Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FAF3458923911F19CC58D02CF1D38B0.roa
File:                     5FAF3458923911F19CC58D02CF1D38B0.roa (raw, json)
Hash identifier:          ezU+ILXXrs/DK9MacExFXM2SrbAcYtiiWs5tDMLr8pM=
Subject key identifier:   E1:A3:7B:AD:F0:86:B2:CD:D9:9A:B8:31:FD:2C:AA:62:01:9C:87:FC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CA39
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FAF3458923911F19CC58D02CF1D38B0.roa
Signing time:             Fri 07 Aug 2026 08:24:14 +0000
ROA not before:           Fri 07 Aug 2026 08:24:11 +0000
ROA not after:            Sun 04 Oct 2026 08:24:11 +0000
asID:                     40115
IP address blocks:        45.207.13.0/24 maxlen: 24
                          45.207.14.0/24 maxlen: 24
                          45.207.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117305 (0x1ca39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  7 08:24:11 2026 GMT
            Not After : Oct  4 08:24:11 2026 GMT
        Subject: CN=6a75962e-b192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c4:34:8b:18:10:e8:ba:7a:f1:2f:ed:42:8d:
                    b1:07:5e:06:6e:67:cd:e9:e7:e8:e1:22:63:b5:a2:
                    94:11:68:97:7b:a2:bd:b4:5a:5d:2f:10:8f:5b:6d:
                    9b:e1:24:f0:fc:e9:34:a5:d4:20:fd:9c:ed:cc:5a:
                    de:ec:36:aa:63:e5:89:39:1d:56:21:9a:00:d8:fd:
                    0b:2d:6b:d2:49:94:bc:d4:36:51:82:de:03:b5:e5:
                    50:62:57:df:77:8e:83:cf:86:af:7b:e8:68:7c:c4:
                    8f:0f:26:f4:57:e9:96:15:73:6d:35:ca:8e:d2:d9:
                    92:0e:6c:c5:59:b7:21:e5:d8:b5:5f:6c:9c:71:de:
                    85:9b:f1:60:34:ab:50:d2:dd:06:22:c5:41:5e:c3:
                    c3:8d:29:b9:58:a7:c8:ec:55:06:9b:a2:81:9c:be:
                    5c:3f:5e:2e:08:c8:11:01:5f:73:06:15:ec:4e:d9:
                    a4:24:78:a3:22:3a:a9:ad:3f:c5:a8:25:87:39:70:
                    c1:75:4d:e2:2a:7a:49:11:69:89:83:55:70:1a:34:
                    8a:07:58:bd:c1:2f:b4:1a:60:00:b3:d8:e1:e7:28:
                    9f:02:ca:0f:3c:48:26:9f:8e:23:1d:24:7b:56:a6:
                    cb:05:06:2c:7c:f8:91:d1:f7:56:17:20:f8:0a:25:
                    55:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A3:7B:AD:F0:86:B2:CD:D9:9A:B8:31:FD:2C:AA:62:01:9C:87:FC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FAF3458923911F19CC58D02CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.13.0-45.207.15.255

    Signature Algorithm: sha256WithRSAEncryption
         3f:3a:32:9b:ac:67:dd:8b:8b:e1:64:e7:f4:3c:30:0e:20:65:
         e8:4e:66:64:4a:ab:12:51:c1:57:96:0f:fe:07:77:3d:d5:e5:
         b8:bd:b1:55:b1:fa:64:30:dd:17:53:b9:b2:7f:c5:a9:40:7d:
         38:a2:c9:75:bc:61:b2:4f:44:bd:b3:11:63:10:81:da:dd:39:
         04:46:7a:f6:d5:d7:fb:49:3b:f0:ef:43:a5:6f:b5:64:b1:22:
         fc:d9:56:ac:43:b8:91:2e:1d:9e:43:8c:b3:c9:67:01:ea:d8:
         e4:2a:40:49:78:7c:da:76:e2:0f:fc:ce:7d:0c:90:97:68:71:
         78:e2:07:5b:3c:7a:cd:f5:0b:8f:c7:b8:80:3b:b6:a5:4d:1f:
         63:87:0c:30:cf:aa:a8:bf:2b:81:a3:54:00:5e:95:d1:b4:f0:
         4b:09:ea:27:e8:f0:cf:4b:c1:3e:23:00:56:70:bf:e4:c3:31:
         6d:5d:de:f4:d1:c0:ac:c0:df:68:8f:cb:fe:3b:b2:75:b9:b5:
         a1:55:e7:f4:34:56:ff:c6:a9:a3:15:42:f3:7e:a5:db:ba:2e:
         72:8e:0a:ff:8f:8b:13:60:18:fa:e4:0d:31:cb:aa:6e:5a:c1:
         53:0b:35:3b:90:d6:01:c3:97:1c:c1:ef:30:26:84:d2:ba:96:
         a5:a6:8c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----