Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5289915C730211F1941965FACE1D38B0.roa
File:                     5289915C730211F1941965FACE1D38B0.roa (raw, json)
Hash identifier:          ZEPJYgN63rXJbIt22CCt9PZOg0lhyLcElN0Iaqtgwc0=
Subject key identifier:   9E:6A:7F:B2:BB:CB:4B:BE:B1:63:86:4F:A2:EA:1D:B5:F5:EF:8C:4C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C165
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5289915C730211F1941965FACE1D38B0.roa
Signing time:             Sun 28 Jun 2026 15:02:04 +0000
ROA not before:           Sun 28 Jun 2026 15:01:59 +0000
ROA not after:            Mon 10 Aug 2026 15:01:59 +0000
asID:                     215691
IP address blocks:        45.198.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 Jul 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115045 (0x1c165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 28 15:01:59 2026 GMT
            Not After : Aug 10 15:01:59 2026 GMT
        Subject: CN=6a41376c-1f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:6c:70:2b:44:12:75:5e:f2:0d:74:24:b8:
                    23:a8:7c:54:04:b5:01:b8:e8:54:0f:9b:89:fe:7e:
                    40:26:e7:59:e1:ba:a3:fa:ee:7b:62:05:0d:68:aa:
                    39:b2:84:bb:b9:ab:75:71:d6:ef:9a:e7:b1:8d:6e:
                    84:75:15:68:ff:3c:23:3d:6a:5b:6b:9b:02:e3:e5:
                    cb:25:cb:86:20:30:04:46:ba:41:78:f7:c7:f9:a6:
                    66:25:8f:eb:ea:ea:d1:f3:e7:58:87:88:49:46:a6:
                    06:17:ef:17:02:6c:16:ee:a7:77:a3:60:5b:97:6b:
                    2d:5c:9e:38:1a:a7:b1:d0:44:4e:1a:49:03:2b:4c:
                    9d:4e:e4:7e:a6:ad:1b:2b:21:8b:43:9c:e8:3e:9b:
                    d9:14:e5:ef:08:d3:6c:9e:d3:f2:36:d4:21:bc:12:
                    7d:dc:96:8a:8c:c5:3f:fc:ba:85:51:13:4a:f5:f2:
                    b0:e7:b1:05:b7:94:77:75:a9:13:28:2f:0c:9e:70:
                    cd:66:15:98:13:ef:2e:4e:f8:4b:1e:ba:0d:d1:bd:
                    2c:c5:21:ae:38:ba:7c:97:0e:fa:cf:a4:33:60:4f:
                    3d:d3:76:a5:42:f6:62:0e:a1:47:33:ff:ef:b5:55:
                    cd:e4:7b:03:f9:d2:fb:91:0f:fa:1d:85:97:08:86:
                    9c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6A:7F:B2:BB:CB:4B:BE:B1:63:86:4F:A2:EA:1D:B5:F5:EF:8C:4C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5289915C730211F1941965FACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:d8:ec:11:f2:7d:fd:42:a8:2f:3e:44:27:d4:1e:42:f1:b4:
         b1:9e:a0:9f:dd:dc:46:9f:27:33:f2:a6:33:09:e1:4e:99:9a:
         bf:ec:3e:ba:dc:b9:c2:b7:a0:d0:0e:23:db:28:fb:54:78:92:
         0e:a2:c2:3a:ff:a1:56:c3:f2:f9:65:e6:cb:9a:09:a0:36:de:
         06:87:48:d5:22:78:d9:f0:b9:c3:94:ea:33:51:1a:9e:93:b8:
         71:e7:68:fd:ac:ba:bc:e3:da:62:6f:fa:c3:07:79:0b:0b:f0:
         4b:ae:27:ca:1c:4f:71:2c:e5:fa:7d:5a:e8:30:fa:57:2e:af:
         7e:9d:50:55:b0:4f:36:80:14:fa:6a:20:9d:b6:4e:cc:fd:45:
         14:dd:cf:91:c8:f9:8d:90:53:55:1c:c9:4b:eb:45:30:b4:9d:
         3f:3a:4f:bc:77:d6:af:0d:23:9e:ac:f1:ac:b0:8c:1a:16:52:
         8b:d7:2f:d3:c5:8b:69:fd:de:08:43:de:89:1c:f1:bb:bf:98:
         6c:8e:43:43:1c:0f:e2:98:a9:b2:fb:a9:2a:61:a6:5d:44:62:
         55:b1:1d:86:d7:11:32:81:5c:83:b9:20:13:ff:8a:32:f4:97:
         41:de:91:f2:9e:3d:7f:86:5f:eb:5d:e6:cd:bf:29:06:66:05:
         ca:73:a4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 16:52:38 2026 by rpki-client