Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E0DBEC6835211F0AB7475E9DAE4EC9C.roa
File:                     1E0DBEC6835211F0AB7475E9DAE4EC9C.roa (raw, json)
Hash identifier:          GqIpZu53GhoPygbIdOAq3rNOf7KKfusxGbuPC3hxWzY=
Subject key identifier:   F3:87:A1:E1:37:68:3A:50:68:0B:9E:56:69:08:DD:C3:60:8C:DD:B7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0171C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E0DBEC6835211F0AB7475E9DAE4EC9C.roa
Signing time:             Wed 27 Aug 2025 14:28:37 +0000
ROA not before:           Wed 27 Aug 2025 14:28:31 +0000
ROA not after:            Fri 10 Oct 2025 14:28:31 +0000
asID:                     63139
IP address blocks:        45.197.88.0/24 maxlen: 24
                          45.197.89.0/24 maxlen: 24
                          45.197.90.0/24 maxlen: 24
                          45.197.91.0/24 maxlen: 24
                          45.197.92.0/24 maxlen: 24
                          45.197.93.0/24 maxlen: 24
                          45.197.94.0/24 maxlen: 24
                          45.197.95.0/24 maxlen: 24
                          45.197.96.0/24 maxlen: 24
                          45.197.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Sep 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94665 (0x171c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 27 14:28:31 2025 GMT
            Not After : Oct 10 14:28:31 2025 GMT
        Subject: CN=68af1615-d1e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:46:07:a3:1d:05:f7:52:9b:21:94:90:f6:c8:
                    8c:51:b3:d2:ac:dd:35:87:ba:79:30:a4:29:b1:81:
                    8f:cb:78:cb:ee:a3:40:4f:12:4f:c9:d9:5f:84:fc:
                    81:50:d1:7f:92:4b:d3:c4:4c:6f:73:56:74:a3:83:
                    09:f0:31:96:67:6f:16:0c:9e:2d:55:91:8a:fb:c9:
                    54:fc:25:0e:ac:f5:c7:27:09:01:87:d8:ee:d3:3c:
                    e5:c0:e3:5a:b6:9b:88:79:0b:59:dc:87:07:40:0a:
                    ee:20:81:8c:b3:6c:e7:0a:ae:02:ae:1f:31:08:09:
                    0f:7a:38:82:3f:bf:1b:6e:ce:66:5a:e7:67:b6:41:
                    73:6d:56:86:24:1e:33:b4:17:6b:27:a1:43:de:e5:
                    df:5a:59:7b:f9:06:a4:40:cc:71:05:3d:ea:a0:30:
                    ae:76:d4:6c:58:42:50:15:8a:ce:a4:d7:c1:3a:09:
                    0f:da:ec:c6:76:1a:ad:05:66:90:57:bd:97:ac:d4:
                    5e:f5:f3:c9:1e:a5:8a:5b:71:a0:6c:a0:12:95:1c:
                    c6:20:23:5e:f8:74:9d:a3:f7:d5:d6:83:e1:cb:a5:
                    9a:2f:1d:be:8f:b6:fe:3a:fe:4b:1a:f6:4c:df:e1:
                    31:47:83:35:2b:49:84:85:55:5f:3b:f8:88:db:77:
                    b0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:87:A1:E1:37:68:3A:50:68:0B:9E:56:69:08:DD:C3:60:8C:DD:B7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1E0DBEC6835211F0AB7475E9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.88.0-45.197.97.255

    Signature Algorithm: sha256WithRSAEncryption
         67:8c:10:c8:fe:3b:51:8e:90:dd:37:89:5b:a3:e8:4c:4e:55:
         23:eb:f8:77:fb:5c:7b:ac:41:37:08:25:88:7f:05:0f:cc:3d:
         be:b2:15:b0:a8:38:0e:f6:e6:e1:5f:37:00:a4:aa:68:54:a1:
         11:ca:27:e9:64:86:7f:87:39:af:fe:9d:53:4f:80:a0:47:88:
         29:e2:47:e8:ee:f2:41:7b:ee:78:50:4d:46:d5:43:76:1c:44:
         69:03:3c:72:7f:16:f1:dc:9e:5b:82:c5:06:f8:c3:a0:9e:ea:
         0a:b3:0a:f9:4e:1d:e7:5c:e1:fa:da:c5:f3:a8:fb:02:5d:1c:
         c8:84:94:34:70:4d:94:1b:77:a2:85:90:e3:80:05:28:be:fe:
         d5:45:3e:9f:3b:f9:be:e8:7e:a1:51:ec:a5:44:2a:d0:1d:f0:
         0b:9c:f2:ca:40:57:9b:35:01:7f:01:16:64:aa:bb:6c:21:5b:
         6c:c7:4c:bd:5c:3a:5d:88:81:ba:d9:10:77:33:1d:f3:a0:45:
         91:2c:1f:f4:38:a1:96:18:6b:48:7a:0d:02:f4:75:a2:b2:b7:
         b9:34:3f:85:08:cb:5e:02:8e:93:70:4c:23:f3:97:19:99:3c:
         c5:5e:1b:3c:d7:30:ff:70:a3:4a:a8:98:53:4a:45:e3:ba:7e:
         3c:e3:36:71
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAXHJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwODI3MTQyODMxWhcNMjUxMDEwMTQyODMxWjAYMRYw
FAYDVQQDEw02OGFmMTYxNS1kMWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5EYHox0F91KbIZSQ9siMUbPSrN01h7p5MKQpsYGPy3jL7qNATxJPydlf
hPyBUNF/kkvTxExvc1Z0o4MJ8DGWZ28WDJ4tVZGK+8lU/CUOrPXHJwkBh9ju0zzl
wONatpuIeQtZ3IcHQAruIIGMs2znCq4Crh8xCAkPejiCP78bbs5mWudntkFzbVaG
JB4ztBdrJ6FD3uXfWll7+QakQMxxBT3qoDCudtRsWEJQFYrOpNfBOgkP2uzGdhqt
BWaQV72XrNRe9fPJHqWKW3GgbKASlRzGICNe+HSdo/fV1oPhy6WaLx2+j7b+Ov5L
GvZM3+ExR4M1K0mEhVVfO/iI23ewnwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPOH
oeE3aDpQaAueVmkI3cNgjN23MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xRTBEQkVDNjgzNTIxMUYwQUI3NDc1RTlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAMtxVgDBAEtxWAwDQYJKoZI
hvcNAQELBQADggEBAGeMEMj+O1GOkN03iVuj6ExOVSPr+Hf7XHusQTcIJYh/BQ/M
Pb6yFbCoOA725uFfNwCkqmhUoRHKJ+lkhn+HOa/+nVNPgKBHiCniR+ju8kF77nhQ
TUbVQ3YcRGkDPHJ/FvHcnluCxQb4w6Ce6gqzCvlOHedc4fraxfOo+wJdHMiElDRw
TZQbd6KFkOOABSi+/tVFPp87+b7ofqFR7KVEKtAd8Auc8spAV5s1AX8BFmSqu2wh
W2zHTL1cOl2IgbrZEHczHfOgRZEsH/Q4oZYYa0h6DQL0daKyt7k0P4UIy14CjpNw
TCPzlxmZPMVeGzzXMP9wo0qomFNKReO6fjzjNnE=
-----END CERTIFICATE-----
Generated at Wed Sep 3 20:14:08 2025 by rpki-client