Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A31C553AADBA11F1A352DBEACE1D38B0.roa
File:                     A31C553AADBA11F1A352DBEACE1D38B0.roa (raw, json)
Hash identifier:          u1V+jsaKr7WMFTVGNnU0WX6wTIT1x0j2/tjdxPAuR9o=
Subject key identifier:   3F:04:BA:D6:86:E1:BB:67:B7:5C:D5:8F:DA:6E:33:6A:F0:4C:0D:40
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D539
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A31C553AADBA11F1A352DBEACE1D38B0.roa
Signing time:             Fri 11 Sep 2026 08:27:34 +0000
ROA not before:           Fri 11 Sep 2026 08:27:30 +0000
ROA not after:            Sun 18 Oct 2026 08:27:30 +0000
asID:                     22773
IP address blocks:        45.192.4.0/22 maxlen: 24
                          45.192.24.0/21 maxlen: 24
                          45.194.72.0/23 maxlen: 24
                          45.194.76.0/23 maxlen: 24
                          45.194.78.0/24 maxlen: 24
                          45.194.82.0/24 maxlen: 24
                          45.194.84.0/24 maxlen: 24
                          45.194.121.0/24 maxlen: 24
                          45.196.116.0/22 maxlen: 24
                          45.197.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120121 (0x1d539)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 11 08:27:30 2026 GMT
            Not After : Oct 18 08:27:30 2026 GMT
        Subject: CN=6aa3bb76-688f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e1:f1:73:78:28:f2:a5:b1:ba:a7:a3:41:eb:
                    87:b0:da:70:2c:28:32:d1:89:39:9e:c5:9e:48:23:
                    1f:0c:2d:0c:85:7b:c6:7a:53:34:df:de:13:59:1a:
                    01:28:95:db:85:bc:b2:71:2c:e7:ba:54:7f:e0:92:
                    75:c8:68:bd:e8:76:32:f0:d1:f4:9e:43:28:16:56:
                    6b:56:27:bc:50:0b:fa:38:1a:78:a9:06:43:08:78:
                    98:e7:cb:aa:22:7d:43:3a:dd:8d:ff:e1:a6:2b:47:
                    21:4e:27:10:50:cd:f1:f9:c7:db:89:0c:6d:38:81:
                    81:73:cc:06:60:62:28:19:59:14:17:fb:d5:43:1e:
                    57:e1:7c:bc:b2:79:35:a6:45:ca:7e:ce:ab:00:8f:
                    52:a0:09:57:16:94:be:c1:6e:47:d8:a1:62:a0:80:
                    19:d3:2e:77:33:aa:26:f9:c4:06:68:28:65:5c:7d:
                    8a:6e:4e:0a:29:ff:c5:e1:2e:cf:e0:29:4c:f3:4c:
                    cc:f8:9b:f9:e3:0a:ec:65:4e:79:19:1d:a4:8e:e1:
                    5a:31:06:1c:7a:49:85:2e:0e:d3:e9:dc:d8:37:5a:
                    5a:af:cd:86:88:df:97:82:de:5b:08:7f:06:00:84:
                    c5:56:21:bf:91:3c:ee:a6:41:4b:20:b7:42:5e:ba:
                    bd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:04:BA:D6:86:E1:BB:67:B7:5C:D5:8F:DA:6E:33:6A:F0:4C:0D:40
