa:ee:da:8b:16:7e:b7:44:d1:60:c5:28:af:99:05:92:cd:55:
         7f:3a:5e:2b:01:7d:7e:c0:94:c9:03:d1:7f:7d:93:83:e0:2c:
         61:87:97:48:92:c0:6e:69:76:e2:76:08:76:bd:88:bf:24:ac:
         cd:84:64:63:cb:72:72:54:9f:f0:98:ff:ac:b8:2b:e9:10:4e:
         4a:dd:31:a1:41:c7:6f:c3:12:01:86:a9:69:db:88:74:f6:20:
         bf:aa:21:d0:21:54:f8:db:65:a4:cf:a8:92:e5:e8:f9:72:0f:
         01:31:5e:2f:2c:b5:b5:9c:c2:d4:62:b3:1c:db:54:31:77:1d:
         02:cd:c4:45:8e:4f:ef:ef:a5:c9:b1:85:66:49:f4:db:48:72:
         bb:be:8a:92:5f:53:f5:92:b9:bc:f5:b0:b7:2f:88:b1:b8:30:
         82:45:f8:65:49:34:10:c2:90:0e:7c:9b:22:17:fe:00:63:73:
         2c:40:39:8c:f0:bd:e2:9c:44:b7:5c:a1:b5:42:00:4f:96:76:
         5f:ca:64:2d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdVFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTExMDg1MTIzWhcNMjcxMDE1MDg1MTIzWjAYMRYw
FAYDVQQDEw02YWEzYzEwZi0yZDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzdCZoipbcpZSG2gdqYbbnCEPBMenuLH2V3YNW02iykWf8aYzL+rUxEe3
+ilb8fnN/1NpgexnxeLtecFtGlRyWNL+SCIY32Ve1o7bX3rciIY9pb6Wgeo91akN
z2Rd9UVZ9UoWwEE/qW3uNEf/C71rJi8vds/wSb9FxLL3mPN7lYN1kAzObS891+AG
+n4TbP+106qCDq/QzRmWDfMfexnyJbV5017jlsGu4y2IcBal1bpju/HCfQLO3aJA
3fwBbTZWx+B1raSGbqAs2aF45BEpmFWV7WtcHKpAac6RTGpv0p2FtM678FcxEnW/
rdZtA/glN8CnxkPMJ7YUcAp5l+iI7wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFvP
Zb4dAku88WLbLXa4WhkgBC5eMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9GOTYzODBGQUFEQkQxMUYxOTJBMTQ3RkRDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcYKMA0GCSqGSIb3DQEBCwUA
A4IBAQCx8vYwWJlAjkSAauO2lJz/9zpVVaGw0AXj/n6xbPtE14MqivTW9g0miVZQ
tFzOZ+i+iL+sdGH67tqLFn63RNFgxSivmQWSzVV/Ol4rAX1+wJTJA9F/fZOD4Cxh
h5dIksBuaXbidgh2vYi/JKzNhGRjy3JyVJ/wmP+suCvpEE5K3TGhQcdvwxIBhqlp
24h09iC/qiHQIVT422Wkz6iS5ej5cg8BMV4vLLW1nMLUYrMc21Qxdx0CzcRFjk/v
76XJsYVmSfTbSHK7voqSX1P1krm89bC3L4ixuDCCRfhlSTQQwpAOfJsiF/4AY3Ms
QDmM8L3inES3XKG1QgBPlnZfymQt
-----END CERTIFICATE-----