Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3610DD92551F11F18C3EB700CF1D38B0.roa
File:                     3610DD92551F11F18C3EB700CF1D38B0.roa (raw, json)
Hash identifier:          8rqdMu6Rni9CfaJFkO/8rp4IH22lcDFgrllo7DKzo4c=
Subject key identifier:   7A:67:74:36:03:6B:90:6F:99:2C:47:4A:C6:C3:D5:2F:21:26:8F:3B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B71F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3610DD92551F11F18C3EB700CF1D38B0.roa
Signing time:             Thu 21 May 2026 14:13:17 +0000
ROA not before:           Thu 21 May 2026 14:13:12 +0000
ROA not after:            Sun 28 Jun 2026 14:13:12 +0000
asID:                     402425
IP address blocks:        45.202.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 04 Jun 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112415 (0x1b71f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 21 14:13:12 2026 GMT
            Not After : Jun 28 14:13:12 2026 GMT
        Subject: CN=6a0f12fd-942e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c5:ac:26:0e:2f:28:9c:11:16:ec:e0:0e:af:
                    f5:7b:7a:d7:00:8e:13:7e:f0:fe:6c:33:5a:a7:24:
                    47:93:ce:9d:01:f3:f5:29:20:1b:a0:b7:46:d3:df:
                    f6:6b:2d:7e:b0:02:db:8e:37:08:7f:33:72:03:a6:
                    16:74:17:5d:72:0b:e0:b7:05:82:a3:a5:bd:5b:70:
                    03:c9:3e:64:05:1f:e6:e4:14:74:da:f0:8e:5f:71:
                    43:36:49:ce:d6:81:44:9b:27:05:86:96:a7:82:a6:
                    77:35:64:8b:06:f0:d6:ad:60:a2:84:e0:6b:89:97:
                    8a:18:f2:66:ff:4b:07:83:b1:cb:08:e2:5f:d3:9f:
                    80:1f:9d:13:a6:d1:87:d6:69:38:99:a0:ee:aa:cd:
                    98:bd:1f:94:1d:13:d9:75:63:b0:d9:70:65:44:b3:
                    dc:47:85:a5:1f:3f:2c:25:a8:06:7b:f5:4d:1e:fc:
                    4e:4a:e8:fa:b4:ea:83:96:e6:1d:a7:9f:2a:50:60:
                    12:7f:20:75:3d:8e:ed:2b:1e:d1:37:1b:d7:22:e4:
                    5d:37:f0:0d:2d:44:ac:4e:61:d2:76:4c:d6:87:47:
                    b7:9f:0d:a2:8f:c9:85:04:3a:cd:bc:dd:59:f4:72:
                    33:fa:e3:d1:85:af:39:73:6c:98:4d:73:ec:02:c8:
                    6d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:67:74:36:03:6B:90:6F:99:2C:47:4A:C6:C3:D5:2F:21:26:8F:3B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3610DD92551F11F18C3EB700CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:44:44:64:17:1e:79:11:09:9b:ac:b0:88:d1:86:38:8b:1b:
         55:f2:e7:05:11:92:b3:43:06:6a:86:b5:43:9c:2c:ca:a4:8d:
         e7:a2:2c:be:41:4b:0d:ac:f1:77:b9:2c:7c:42:12:cc:62:d4:
         df:a8:fb:bd:13:1b:c7:85:55:84:3e:d3:58:c6:c7:66:13:55:
         ec:b2:76:74:04:2c:58:d5:bc:31:75:45:be:6d:74:e9:85:43:
         e3:d2:7d:5a:7d:d3:7d:e6:49:e2:67:91:71:b1:b0:39:cc:9d:
         0a:0a:ea:61:bd:87:d4:fe:0a:8a:ed:3f:ef:c1:d2:51:97:c7:
         48:64:e9:b9:df:6b:b8:12:56:e3:08:e7:b2:3f:c5:c2:d9:2a:
         3c:20:6e:79:d7:95:ed:ab:ef:dd:c5:f7:8b:70:64:72:05:16:
         bc:b7:55:7d:74:78:1f:2a:ac:e6:0b:4f:52:0f:b5:67:fa:40:
         e4:2b:bf:40:0c:a6:74:12:d1:57:13:c8:e5:67:05:81:ba:b7:
         f9:e1:0d:94:89:5f:c2:7d:f0:74:0e:fc:f4:97:13:7a:c3:03:
         10:01:7f:1f:c6:ae:20:15:26:a5:f7:17:ce:fb:95:6a:39:67:
         1d:ce:d4:33:bb:90:57:4f:ff:f2:aa:25:1e:0b:4a:9d:88:2b:
         6b:88:fd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:13:57 2026 by rpki-client