Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0012785A552311F1B665A115CF1D38B0.roa
File:                     0012785A552311F1B665A115CF1D38B0.roa (raw, json)
Hash identifier:          0DUyRVP0M1qnstmV09Dbcl4ufKVCvAlp5Uv+crPDrq4=
Subject key identifier:   18:39:32:53:29:BA:A4:13:30:7F:5E:CE:5D:29:D9:A6:51:EA:EB:22
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B72F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0012785A552311F1B665A115CF1D38B0.roa
Signing time:             Thu 21 May 2026 14:40:24 +0000
ROA not before:           Thu 21 May 2026 14:40:19 +0000
ROA not after:            Tue 16 Jun 2026 14:40:19 +0000
asID:                     134365
IP address blocks:        45.197.144.0/21 maxlen: 24
                          45.197.144.0/24 maxlen: 24
                          45.197.145.0/24 maxlen: 24
                          45.197.146.0/24 maxlen: 24
                          45.197.147.0/24 maxlen: 24
                          45.197.148.0/24 maxlen: 24
                          45.197.149.0/24 maxlen: 24
                          45.197.150.0/24 maxlen: 24
                          45.197.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 04 Jun 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112431 (0x1b72f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 21 14:40:19 2026 GMT
            Not After : Jun 16 14:40:19 2026 GMT
        Subject: CN=6a0f1958-e3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:81:72:46:69:f4:51:63:3b:f3:6e:af:45:10:
                    f7:20:74:79:9a:fa:a2:d5:99:58:c5:97:21:fe:d9:
                    0f:ab:a7:c6:65:18:58:da:ed:dd:b9:7a:69:06:d1:
                    c8:e4:91:1a:6a:90:48:19:16:40:3d:44:ad:c3:56:
                    cb:0a:d9:98:e1:ba:33:b7:3d:cb:33:d9:cb:9c:49:
                    6a:03:f4:82:40:26:c0:f1:c5:37:c0:ac:77:aa:b7:
                    ee:b4:b3:49:5b:96:7d:e0:ca:90:f9:50:17:6f:3c:
                    05:37:df:64:6f:06:70:67:59:46:e4:2b:2e:57:52:
                    e5:72:41:2d:3f:95:3a:94:e6:fc:ca:85:86:4f:b8:
                    96:14:46:fa:4e:8f:b7:da:d4:0e:9a:70:56:01:d3:
                    42:fb:8a:0c:e0:cb:b9:be:f1:e8:4a:94:77:9c:61:
                    f8:e6:18:5d:4f:29:e8:a5:a8:28:7e:e7:49:7e:cc:
                    74:6f:2b:32:d1:a2:c3:3b:cf:e9:49:fe:d8:0f:d9:
                    6a:3f:d8:6d:02:fe:8f:b3:a9:56:54:23:80:56:92:
                    6e:b1:12:f9:67:14:dd:49:9e:aa:84:e9:c7:0e:44:
                    d0:96:50:7d:e5:42:93:f4:65:04:f7:b9:0c:f8:97:
                    db:d4:75:02:ce:ac:4f:68:c8:3e:61:e7:be:ac:ea:
                    7c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:39:32:53:29:BA:A4:13:30:7F:5E:CE:5D:29:D9:A6:51:EA:EB:22
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0012785A552311F1B665A115CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:25:66:de:f8:bd:d1:37:f2:73:bb:63:35:f9:81:2a:59:a4:
         d7:3b:5a:4e:2b:d8:fe:ba:e4:62:5a:66:d5:dd:43:df:4b:e8:
         78:03:f4:fc:b7:ce:c0:e9:03:85:d1:29:fd:f5:c1:cf:50:18:
         22:96:9d:a6:87:0d:9e:df:39:7d:a6:d8:07:bd:83:5b:da:e7:
         11:7b:ee:73:37:df:76:75:c0:c3:83:c9:80:ef:b6:7e:1d:73:
         ea:7b:df:a9:cb:aa:af:65:17:33:37:92:96:97:0e:ad:1c:89:
         8a:29:3d:59:7b:5b:3c:ea:ab:49:8f:bd:2f:5b:bd:3c:00:bc:
         3a:48:02:a1:8d:e8:c6:75:71:b3:87:70:05:36:52:9e:b2:4c:
         47:fe:d0:92:2a:ae:28:c7:98:26:be:56:4d:cf:be:e5:78:ae:
         b4:20:81:be:54:f4:d3:3d:2d:f1:c7:3c:8b:fb:36:e4:2d:b4:
         94:a8:4e:64:05:0a:f8:1a:48:60:35:3d:58:8e:e6:0d:a2:8b:
         93:19:13:55:d8:a8:7f:fe:f8:06:eb:c4:78:38:a4:37:92:cb:
         87:7b:65:95:be:63:91:ce:ee:e8:3e:2c:a9:30:7c:41:9e:37:
         86:eb:99:98:1e:b8:1b:20:e4:82:c5:f4:47:61:fc:4b:db:ec:
         f1:4d:c1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:17 2026 by rpki-client