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A31C553AADBA11F1A352DBEACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.4.0/22
                  45.192.24.0/21
                  45.194.72.0/23
                  45.194.76.0-45.194.78.255
                  45.194.82.0/24
                  45.194.84.0/24
                  45.194.121.0/24
                  45.196.116.0/22
                  45.197.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:b8:3d:7e:33:85:5d:06:25:23:b4:da:a8:dd:d4:32:f6:7c:
         c6:42:4e:9f:c6:6b:22:55:a7:3e:47:94:d0:a4:92:1f:68:d6:
         0a:2d:14:c4:29:d2:2d:c7:70:06:e2:c1:47:ae:30:51:b5:4b:
         65:d8:47:82:67:b5:b2:33:09:b4:40:1c:ab:2c:f0:cc:13:87:
         d3:50:7a:2b:d8:73:23:a6:d1:34:b5:46:76:72:07:d6:75:df:
         c9:f2:37:8f:81:0f:39:7f:a4:c8:42:5f:b5:86:b2:50:0c:a5:
         b9:dd:57:5a:43:2b:30:2a:f8:41:ff:1c:c3:db:b8:bb:81:b5:
         58:fe:09:bd:25:c7:cd:9c:26:84:fb:fa:84:d6:dc:4d:9a:55:
         ae:d5:b0:b3:09:6a:32:76:0a:c2:ab:de:f3:8f:c9:64:83:87:
         e6:b6:09:56:c3:08:cf:ff:b7:09:c2:56:97:82:ef:11:04:dd:
         d8:e0:7f:f3:8e:52:da:d2:12:1f:cb:22:fd:84:22:e9:00:e1:
         d2:d7:ab:f2:e7:af:bc:a0:15:00:b1:30:fe:fa:01:69:73:dc:
         16:92:13:0b:c5:cb:50:b4:83:67:26:4c:0e:27:f2:59:47:9b:
         f9:cc:9d:61:18:e6:37:ba:57:8d:19:ce:7e:4b:c4:08:d8:ec:
         67:90:d9:c3
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIDAdU5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTExMDgyNzMwWhcNMjYxMDE4MDgyNzMwWjAYMRYw
FAYDVQQDEw02YWEzYmI3Ni02ODhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuOHxc3go8qWxuqejQeuHsNpwLCgy0Yk5nsWeSCMfDC0MhXvGelM0394T
WRoBKJXbhbyycSznulR/4JJ1yGi96HYy8NH0nkMoFlZrVie8UAv6OBp4qQZDCHiY
58uqIn1DOt2N/+GmK0chTicQUM3x+cfbiQxtOIGBc8wGYGIoGVkUF/vVQx5X4Xy8
snk1pkXKfs6rAI9SoAlXFpS+wW5H2KFioIAZ0y53M6om+cQGaChlXH2Kbk4KKf/F
4S7P4ClM80zM+Jv54wrsZU55GR2kjuFaMQYcekmFLg7T6dzYN1par82GiN+Xgt5b
CH8GAITFViG/kTzupkFLILdCXrq9hQIDAQABo4IC2jCCAtYwHQYDVR0OBBYEFD8E
utaG4btnt1zVj9puM2rwTA1AMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BMzFDNTUzQUFEQkExMUYxQTM1MkRCRUFDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQCLcAEAwQDLcAYAwQBLcJIMAwD
BAItwkwDBAAtwk4DBAAtwlIDBAAtwlQDBAAtwnkDBAItxHQDBAItxRwwDQYJKoZI
hvcNAQELBQADggEBAGW4PX4zhV0GJSO02qjd1DL2fMZCTp/GayJVpz5HlNCkkh9o
1gotFMQp0i3HcAbiwUeuMFG1S2XYR4JntbIzCbRAHKss8MwTh9NQeivYcyOm0TS1
RnZyB9Z138nyN4+BDzl/pMhCX7WGslAMpbndV1pDKzAq+EH/HMPbuLuBtVj+Cb0l
x82cJoT7+oTW3E2aVa7VsLMJajJ2CsKr3vOPyWSDh+a2CVbDCM//twnCVpeC7xEE
3djgf/OOUtrSEh/LIv2EIukA4dLXq/Lnr7ygFQCxMP76AWlz3BaSEwvFy1C0g2cm
TA4n8llHm/nMnWEY5je6V40Zzn5LxAjY7GeQ2cM=
-----END CERTIFICATE-----