Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/508414E2810611F1BB5D4CB8CE1D38B0.roa
File:                     508414E2810611F1BB5D4CB8CE1D38B0.roa (raw, json)
Hash identifier:          2dOios+FS/ESJZ/0XnG0nby5f8NqQOHy/P8++EHTPT8=
Subject key identifier:   D4:05:EF:CD:0F:E2:9A:D1:38:94:A2:82:08:FE:04:50:40:47:4C:4D
Certificate issuer:       /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial:       0EB7
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/508414E2810611F1BB5D4CB8CE1D38B0.roa
Signing time:             Thu 16 Jul 2026 11:05:55 +0000
ROA not before:           Thu 16 Jul 2026 11:05:51 +0000
ROA not after:            Wed 16 Jul 2036 11:05:51 +0000
asID:                     36916
IP address blocks:        192.142.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
                          rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3767 (0xeb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAR, serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
        Validity
            Not Before: Jul 16 11:05:51 2026 GMT
            Not After : Jul 16 11:05:51 2036 GMT
        Subject: CN=6a58bb13-6202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:78:55:24:ce:db:96:c0:5a:e5:cf:54:63:3c:
                    67:60:de:b4:25:06:34:8e:45:31:89:88:eb:ff:0c:
                    97:c2:06:56:a6:a2:32:e2:22:8a:b1:1e:92:d4:db:
                    39:b5:3a:3b:4b:63:07:b1:8b:a1:df:4d:e3:49:d0:
                    c4:bf:cf:07:78:44:0a:71:25:79:94:04:a6:14:ae:
                    6b:71:af:31:db:a1:7f:4e:dd:c0:31:72:96:63:79:
                    01:e7:86:ea:17:4c:c3:95:03:6f:2e:6b:09:4f:c1:
                    b5:70:20:eb:5c:46:4f:bb:6a:84:a6:82:68:33:05:
                    49:c4:8e:5c:08:5a:0e:07:93:fa:9c:0a:d2:a5:3f:
                    1b:11:9b:39:b6:f3:89:e2:a1:bf:db:60:29:ab:ee:
                    ff:38:0b:5f:db:55:e1:6c:d1:12:cb:9c:ba:4b:3c:
                    5c:c1:c5:d0:27:8b:7e:23:76:d5:cf:1c:74:b1:2e:
                    30:c1:d9:66:5a:8d:a5:36:5f:8c:ad:04:36:30:6e:
                    07:9e:f9:be:c9:6f:26:03:5d:d4:25:5a:ce:dc:19:
                    d4:d9:4d:e6:d5:f2:51:94:9a:14:11:b7:1f:79:e5:
                    47:b4:9f:48:a5:14:f3:26:86:49:51:34:de:b7:98:
                    91:99:9f:df:81:0e:06:53:33:37:69:81:28:d2:a2:
                    36:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:05:EF:CD:0F:E2:9A:D1:38:94:A2:82:08:FE:04:50:40:47:4C:4D
            X509v3 Authority Key Identifier:
                keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/508414E2810611F1BB5D4CB8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.142.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1f:87:3f:76:0e:70:07:f2:c9:de:d6:4e:09:89:d9:d0:8b:3b:
         bf:10:3b:a9:f7:30:e5:e7:03:47:cf:67:34:82:ee:00:06:e7:
         62:27:8f:0f:2f:d9:1d:6b:7e:be:d1:5f:3c:21:92:7b:9a:5f:
         36:f1:7c:ac:8d:d9:6d:db:22:3f:c3:e3:58:46:18:fc:b5:5d:
         a7:32:f1:9f:bc:92:70:5a:59:89:90:22:96:ec:4f:d3:0d:be:
         1e:3d:92:05:51:e2:14:ec:d5:92:ca:27:80:d7:1e:6c:0b:43:
         8c:d5:6c:81:67:af:6f:8f:fa:6d:a5:9f:e4:72:d8:39:eb:94:
         cb:bd:f9:3c:aa:44:9d:e7:9f:47:7e:6c:64:b4:35:29:47:63:
         88:44:2d:90:eb:5d:06:cc:d9:09:04:cb:9c:e0:de:39:66:c1:
         f7:78:e8:59:dc:2c:36:71:cf:84:11:1e:3a:31:41:c5:c2:00:
         28:62:bf:5b:a5:50:66:6b:d4:10:92:51:24:77:4e:d1:98:99:
         8d:f1:95:91:82:b3:f2:14:cd:43:56:31:4d:fe:12:fe:45:c3:
         23:ed:10:c4:cc:80:b3:67:2b:02:34:6d:21:5d:12:8a:0c:33:
         94:21:6f:2d:01:21:7d:77:75:83:8a:34:2a:6f:73:a2:5f:7a:
         af:1c:ec:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 04:36:50 2026 by rpki-client