Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C60E7825EAC11F18DE5AF12CF1D38B0.roa
File:                     3C60E7825EAC11F18DE5AF12CF1D38B0.roa (raw, json)
Hash identifier:          xfUIyM3R43bofVXaTXn8p/rptQJTwGI336BZ8lqnlHE=
Subject key identifier:   43:4E:F4:CA:5D:3E:4F:16:0B:B0:8C:DE:01:B4:B6:E9:17:D7:A2:AE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BB58
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C60E7825EAC11F18DE5AF12CF1D38B0.roa
Signing time:             Tue 02 Jun 2026 17:55:27 +0000
ROA not before:           Tue 02 Jun 2026 17:55:22 +0000
ROA not after:            Thu 09 Jul 2026 17:55:22 +0000
asID:                     44559
IP address blocks:        45.204.73.0/24 maxlen: 24
                          45.204.75.0/24 maxlen: 24
                          45.207.2.0/24 maxlen: 24
                          45.207.3.0/24 maxlen: 24
                          45.207.161.0/24 maxlen: 24
                          45.207.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 04 Jun 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113496 (0x1bb58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun  2 17:55:22 2026 GMT
            Not After : Jul  9 17:55:22 2026 GMT
        Subject: CN=6a1f190f-5a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:ca:50:cc:94:c8:55:ad:fb:df:de:ad:9c:
                    51:5e:92:f6:de:af:8a:ee:1c:f8:13:fe:3d:13:9c:
                    e0:ea:8e:65:a1:4c:20:69:cd:61:07:29:eb:47:5c:
                    c0:74:f6:38:b8:bb:8c:76:1f:01:68:7c:db:2d:39:
                    10:e8:d7:6c:f5:ce:19:3f:2f:40:12:ec:60:23:e8:
                    0a:5f:88:bb:15:d0:40:49:02:d9:fb:1b:d1:76:82:
                    57:b0:e3:68:2e:00:a7:ae:58:0f:57:72:58:ad:ad:
                    96:bd:66:ba:80:c8:78:15:c6:cd:9b:14:2b:4c:2e:
                    89:d3:e0:25:99:1c:18:1f:61:21:4d:04:d2:87:1a:
                    2c:88:9b:34:15:17:af:b5:37:24:de:e8:44:eb:c7:
                    aa:a6:f3:fd:99:ac:36:f3:ab:8f:0a:e4:d7:4c:0d:
                    d7:b5:19:29:25:f9:b1:d0:e0:88:ef:7d:cc:a6:ab:
                    e1:e4:a1:63:58:5d:05:f4:33:c5:62:d5:24:60:d8:
                    fe:11:6a:c3:40:a9:8c:1c:96:39:b4:0e:29:5b:3f:
                    08:9f:07:7f:08:9b:0f:44:c6:32:9f:0a:8f:ff:d2:
                    19:dd:b4:74:df:7e:c9:eb:5d:ae:38:55:8e:32:93:
                    55:77:11:91:06:7d:59:10:ac:d2:15:47:c9:4f:14:
                    3e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4E:F4:CA:5D:3E:4F:16:0B:B0:8C:DE:01:B4:B6:E9:17:D7:A2:AE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C60E7825EAC11F18DE5AF12CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.73.0/24
                  45.204.75.0/24
                  45.207.2.0/23
                  45.207.161.0-45.207.162.255

    Signature Algorithm: sha256WithRSAEncryption
         63:97:f6:e7:53:88:e4:94:f2:bb:06:04:4e:35:fd:a0:fd:7c:
         74:d6:62:31:b2:b8:e9:78:d2:7d:6a:d0:cf:87:58:a3:9a:5b:
         ea:a1:1a:f4:75:f7:53:62:c8:9b:39:35:30:c0:a6:25:66:44:
         e8:d6:1a:7f:e1:4c:d4:4a:2d:ac:df:05:5d:6b:8f:a5:69:28:
         c2:9e:b1:35:47:cf:1d:c2:49:9f:80:b7:2b:49:44:04:67:50:
         92:e9:92:bb:aa:7c:55:c6:52:67:8c:4d:34:58:b5:90:58:e3:
         21:61:98:bb:ec:0b:7b:84:79:19:f5:80:7b:0d:44:24:c8:e1:
         72:7d:02:20:c2:a2:14:8c:dd:e1:db:24:54:70:c1:e4:d9:52:
         55:d1:8e:50:28:dc:de:ff:bd:23:17:2c:fa:07:2d:7b:99:01:
         fd:9e:53:94:5c:0c:15:a4:88:b0:df:40:48:07:c9:1d:da:1d:
         f2:ba:94:9e:b1:8c:99:5c:0d:7d:08:36:67:70:99:48:40:3a:
         3d:ff:4a:2c:53:db:f2:ed:58:37:90:8b:b7:87:5d:ec:49:ae:
         14:b2:88:50:00:77:4c:d8:2b:44:f3:e1:d1:33:91:44:0a:56:
         d3:65:30:4d:90:cc:ae:d8:b0:90:ff:72:0c:1d:63:aa:15:75:
         9b:db:2a:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:38 2026 by rpki-client