Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/505AF5C6BF0911F198DC29DBCE1D38B0.roa
File:                     505AF5C6BF0911F198DC29DBCE1D38B0.roa (raw, json)
Hash identifier:          jWSfPkaxGMkQGRgXg8NXCNjBWJKZwk5osRO4Ebfe/Eg=
Subject key identifier:   7F:41:85:49:D8:6A:EF:37:D6:90:60:FA:2A:EC:BF:72:F8:67:7E:F1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA41
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/505AF5C6BF0911F198DC29DBCE1D38B0.roa
Signing time:             Sat 03 Oct 2026 09:03:35 +0000
ROA not before:           Sat 03 Oct 2026 09:03:31 +0000
ROA not after:            Tue 10 Nov 2026 09:03:31 +0000
asID:                     63139
IP address blocks:        45.197.81.0/24 maxlen: 24
                          45.197.82.0/24 maxlen: 24
                          45.197.83.0/24 maxlen: 24
                          45.197.84.0/24 maxlen: 24
                          45.197.85.0/24 maxlen: 24
                          45.197.86.0/24 maxlen: 24
                          45.197.87.0/24 maxlen: 24
                          45.197.88.0/24 maxlen: 24
                          45.197.89.0/24 maxlen: 24
                          45.197.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121409 (0x1da41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  3 09:03:31 2026 GMT
            Not After : Nov 10 09:03:31 2026 GMT
        Subject: CN=6ac0c4e7-64bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0c:3e:dc:a6:09:b6:3a:e5:e8:32:78:63:bd:
                    34:75:cd:d1:d0:1c:b7:92:c3:96:2f:d4:a4:23:3c:
                    c6:8d:f6:c3:f3:fc:a3:1a:63:e0:7d:80:8d:e7:9c:
                    42:7f:48:c3:4b:43:89:20:63:fd:4d:35:bf:3d:68:
                    93:d9:c9:79:9d:56:1c:3f:e6:58:e9:df:0c:76:2f:
                    f2:d9:1a:69:52:55:8c:a8:52:b8:c9:58:aa:53:4b:
                    a7:3f:da:12:07:bf:5c:ac:e4:a7:09:da:27:fd:8c:
                    b6:d7:45:5e:90:e9:9f:a6:6e:06:e6:36:07:4e:e9:
                    10:10:5c:e8:6f:1c:5b:4f:bd:c1:4a:e9:e3:e5:93:
                    1a:c0:a9:56:2d:61:bf:b9:65:e8:4e:87:a5:92:9f:
                    16:a9:84:d7:2a:19:4a:7e:39:0e:18:3b:f6:a5:b4:
                    30:46:05:92:36:83:99:cb:0b:41:7d:07:24:a2:ed:
                    87:40:c8:a5:74:4d:fc:b9:e4:57:7b:4f:3f:2d:a9:
                    61:cd:21:19:b6:f8:d6:d0:a7:af:b4:9a:96:7b:c0:
                    5d:ff:be:bc:91:4b:25:22:09:32:58:49:52:53:d3:
                    73:8a:6d:ea:61:55:e5:66:70:40:c2:89:3d:f0:90:
                    b6:5d:62:e6:35:e0:a6:d5:6a:fa:71:74:8f:b7:6a:
                    c9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:41:85:49:D8:6A:EF:37:D6:90:60:FA:2A:EC:BF:72:F8:67:7E:F1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/505AF5C6BF0911F198DC29DBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.81.0-45.197.90.255

    Signature Algorithm: sha256WithRSAEncryption
         9d:d6:bf:42:42:ce:82:aa:4e:64:e4:6a:2e:63:48:05:a0:9e:
         2e:41:14:10:84:a5:b9:4b:60:4e:82:24:a9:c7:31:34:b2:d9:
         fe:0c:bf:67:43:d8:24:a7:cf:ee:67:f6:31:9c:33:08:d1:0c:
         c2:0f:16:60:59:f5:96:de:4a:66:ba:fa:2e:d5:5c:4b:ea:80:
         61:a7:e0:0b:89:af:af:b3:11:e5:0f:73:9f:c0:f8:02:b8:ae:
         a7:73:d8:38:3a:96:ca:13:f0:a6:45:e1:28:de:2e:a3:db:ae:
         7e:85:16:49:d5:be:bd:f3:82:5d:3a:47:f4:78:83:0f:59:47:
         b9:f4:2f:20:9f:bb:72:b2:19:1a:60:f5:28:aa:52:6e:76:47:
         17:7e:08:32:77:44:2c:1c:7b:45:67:aa:e5:d1:a8:05:fa:0e:
         d3:9b:a7:40:c8:ac:e6:bc:1a:c7:5e:4b:59:42:37:2f:bc:46:
         cb:a8:fe:5d:db:83:88:49:40:60:03:5e:4b:9e:7d:5f:f4:ca:
         ef:de:77:67:c8:07:d3:f4:ff:ae:e2:09:ae:d2:77:09:98:43:
         ad:c2:df:fa:b6:1a:ba:10:7d:9d:61:48:b7:ef:ad:1d:2c:e8:
         64:50:7a:83:2a:71:fd:69:36:99:36:e1:5f:d5:79:26:58:e5:
         16:81:a3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----