Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28996A36B65D11F1A35B42C7CE1D38B0.roa
File:                     28996A36B65D11F1A35B42C7CE1D38B0.roa (raw, json)
Hash identifier:          kUr25NPcIprv2EHVKboMYb447y69bKnLtD9bnhSSdyU=
Subject key identifier:   C3:90:5A:C8:30:62:34:1F:8E:6C:2F:60:50:71:E3:62:F1:60:C9:C3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D7D6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28996A36B65D11F1A35B42C7CE1D38B0.roa
Signing time:             Tue 22 Sep 2026 08:11:06 +0000
ROA not before:           Tue 22 Sep 2026 08:11:02 +0000
ROA not after:            Thu 29 Oct 2026 08:11:02 +0000
asID:                     202656
IP address blocks:        45.199.244.0/24 maxlen: 24
                          45.199.245.0/24 maxlen: 24
                          45.199.249.0/24 maxlen: 24
                          45.199.250.0/24 maxlen: 24
                          45.199.252.0/24 maxlen: 24
                          45.199.255.0/24 maxlen: 24
                          45.200.160.0/24 maxlen: 24
                          45.200.161.0/24 maxlen: 24
                          45.200.162.0/24 maxlen: 24
                          45.200.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120790 (0x1d7d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 08:11:02 2026 GMT
            Not After : Oct 29 08:11:02 2026 GMT
        Subject: CN=6ab2381a-4e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b8:b0:4c:1a:58:0d:93:64:ef:41:93:b4:2e:
                    c6:82:48:f4:48:c7:12:3d:c8:b9:2e:bf:57:8b:f3:
                    44:73:e0:aa:68:e1:e0:af:00:a8:5a:aa:db:d8:eb:
                    8d:43:b7:df:45:ae:55:dd:5a:09:4e:8e:5d:e7:22:
                    d0:a2:59:2c:5e:e6:55:b4:0b:a7:97:16:6b:65:0b:
                    b2:e3:ca:d0:41:62:c1:c2:a9:59:a4:f1:b9:a0:58:
                    f8:16:fd:58:4e:32:cc:ce:7f:92:8f:b3:d2:10:df:
                    3a:81:5d:d8:d0:6c:fc:83:74:e5:d1:fe:6e:b3:9e:
                    2e:cf:fa:bc:e5:b7:48:5e:d1:7c:28:98:d8:fe:ce:
                    05:98:f9:ad:b0:a0:63:cd:e4:94:10:fe:98:b6:2c:
                    d9:73:d7:92:ac:96:1f:b0:1e:15:c2:d0:35:d4:30:
                    b1:64:14:61:9e:66:fc:fb:7a:fe:37:8d:4f:4e:fd:
                    1a:fb:ea:5b:58:5f:08:f7:09:7f:da:34:2e:2c:95:
                    89:12:65:ba:09:33:d1:73:45:08:a7:61:c8:dd:51:
                    a2:29:64:e2:76:51:70:72:93:8d:f8:4b:c8:c8:a7:
                    c0:99:24:1d:b3:8c:59:c5:ff:d7:fb:40:9b:14:f6:
                    e0:30:07:62:99:f3:9a:a3:32:54:c4:0f:e3:e5:16:
                    2c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:90:5A:C8:30:62:34:1F:8E:6C:2F:60:50:71:E3:62:F1:60:C9:C3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28996A36B65D11F1A35B42C7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.244.0/23
                  45.199.249.0-45.199.250.255
                  45.199.252.0/24
                  45.199.255.0/24
                  45.200.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:d2:a1:eb:e4:45:25:00:07:32:dc:cb:84:aa:e0:f2:9d:5b:
         93:87:72:1f:fe:95:23:a0:ee:7d:6f:95:60:4c:54:0c:6a:7f:
         b2:64:66:95:e6:a3:c0:75:8a:9e:29:04:f0:24:c9:2d:ad:7f:
         aa:cd:a3:4f:89:8e:ee:ad:39:fa:b9:b2:9c:8a:a0:f7:07:7a:
         65:62:5e:ab:fc:f8:49:fe:57:85:7b:04:c4:6b:25:c8:89:57:
         9e:b2:c2:0b:0c:bf:f0:cd:ae:71:47:cf:cb:83:d4:f7:ad:b7:
         e4:a7:c4:c8:f4:68:36:3d:43:aa:db:aa:8f:c3:5d:45:a1:d2:
         5d:84:93:cb:e1:29:05:1d:13:e2:90:2a:48:ff:13:4b:f4:35:
         cf:1f:17:1f:9a:29:ca:0a:c0:e4:14:25:97:9e:52:b7:4f:db:
         25:b3:58:b6:2b:b4:92:7e:44:b7:20:0a:86:69:e5:01:7e:7d:
         88:48:60:4d:ea:c0:a3:a6:76:73:fe:75:72:7b:91:54:5f:85:
         aa:02:70:c0:ae:e9:3f:59:2d:ef:90:2c:fd:05:97:ee:13:8e:
         3e:96:b2:41:1c:33:32:de:d1:da:4e:c7:18:c8:97:d9:d3:f1:
         fb:db:18:51:a4:fb:33:1a:87:cd:0c:b7:28:76:4e:8c:1a:fb:
         45:f8:1d:c4
-----BEGIN CERTIFICATE-----
MIIFoTCCBImgAwIBAgIDAdfWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTIyMDgxMTAyWhcNMjYxMDI5MDgxMTAyWjAYMRYw
FAYDVQQDEw02YWIyMzgxYS00ZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuLiwTBpYDZNk70GTtC7Ggkj0SMcSPci5Lr9Xi/NEc+CqaOHgrwCoWqrb
2OuNQ7ffRa5V3VoJTo5d5yLQolksXuZVtAunlxZrZQuy48rQQWLBwqlZpPG5oFj4
Fv1YTjLMzn+Sj7PSEN86gV3Y0Gz8g3Tl0f5us54uz/q85bdIXtF8KJjY/s4FmPmt
sKBjzeSUEP6YtizZc9eSrJYfsB4VwtA11DCxZBRhnmb8+3r+N41PTv0a++pbWF8I
9wl/2jQuLJWJEmW6CTPRc0UIp2HI3VGiKWTidlFwcpON+EvIyKfAmSQds4xZxf/X
+0CbFPbgMAdimfOaozJUxA/j5RYs4QIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFMOQ
WsgwYjQfjmwvYFBx42LxYMnDMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yODk5NkEzNkI2NUQxMUYxQTM1QjQyQzdDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQBLcf0MAwDBAAtx/kDBAAtx/oD
BAAtx/wDBAAtx/8DBAItyKAwDQYJKoZIhvcNAQELBQADggEBAK/SoevkRSUABzLc
y4Sq4PKdW5OHch/+lSOg7n1vlWBMVAxqf7JkZpXmo8B1ip4pBPAkyS2tf6rNo0+J
ju6tOfq5spyKoPcHemViXqv8+En+V4V7BMRrJciJV56ywgsMv/DNrnFHz8uD1Pet
t+SnxMj0aDY9Q6rbqo/DXUWh0l2Ek8vhKQUdE+KQKkj/E0v0Nc8fFx+aKcoKwOQU
JZeeUrdP2yWzWLYrtJJ+RLcgCoZp5QF+fYhIYE3qwKOmdnP+dXJ7kVRfhaoCcMCu
6T9ZLe+QLP0Fl+4Tjj6WskEcMzLe0dpOxxjIl9nT8fvbGFGk+zMah80Mtyh2Towa
+0X4HcQ=
-----END CERTIFICATE-----