Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E1912BCB4CB11F1BF7A4906CF1D38B0.roa
File:                     0E1912BCB4CB11F1BF7A4906CF1D38B0.roa (raw, json)
Hash identifier:          gE49A0yTImnGqI087tTSEIwAXumHarymr1yN+QPORqs=
Subject key identifier:   87:65:30:A7:8E:6D:AB:76:CA:D3:39:79:D8:F9:CB:13:2F:BD:14:9F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D716
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E1912BCB4CB11F1BF7A4906CF1D38B0.roa
Signing time:             Sun 20 Sep 2026 08:12:44 +0000
ROA not before:           Sun 20 Sep 2026 08:12:40 +0000
ROA not after:            Sat 24 Oct 2026 08:12:40 +0000
asID:                     201814
IP address blocks:        45.192.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120598 (0x1d716)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 20 08:12:40 2026 GMT
            Not After : Oct 24 08:12:40 2026 GMT
        Subject: CN=6aaf957b-3cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:e7:bc:9b:8f:17:1d:cf:21:dc:4f:3f:b2:
                    48:53:99:dd:3b:e9:aa:c6:bc:ba:61:5d:90:69:41:
                    26:83:04:98:e6:38:a7:51:71:a4:f3:c7:1b:be:b7:
                    f8:93:7b:eb:f5:41:f5:97:a4:7d:9c:fb:1f:9a:8e:
                    94:4d:da:22:5c:23:f7:34:13:23:86:28:81:b9:0b:
                    78:7d:12:ad:e6:98:61:c9:88:13:16:e0:db:8c:86:
                    40:54:d5:6a:a8:50:df:ca:e3:97:6a:88:ac:c2:20:
                    04:1f:57:52:ce:d3:19:1f:16:68:9c:87:09:92:ec:
                    f4:21:43:8d:19:0a:3b:01:b5:67:ea:00:72:f1:9b:
                    a6:71:d1:6c:90:7d:c0:93:56:f6:ec:94:cc:c2:b5:
                    d3:1b:90:f8:3a:7c:c3:85:58:58:c2:1a:ce:63:35:
                    89:8a:51:05:48:05:16:c5:90:28:89:fd:22:13:56:
                    41:c7:75:46:3d:69:83:a4:39:fb:31:0e:1f:4b:9b:
                    e2:68:0e:fd:88:99:77:fa:49:05:81:78:d6:27:01:
                    e8:6d:e8:c9:da:74:13:38:a1:60:40:24:ba:8b:49:
                    de:c2:93:74:1f:9b:31:b6:18:c2:8d:13:60:ce:d2:
                    09:e2:3a:d2:76:a3:37:b5:63:28:09:01:ce:e5:7c:
                    9d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:65:30:A7:8E:6D:AB:76:CA:D3:39:79:D8:F9:CB:13:2F:BD:14:9F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E1912BCB4CB11F1BF7A4906CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:8d:84:bb:7f:ad:46:70:b6:a9:fb:f0:bf:6d:5d:3b:ec:58:
         35:bb:5f:a0:32:68:43:4a:9c:ec:58:b5:7e:28:d3:5f:ac:b2:
         b4:34:77:c6:91:b7:4d:b9:4d:3d:f3:b0:d3:48:b5:8f:42:ae:
         25:82:37:57:f4:b5:f2:fd:a2:6b:b2:26:6d:70:97:66:af:ca:
         b2:3e:dd:23:da:aa:67:d5:70:d5:d1:c1:ff:32:84:03:dc:3f:
         e0:1d:2d:c0:dd:a0:1a:f8:53:c1:a5:6a:8a:5e:ac:96:fd:e8:
         3c:af:09:08:5c:a9:11:a3:ed:43:26:75:88:b8:31:3f:40:da:
         a6:0d:f1:f6:6b:97:0d:90:bb:5e:30:36:77:ae:2a:b1:9e:2f:
         c2:03:64:56:bf:ce:e2:db:f6:5d:a6:42:4c:f2:4f:fb:81:c8:
         74:9e:4a:b2:a0:16:8a:7f:86:7f:70:f1:d2:cd:65:3c:c7:ea:
         56:b7:70:69:20:86:cc:8a:e9:aa:a2:85:33:f4:07:a7:43:2b:
         2e:94:06:8c:bc:80:5e:49:4d:6b:d4:17:0f:32:d2:8c:ee:9d:
         af:dc:cf:c4:ae:e6:29:ba:ca:10:4d:db:bf:66:93:ab:f3:c5:
         e8:3f:29:7b:e6:68:67:40:94:68:6a:95:f8:3c:5b:5e:d8:1a:
         f3:54:56:2a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdcWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTIwMDgxMjQwWhcNMjYxMDI0MDgxMjQwWjAYMRYw
FAYDVQQDEw02YWFmOTU3Yi0zY2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwBrnvJuPFx3PIdxPP7JIU5ndO+mqxry6YV2QaUEmgwSY5jinUXGk88cb
vrf4k3vr9UH1l6R9nPsfmo6UTdoiXCP3NBMjhiiBuQt4fRKt5phhyYgTFuDbjIZA
VNVqqFDfyuOXaoiswiAEH1dSztMZHxZonIcJkuz0IUONGQo7AbVn6gBy8ZumcdFs
kH3Ak1b27JTMwrXTG5D4OnzDhVhYwhrOYzWJilEFSAUWxZAoif0iE1ZBx3VGPWmD
pDn7MQ4fS5viaA79iJl3+kkFgXjWJwHobejJ2nQTOKFgQCS6i0newpN0H5sxthjC
jRNgztIJ4jrSdqM3tWMoCQHO5XydqwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIdl
MKeObat2ytM5edj5yxMvvRSfMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wRTE5MTJCQ0I0Q0IxMUYxQkY3QTQ5MDZDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcAMMA0GCSqGSIb3DQEBCwUA
A4IBAQAKjYS7f61GcLap+/C/bV077Fg1u1+gMmhDSpzsWLV+KNNfrLK0NHfGkbdN
uU0987DTSLWPQq4lgjdX9LXy/aJrsiZtcJdmr8qyPt0j2qpn1XDV0cH/MoQD3D/g
HS3A3aAa+FPBpWqKXqyW/eg8rwkIXKkRo+1DJnWIuDE/QNqmDfH2a5cNkLteMDZ3
riqxni/CA2RWv87i2/ZdpkJM8k/7gch0nkqyoBaKf4Z/cPHSzWU8x+pWt3BpIIbM
iumqooUz9AenQysulAaMvIBeSU1r1BcPMtKM7p2v3M/EruYpusoQTdu/ZpOr88Xo
Pyl75mhnQJRoapX4PFte2BrzVFYq
-----END CERTIFICATE-----