Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C6D1C08C6E011F1ACA5AA17CF1D38B0.roa
File:                     4C6D1C08C6E011F1ACA5AA17CF1D38B0.roa (raw, json)
Hash identifier:          8va9A0izFu17O4PNQNpXAgRPHUDuhhOqrOVmiEbbxTI=
Subject key identifier:   72:7C:9B:F2:75:33:2C:C3:50:3C:0B:A9:53:8B:DF:64:BB:06:F3:92
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DD15
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C6D1C08C6E011F1ACA5AA17CF1D38B0.roa
Signing time:             Tue 13 Oct 2026 08:30:08 +0000
ROA not before:           Tue 13 Oct 2026 08:30:03 +0000
ROA not after:            Fri 23 Oct 2026 08:30:03 +0000
asID:                     153706
IP address blocks:        156.254.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122133 (0x1dd15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 13 08:30:03 2026 GMT
            Not After : Oct 23 08:30:03 2026 GMT
        Subject: CN=6acdec10-cca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:d8:32:55:b1:87:2a:b3:55:3f:77:ba:ae:
                    cc:bc:78:36:26:c1:2f:67:4a:fe:e3:17:21:1b:71:
                    35:8f:34:14:cd:a0:20:bb:d5:bc:1d:04:f7:71:d7:
                    8a:f4:5d:61:3d:f5:02:71:36:80:94:d3:2a:36:4a:
                    64:74:bb:87:d0:c9:4c:f5:78:eb:6b:42:db:48:8e:
                    bd:48:19:72:04:9c:9f:f3:41:2b:fa:47:99:5b:54:
                    92:1d:1c:f1:64:4b:d4:19:d7:61:67:2d:d8:9d:ff:
                    a5:58:ff:38:df:1b:72:5d:c8:9e:71:40:c6:67:e2:
                    30:77:cf:ed:bd:5f:75:46:30:61:fa:13:b8:13:1e:
                    71:0c:42:9f:71:84:9a:7e:a1:c6:11:b7:6c:78:ec:
                    25:4a:87:9e:ef:2e:bd:5e:10:09:5e:80:b7:0b:20:
                    d8:82:7e:21:b0:5c:ac:7c:24:77:65:7c:d5:5f:9a:
                    05:47:c9:15:21:e0:07:12:da:43:e4:fe:ea:84:4a:
                    c7:4b:31:ac:8c:8c:8f:79:ef:0a:45:c9:0a:53:f1:
                    a3:b6:6c:39:e0:30:8e:fc:51:eb:67:5b:ca:de:dc:
                    6e:42:3b:04:ef:83:af:d2:5d:53:c9:d7:71:b1:aa:
                    d3:83:67:7a:31:2e:84:00:2c:79:ef:76:12:e1:e5:
                    04:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7C:9B:F2:75:33:2C:C3:50:3C:0B:A9:53:8B:DF:64:BB:06:F3:92
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C6D1C08C6E011F1ACA5AA17CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:12:8d:02:38:e6:dc:fb:ca:a0:e5:bd:2e:b7:4e:17:ee:ec:
         3b:30:7d:c0:ee:e6:a8:c0:a2:15:f6:2f:98:d0:10:5d:f5:0d:
         de:1e:f5:38:87:99:2e:b2:a0:ba:49:cc:2d:74:2a:8d:e9:98:
         ec:92:41:74:4a:06:c4:1a:8f:8e:e2:77:ad:f9:0b:a7:5e:52:
         3f:37:ef:4d:ae:53:4d:0c:1a:5c:2c:40:a6:f9:e2:6a:92:3c:
         72:bb:7b:a8:dd:a8:92:0a:ee:29:23:f1:88:cb:09:04:c1:95:
         fb:30:54:69:a2:e8:df:64:53:9c:86:af:70:49:0a:f9:5b:02:
         8b:e6:c4:cf:4c:42:6d:c3:af:3c:35:0a:c6:b0:57:fb:c0:ab:
         0a:1f:1b:c1:ed:27:92:b4:5f:d1:d9:72:af:96:9c:39:53:fd:
         dd:7c:69:f9:4e:1f:89:04:b6:a8:31:52:8a:c6:5e:ce:a9:9e:
         9c:21:64:8d:b8:20:f6:3c:2e:55:4a:45:0d:aa:0b:dc:d1:37:
         96:e7:ad:02:ec:f0:51:e4:e3:01:48:1d:66:09:4e:2f:7e:1a:
         16:c3:32:62:71:4c:e0:04:07:95:de:b6:39:81:bf:ea:57:c9:
         c2:64:8d:22:ce:6a:1a:f5:b2:48:99:5c:eb:89:24:23:55:73:
         cf:98:b2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----