Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12610FC0619611F0A73E2FECDAE4EC9C.roa
File:                     12610FC0619611F0A73E2FECDAE4EC9C.roa (raw, json)
Hash identifier:          5Ye/rezMX1bkmTEgySAtXsTLM8CVSDbFGE9Ha1pExSs=
Subject key identifier:   EB:15:AD:9A:82:F9:D9:C0:A9:B0:5E:15:AC:58:76:2F:A9:F0:37:4C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       016567
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12610FC0619611F0A73E2FECDAE4EC9C.roa
Signing time:             Tue 15 Jul 2025 16:09:23 +0000
ROA not before:           Tue 15 Jul 2025 16:09:18 +0000
ROA not after:            Mon 21 Jul 2025 16:09:18 +0000
asID:                     269984
IP address blocks:        156.255.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 21 Jul 2025 16:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91495 (0x16567)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 15 16:09:18 2025 GMT
            Not After : Jul 21 16:09:18 2025 GMT
        Subject: CN=68767d33-74c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9e:62:37:9f:70:60:c6:bb:b3:5d:2e:9a:44:
                    98:32:8e:a4:17:88:03:2e:80:02:3f:64:a8:c8:70:
                    9c:f3:72:63:31:1c:8b:a6:ee:c8:a2:7e:98:47:f6:
                    75:ab:48:74:dc:2c:75:53:f5:30:b2:52:f1:5e:9b:
                    d8:0f:a0:8f:39:4d:be:b9:a9:bf:f2:4c:05:ae:82:
                    9c:14:4c:c6:f8:2d:a7:52:6c:04:00:dc:90:69:32:
                    95:fb:24:de:81:79:57:c2:2c:28:72:bf:96:f6:d4:
                    f2:06:8b:93:5a:26:b9:e8:82:b0:8f:80:11:e0:65:
                    6b:5f:76:ab:73:5a:3d:d8:e4:37:ca:14:77:2e:fc:
                    ad:28:b6:00:3c:29:2c:6a:50:73:8c:3f:59:0e:09:
                    9d:a4:bf:13:e1:c9:35:ef:f3:bc:39:6e:d8:c7:2e:
                    20:7c:33:8c:35:2e:88:c8:96:8f:dc:a3:da:0e:19:
                    ee:b0:fb:66:eb:ea:f4:82:d3:d7:39:ff:4f:e5:87:
                    a7:74:3a:7d:c1:f6:7d:31:db:7f:77:39:7a:64:50:
                    e1:4a:d9:92:4f:8e:24:9c:c5:d6:96:68:e3:c4:87:
                    bc:a2:ac:ca:b8:46:c8:1a:8b:e5:30:a0:30:47:2e:
                    47:51:4e:a9:b4:00:95:98:7a:8d:69:8b:5e:2b:2c:
                    e1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:15:AD:9A:82:F9:D9:C0:A9:B0:5E:15:AC:58:76:2F:A9:F0:37:4C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12610FC0619611F0A73E2FECDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.255.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         99:87:1e:1e:7f:fa:3f:eb:83:2f:eb:df:41:6b:15:20:f9:95:
         22:82:5d:b5:81:7e:bc:71:ed:52:21:68:15:8d:a8:34:4f:dd:
         6a:97:3a:20:6e:f5:2d:29:b3:7f:47:4a:51:8a:4b:fa:3e:22:
         45:2d:e2:2c:05:ea:a9:de:27:2f:90:5d:ac:42:21:15:84:30:
         e1:6a:69:e8:9e:21:b7:6f:d3:29:35:ff:7d:05:59:ec:50:99:
         ab:51:67:24:00:85:3b:ea:4b:c9:09:2f:81:ab:46:c0:e6:e6:
         c5:39:cc:84:6b:13:e8:79:45:0b:71:ce:da:b9:4b:38:96:5c:
         f9:7c:1f:58:5b:e0:ba:63:82:71:55:ef:09:76:3a:e7:94:15:
         62:b3:34:71:f7:d9:c7:16:d6:79:30:95:ee:47:ef:2b:00:b5:
         a4:21:45:fb:7e:29:57:3c:21:ac:f5:ff:15:52:97:48:c6:ba:
         ee:47:1b:b6:d7:5f:14:64:3a:5c:b3:7b:b1:ae:2c:45:f7:25:
         88:c4:97:a6:ca:67:7a:13:5d:70:fc:b0:19:10:58:2e:25:ac:
         3f:91:f7:f2:c6:35:81:ee:41:8b:42:78:89:dd:53:79:c9:35:
         c3:9a:15:a1:95:69:c4:4c:72:4b:ed:fc:97:7f:ac:67:e2:76:
         f5:45:f5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:28:19 2025 by rpki-client