Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0FBF6905B6311F0AE37FEBEDAE4EC9C.roa
File:                     D0FBF6905B6311F0AE37FEBEDAE4EC9C.roa (raw, json)
Hash identifier:          4vQujAyti4DTX9Hr4VilBmqm39KG7vXAMJ3fgRC3f1E=
Subject key identifier:   AA:CF:DB:6D:51:74:C9:96:80:82:56:4E:50:24:FB:5C:07:28:04:33
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       016340
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0FBF6905B6311F0AE37FEBEDAE4EC9C.roa
Signing time:             Mon 07 Jul 2025 18:54:32 +0000
ROA not before:           Mon 07 Jul 2025 18:54:27 +0000
ROA not after:            Sun 24 Aug 2025 18:54:27 +0000
asID:                     8796
IP address blocks:        156.239.24.0/21 maxlen: 24
                          156.239.32.0/20 maxlen: 24
                          156.239.48.0/22 maxlen: 24
                          156.239.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Jul 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90944 (0x16340)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul  7 18:54:27 2025 GMT
            Not After : Aug 24 18:54:27 2025 GMT
        Subject: CN=686c17e8-19d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e1:5c:c6:c4:1d:61:25:a4:ef:ee:e4:b4:96:
                    61:ac:a0:b0:b4:9b:50:5d:46:4e:0c:01:37:f6:98:
                    54:43:67:9a:27:93:e3:e0:1d:f3:6c:ba:c1:fd:ee:
                    67:7a:70:26:9c:47:e4:ac:c5:1e:40:12:0f:0d:86:
                    9f:0c:f8:b3:63:07:f2:28:48:47:12:40:a3:c6:a0:
                    dc:29:e5:3b:39:91:6a:0a:39:ee:52:5c:08:fe:c6:
                    b9:91:97:ca:a2:a3:f0:d1:e8:e5:d8:ee:d8:cb:9c:
                    ae:ff:6f:37:fb:f0:89:0f:0d:66:d6:c0:35:21:80:
                    67:62:0f:1d:f2:2d:87:29:23:0f:6a:e0:fa:c1:22:
                    60:23:ec:2a:ca:3b:1d:1b:6c:8c:4f:9e:87:ba:71:
                    93:06:6e:ae:23:fc:89:af:de:95:0c:44:e0:63:1a:
                    aa:9d:b8:4f:dd:5f:f0:65:64:1a:65:00:0e:0f:7d:
                    96:dc:1a:19:ec:84:eb:5a:cb:76:3c:ca:ff:96:9d:
                    9b:47:f3:cc:bb:fd:2e:c2:6f:38:ee:b0:63:cd:95:
                    a3:7f:96:b9:71:4a:66:9e:77:df:c8:a5:0e:e5:04:
                    de:4e:08:a4:94:bb:0f:77:53:c8:8a:37:1e:77:86:
                    c4:0e:24:b5:58:cc:0d:db:51:6c:6e:12:24:1f:34:
                    5e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CF:DB:6D:51:74:C9:96:80:82:56:4E:50:24:FB:5C:07:28:04:33
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0FBF6905B6311F0AE37FEBEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.24.0-156.239.53.255

    Signature Algorithm: sha256WithRSAEncryption
         29:06:4d:c5:27:3c:a0:b2:67:39:22:70:71:8c:4d:09:f1:d3:
         0c:dc:07:fb:d7:8b:cd:90:c2:f3:0c:d2:c7:01:63:0e:fd:3e:
         96:b9:53:76:f7:ce:34:c6:aa:7e:e4:2f:29:7a:ca:63:83:91:
         46:41:df:84:84:83:aa:5f:cf:ac:34:a7:6f:98:02:57:0d:8a:
         97:34:fd:70:4b:77:59:83:93:5e:55:24:f2:17:79:ea:09:55:
         4b:c9:6a:18:f6:9a:b7:08:01:90:62:0e:67:70:c4:82:37:9b:
         e7:42:04:70:2f:db:64:79:29:dd:b1:04:dd:4d:4e:82:1a:0b:
         15:9d:a7:34:06:c8:b1:88:88:79:aa:d9:97:a8:b6:60:9c:da:
         6f:6b:60:63:d2:03:5b:56:d0:d8:3c:6b:7e:65:5a:7f:13:4c:
         42:76:ae:79:a9:17:af:b2:25:9d:1a:fb:2c:47:06:8f:31:af:
         65:25:7b:27:2b:ec:e7:41:36:80:d4:de:1b:bf:b0:9c:da:a8:
         7d:d6:3d:66:84:ed:93:09:17:60:1f:f0:3b:ea:80:d2:aa:e3:
         ef:61:e4:99:2b:04:df:fa:d0:56:40:89:d1:9b:58:d2:32:de:
         df:fb:32:43:cd:70:5c:2a:d1:80:a6:b5:9c:b3:60:ff:e0:11:
         3a:e8:21:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 22:28:16 2025 by rpki-client