Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AE118C869A311F1988F38B9CE1D38B0.roa
File:                     1AE118C869A311F1988F38B9CE1D38B0.roa (raw, json)
Hash identifier:          /ofaC5PZmPPPt/N2O+G/lkqpXmVWzV1AZUl1flRDSEk=
Subject key identifier:   60:A6:71:04:9E:B9:26:40:DD:7A:30:BC:3A:98:AF:E0:80:8D:50:F9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BE41
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AE118C869A311F1988F38B9CE1D38B0.roa
Signing time:             Tue 16 Jun 2026 16:47:48 +0000
ROA not before:           Tue 16 Jun 2026 16:47:43 +0000
ROA not after:            Sat 05 Sep 2026 16:47:43 +0000
asID:                     149440
IP address blocks:        45.194.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114241 (0x1be41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 16 16:47:43 2026 GMT
            Not After : Sep  5 16:47:43 2026 GMT
        Subject: CN=6a317e34-71c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ca:c5:65:57:8f:d4:7a:be:4d:0b:48:12:61:
                    4f:ad:19:cb:55:74:87:18:95:59:79:d0:9a:98:ef:
                    84:e9:a8:f4:7e:78:13:ec:69:c7:37:a8:63:6c:87:
                    97:c2:3d:4f:da:47:16:57:c0:ff:da:53:81:fb:6e:
                    62:53:b4:8f:18:3e:d5:e5:70:6c:8d:44:19:66:88:
                    26:a4:d6:2a:bd:43:2e:62:74:b0:78:2c:c6:cb:ec:
                    df:ce:73:46:cb:f1:c3:26:00:fb:b7:55:6c:e5:78:
                    f7:d9:8a:bd:2c:de:00:76:44:88:52:fe:78:8a:79:
                    f1:21:44:51:30:ad:04:9b:2e:a5:f4:42:f5:c0:20:
                    9f:cf:bf:4c:74:91:e9:40:09:32:b5:7a:e2:fa:ff:
                    5a:1c:a2:80:08:cb:b0:5c:e7:29:35:ad:26:e5:63:
                    79:cd:bc:f1:75:91:a4:45:04:cd:81:d3:1d:46:52:
                    d0:4c:7d:15:6f:7d:3c:22:35:a8:43:b6:ed:90:bf:
                    3a:74:53:a9:cd:4c:04:7b:55:2a:06:06:c8:76:79:
                    43:c3:a4:cf:30:30:20:fe:cb:4c:12:2d:e1:63:35:
                    bc:f3:5f:33:85:4a:ef:d2:bd:20:b3:b0:da:ba:41:
                    e8:69:58:10:0d:d7:46:af:47:48:a9:d5:93:fd:96:
                    29:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A6:71:04:9E:B9:26:40:DD:7A:30:BC:3A:98:AF:E0:80:8D:50:F9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AE118C869A311F1988F38B9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:1e:1a:a2:b5:48:1e:4e:29:53:d0:fa:14:97:03:23:ec:3e:
         8a:30:ac:c2:05:04:80:d6:b3:a8:8b:d2:00:7a:85:13:6a:dd:
         83:55:09:ca:12:c9:8c:50:bd:34:71:2d:87:b0:da:18:ee:da:
         c7:af:6d:56:53:a4:c9:74:67:3e:c6:21:10:07:ec:a1:63:48:
         23:ab:ce:fe:36:6e:d4:94:8e:23:0e:34:60:33:9d:8f:8e:d4:
         b1:86:6a:2b:12:5b:1e:99:4e:40:32:c4:05:74:43:ab:e5:78:
         ca:96:61:44:70:47:bc:89:df:b6:be:be:19:88:74:53:f9:06:
         fd:a3:68:fe:1d:fe:98:03:38:68:ab:fe:1a:5a:82:f2:e5:5a:
         03:a3:4f:89:62:f4:23:dd:b2:19:50:c7:53:37:a2:17:39:4b:
         37:aa:05:84:6e:c3:4d:a3:7d:90:fa:50:3c:3c:48:f4:33:2d:
         91:ab:91:af:9e:ae:83:67:1c:bc:81:41:49:97:37:4c:19:a1:
         21:e5:e8:2c:ff:e9:19:90:13:25:8b:2c:63:26:f1:04:fe:bb:
         e2:55:1c:96:f2:31:a1:5a:39:d7:d1:1f:29:20:25:5d:6c:f6:
         0a:5c:ac:6d:e9:0b:ab:c8:0f:f6:2d:50:f7:4c:b7:11:de:72:
         d7:25:74:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:17 2026 by rpki-client