Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46E7FA4E9F9B11F18C3B5CE0CE1D38B0.roa
File:                     46E7FA4E9F9B11F18C3B5CE0CE1D38B0.roa (raw, json)
Hash identifier:          vh8iHBUnrb3tuMp+sPMmhaNY69mWlMovoXIpbjL/Y1Y=
Subject key identifier:   4A:A1:2B:C7:DB:E6:E8:2D:75:E4:31:53:6C:C5:E8:7E:6A:82:4E:AE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D066
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46E7FA4E9F9B11F18C3B5CE0CE1D38B0.roa
Signing time:             Mon 24 Aug 2026 09:07:49 +0000
ROA not before:           Mon 24 Aug 2026 09:07:45 +0000
ROA not after:            Fri 02 Oct 2026 09:07:45 +0000
asID:                     44559
IP address blocks:        45.192.252.0/24 maxlen: 24
                          45.192.253.0/24 maxlen: 24
                          45.192.254.0/24 maxlen: 24
                          45.192.255.0/24 maxlen: 24
                          45.195.96.0/24 maxlen: 24
                          45.195.97.0/24 maxlen: 24
                          45.195.98.0/24 maxlen: 24
                          45.195.99.0/24 maxlen: 24
                          45.195.100.0/24 maxlen: 24
                          45.195.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118886 (0x1d066)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 24 09:07:45 2026 GMT
            Not After : Oct  2 09:07:45 2026 GMT
        Subject: CN=6a8c09e5-5255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f1:69:6f:7e:0e:46:9e:e7:16:99:7f:fc:15:
                    fe:bc:06:3c:61:47:57:bc:41:39:f2:e1:5b:d2:01:
                    7c:e8:7d:34:d6:66:4b:ea:ff:20:26:58:0c:ee:a4:
                    06:7c:88:90:4e:31:35:d5:16:f5:36:82:9c:ab:10:
                    92:cc:53:71:65:98:90:f2:81:5f:45:15:4e:83:c0:
                    6d:f0:b3:d9:c6:02:7e:e9:9c:72:c1:e7:ac:22:e5:
                    8f:02:0c:93:c5:76:0a:1b:15:f9:23:33:d9:af:b4:
                    84:04:bf:68:23:d3:94:cd:c0:93:68:e2:76:fe:4c:
                    54:b8:f5:63:0c:1e:42:f1:31:e7:6b:69:c0:e2:94:
                    f0:00:3d:9a:1e:f5:0e:64:63:f3:bd:ff:37:56:66:
                    37:e5:73:21:53:64:4e:2a:dd:f4:60:2b:87:e0:85:
                    bf:27:c8:44:88:0d:0b:53:f2:3c:90:0e:cb:e7:0d:
                    52:46:17:30:00:21:dc:8c:b9:42:b8:f6:0e:7c:5f:
                    e6:b5:c4:d8:d0:25:b2:44:0c:2d:6f:11:94:82:ba:
                    32:53:e3:9b:7f:46:04:bc:48:24:dc:ad:81:c0:a3:
                    41:78:db:f0:a6:e4:2a:7c:9b:37:7c:84:8d:1c:12:
                    7f:18:c2:a6:6a:07:04:5a:90:ee:19:b8:f3:79:df:
                    3d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A1:2B:C7:DB:E6:E8:2D:75:E4:31:53:6C:C5:E8:7E:6A:82:4E:AE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46E7FA4E9F9B11F18C3B5CE0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.252.0/22
                  45.195.96.0-45.195.100.255
                  45.195.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:99:94:be:45:63:20:7b:ae:d8:61:d7:56:6b:63:6f:d3:34:
         b5:38:a2:b7:77:51:a5:ca:22:0a:01:59:73:ac:7c:09:f5:45:
         68:28:a8:12:34:91:f0:25:e8:3f:ce:ab:81:b6:dd:db:9a:2a:
         ec:67:42:b2:fc:1a:14:c1:72:d6:b7:51:f7:0b:d4:78:5d:fc:
         d6:80:27:a9:c0:33:1a:ae:ba:88:3b:6c:31:21:b7:c6:62:99:
         51:86:9b:d2:32:82:7c:0b:60:14:09:7c:36:e6:61:cf:63:90:
         74:a3:a5:ba:7c:b8:42:a4:19:72:0e:ea:eb:b6:19:25:0f:03:
         35:a5:c1:ba:47:b6:8f:fb:cb:1f:ab:90:58:ef:b8:14:43:82:
         21:70:6e:58:f9:a3:ad:6a:43:96:5f:ef:93:37:31:5c:61:0a:
         5c:ca:c3:a0:dc:c1:b8:da:b1:c3:a7:28:0b:5f:75:a4:a9:5c:
         20:fd:ec:b5:88:bd:0e:70:4a:85:6e:bc:54:70:f7:18:71:57:
         c4:76:09:f0:80:a7:78:79:79:08:06:b8:87:1b:47:93:03:09:
         7d:a4:a0:da:02:3d:5d:c4:6c:af:51:c5:fb:4d:b1:d0:6e:0b:
         9b:bd:87:d0:5e:8e:af:77:1e:71:4f:b3:49:e5:5d:96:24:8d:
         20:d3:d3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----