Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30ED46E2810811F1B6C51EC4CE1D38B0.roa
File:                     30ED46E2810811F1B6C51EC4CE1D38B0.roa (raw, json)
Hash identifier:          4PXOX3golT60hDBO4XiflpY6ogYfgcvIJKN5gVFDp2s=
Subject key identifier:   0B:05:59:12:8F:4D:D6:2F:AF:04:8D:BB:C1:7D:E1:B4:AD:43:03:FC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C570
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30ED46E2810811F1B6C51EC4CE1D38B0.roa
Signing time:             Thu 16 Jul 2026 11:19:21 +0000
ROA not before:           Thu 16 Jul 2026 11:19:17 +0000
ROA not after:            Sun 06 Sep 2026 11:19:17 +0000
asID:                     274320
IP address blocks:        45.194.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116080 (0x1c570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 16 11:19:17 2026 GMT
            Not After : Sep  6 11:19:17 2026 GMT
        Subject: CN=6a58be39-be34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:47:04:65:09:7b:40:47:ac:fe:33:de:84:74:
                    99:4f:32:2c:06:ec:34:c7:6d:2e:e2:fb:2c:b0:a6:
                    54:c4:0a:60:5e:0c:22:d5:66:b0:5b:19:bb:a3:32:
                    cb:ad:43:ed:31:09:49:ae:bf:a9:f4:94:d2:24:26:
                    b3:4f:fc:0d:66:64:64:46:8f:61:83:cd:b6:2c:3e:
                    f3:79:c8:29:b9:56:05:bf:ce:91:b3:73:a1:11:06:
                    41:75:dc:64:6e:8e:ea:04:d8:92:8c:b0:b9:b4:d7:
                    79:bd:43:51:6a:48:08:f1:d1:99:ca:5e:83:8c:47:
                    0d:31:64:1a:8e:75:83:e1:fe:39:a5:61:d4:56:1c:
                    11:1d:cb:6e:1a:46:fe:4e:3e:a9:fb:8c:15:24:c2:
                    5d:10:ad:95:2e:4b:f0:28:17:c9:90:d1:10:7e:2e:
                    5e:f6:fd:53:a1:9b:f7:11:82:ba:2d:4f:22:db:66:
                    64:08:aa:81:86:ea:39:9d:3f:3a:f6:7e:f8:9b:f8:
                    55:ee:29:09:29:c4:6b:15:6c:9d:09:13:d1:b7:da:
                    85:6e:c0:d2:70:29:45:14:d2:d7:9e:84:ab:71:9e:
                    eb:cd:d5:fa:de:c9:50:f3:3c:d7:e7:18:db:bf:25:
                    ce:bb:74:88:a0:8c:a1:ef:a0:eb:ea:a7:b3:cc:31:
                    1d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:05:59:12:8F:4D:D6:2F:AF:04:8D:BB:C1:7D:E1:B4:AD:43:03:FC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/30ED46E2810811F1B6C51EC4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:25:c4:24:31:8d:d1:71:86:74:5b:5f:e9:93:45:59:8b:60:
         54:0f:fb:55:be:60:32:52:35:5c:b1:0d:6a:a4:ee:60:58:7e:
         7d:e8:d2:fe:d1:24:f8:d9:c3:e2:2b:ec:f0:dd:ec:25:98:46:
         53:17:dd:b7:1e:2e:49:c2:b8:8c:c9:cd:ff:75:a2:b5:11:69:
         c2:aa:ad:16:c4:2f:f1:57:7f:ec:d3:af:bf:fa:e7:26:f4:76:
         ba:cc:da:82:71:b6:f2:46:63:87:88:79:9d:9a:63:fd:01:68:
         01:3d:1d:f5:a8:34:a9:79:66:4b:0a:f8:a4:44:d4:aa:29:05:
         8f:9b:f6:fb:e9:c2:d1:2a:d5:ae:22:c4:89:42:00:6a:f7:2c:
         a9:65:10:86:7b:ab:45:be:a7:37:01:26:fe:3b:61:81:29:ba:
         b3:8e:ac:0c:d5:b8:40:c3:b1:86:20:f8:5e:a2:1c:4e:c3:50:
         98:19:be:4c:d8:59:13:4b:2b:46:b2:f3:a6:37:0b:fb:a9:b6:
         c1:20:9f:e4:24:ad:46:96:0b:7e:5a:2f:7f:35:5e:a8:8e:59:
         5e:66:c0:1d:a3:e6:e8:92:6f:e4:24:8c:53:f3:42:4d:3e:b4:
         f4:71:bc:bb:52:73:d7:ad:17:1c:25:5b:d6:41:3d:f3:b5:b5:
         89:a0:2c:1a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcVwMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzE2MTExOTE3WhcNMjYwOTA2MTExOTE3WjAYMRYw
FAYDVQQDEw02YTU4YmUzOS1iZTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtEcEZQl7QEes/jPehHSZTzIsBuw0x20u4vsssKZUxApgXgwi1WawWxm7
ozLLrUPtMQlJrr+p9JTSJCazT/wNZmRkRo9hg822LD7zecgpuVYFv86Rs3OhEQZB
ddxkbo7qBNiSjLC5tNd5vUNRakgI8dGZyl6DjEcNMWQajnWD4f45pWHUVhwRHctu
Gkb+Tj6p+4wVJMJdEK2VLkvwKBfJkNEQfi5e9v1ToZv3EYK6LU8i22ZkCKqBhuo5
nT869n74m/hV7ikJKcRrFWydCRPRt9qFbsDScClFFNLXnoSrcZ7rzdX63slQ8zzX
5xjbvyXOu3SIoIyh76Dr6qezzDEdGwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFAsF
WRKPTdYvrwSNu8F94bStQwP8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMEVENDZFMjgxMDgxMUYxQjZDNTFFQzRDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcI2MA0GCSqGSIb3DQEBCwUA
A4IBAQCjJcQkMY3RcYZ0W1/pk0VZi2BUD/tVvmAyUjVcsQ1qpO5gWH596NL+0ST4
2cPiK+zw3ewlmEZTF923Hi5JwriMyc3/daK1EWnCqq0WxC/xV3/s06+/+ucm9Ha6
zNqCcbbyRmOHiHmdmmP9AWgBPR31qDSpeWZLCvikRNSqKQWPm/b76cLRKtWuIsSJ
QgBq9yypZRCGe6tFvqc3ASb+O2GBKbqzjqwM1bhAw7GGIPheohxOw1CYGb5M2FkT
SytGsvOmNwv7qbbBIJ/kJK1Glgt+Wi9/NV6ojlleZsAdo+bokm/kJIxT80JNPrT0
cby7UnPXrRccJVvWQT3ztbWJoCwa
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:09 2026 by rpki-client