Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1494EDAC695611F1962143EDCE1D38B0.roa
File:                     1494EDAC695611F1962143EDCE1D38B0.roa (raw, json)
Hash identifier:          pYg9bHWwz9a117hoY0+27n7j8YYzTnxuqdm9Dbi1j3E=
Subject key identifier:   6B:E9:52:AE:71:30:A1:21:C9:5D:42:63:3A:12:10:6E:C0:5C:B4:A4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BDE6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1494EDAC695611F1962143EDCE1D38B0.roa
Signing time:             Tue 16 Jun 2026 07:36:26 +0000
ROA not before:           Tue 16 Jun 2026 07:36:21 +0000
ROA not after:            Wed 22 Jul 2026 07:36:21 +0000
asID:                     40779
IP address blocks:        45.205.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114150 (0x1bde6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 16 07:36:21 2026 GMT
            Not After : Jul 22 07:36:21 2026 GMT
        Subject: CN=6a30fcfa-da69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bb:b4:3c:41:44:74:bb:d3:5d:63:2e:91:06:
                    43:8c:81:36:1c:d0:67:d2:c3:b5:fe:3d:c1:bb:a1:
                    f5:5d:23:61:d8:2b:89:28:f3:8a:c3:ac:80:90:2f:
                    86:55:36:b2:45:7e:a2:bd:0d:9a:a8:fa:2b:2f:05:
                    91:44:4c:cb:32:76:f4:9f:9a:ae:61:32:08:59:a7:
                    b7:8c:28:34:c9:87:f1:f3:5a:32:fe:77:b2:43:3c:
                    c7:49:9f:15:8b:e0:ac:7b:d5:e9:d8:60:6c:6d:34:
                    4c:f2:ff:0c:0b:3b:77:64:30:73:f4:d2:98:b5:a7:
                    bf:53:ff:d6:05:ef:66:d9:2b:a0:92:b3:ad:f4:f9:
                    e8:1e:ac:58:c8:33:1a:c2:89:30:14:c8:3c:2a:5d:
                    2d:0c:e2:7f:ca:b4:61:fa:28:0e:2b:38:4b:dd:1c:
                    30:a0:26:e1:20:31:63:a5:d8:20:43:7f:32:d2:f6:
                    ec:a1:46:3f:03:01:1b:85:49:40:39:0d:df:07:6c:
                    ac:dd:83:aa:55:b7:a3:08:e5:67:6d:d3:70:95:2b:
                    f6:21:ee:9d:54:a2:6d:f7:8e:08:08:01:12:dc:de:
                    1b:b4:8c:24:16:87:ba:31:86:04:c1:25:fc:d7:61:
                    45:3d:a3:17:b2:fa:1b:f6:bb:f9:e5:57:32:83:9f:
                    00:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E9:52:AE:71:30:A1:21:C9:5D:42:63:3A:12:10:6E:C0:5C:B4:A4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1494EDAC695611F1962143EDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:1b:81:3d:3f:4e:c6:51:51:e1:82:6e:75:da:16:e7:88:d8:
         04:9f:4a:e1:c4:eb:f2:d2:cc:c1:23:fd:1c:fd:12:9c:40:0e:
         c9:5a:86:60:c3:dc:a9:25:a2:c8:81:32:9d:55:13:dc:32:80:
         11:a3:5e:0a:87:77:93:36:f8:56:a7:53:fc:a3:fc:92:48:3f:
         1e:09:5d:4c:c8:39:f3:bc:cb:c4:1d:f8:93:41:76:99:df:ed:
         d5:d1:03:8e:4d:a5:b3:37:e6:ff:15:94:47:4f:38:2e:f0:3a:
         b8:51:e9:a6:c5:9e:bd:7c:09:14:a5:0a:ff:ba:82:02:70:a9:
         bc:6a:f5:cc:fc:63:1e:27:41:4a:74:b2:6f:db:1b:09:a4:bc:
         5e:3e:34:e3:6d:dd:03:e7:ae:74:35:67:a0:4b:5a:c2:8a:dc:
         01:28:dc:ff:a1:bf:ca:c7:7d:5d:5a:2f:c9:42:19:52:aa:c4:
         06:9c:a0:52:d1:96:fa:49:1a:1f:d6:1c:77:38:e0:b1:a5:1a:
         41:00:53:f7:c1:25:dd:fd:58:68:a6:01:39:02:74:01:4d:bd:
         ee:81:8d:a9:2a:4c:c0:7f:0f:95:74:d7:71:6a:97:f4:82:11:
         d0:37:7f:bf:f0:1f:05:75:db:9a:2e:28:0a:74:00:13:7c:1b:
         fa:4c:fe:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:39 2026 by rpki-client