Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C2180326BB611F1BFF4B6DDCE1D38B0.roa
File:                     6C2180326BB611F1BFF4B6DDCE1D38B0.roa (raw, json)
Hash identifier:          heUi1pqfrhKlv6S8ImCBWcQN6BwSazWpTnah+8p/OXg=
Subject key identifier:   3A:80:46:F0:42:D1:E6:9E:E3:77:54:C6:A3:3D:4D:3D:2E:23:9C:9F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BF1C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C2180326BB611F1BFF4B6DDCE1D38B0.roa
Signing time:             Fri 19 Jun 2026 08:11:07 +0000
ROA not before:           Fri 19 Jun 2026 08:11:03 +0000
ROA not after:            Tue 28 Jul 2026 08:11:03 +0000
asID:                     154267
IP address blocks:        45.195.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114460 (0x1bf1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 19 08:11:03 2026 GMT
            Not After : Jul 28 08:11:03 2026 GMT
        Subject: CN=6a34f99b-cf91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3f:5d:3a:25:f9:0d:99:f4:62:1b:fc:79:4d:
                    79:84:01:4d:17:30:f6:93:7d:72:b0:6f:ce:95:b9:
                    be:72:b0:42:12:19:03:ba:73:93:eb:b8:06:34:f6:
                    2c:35:1f:10:0e:7d:c9:86:c9:69:6f:2f:8d:1b:7a:
                    5b:60:35:79:7c:fe:3b:89:07:31:0b:d7:47:8d:53:
                    c4:40:dd:4d:61:6e:a0:68:18:3e:97:a0:dc:12:d1:
                    89:6f:7c:c6:45:b0:cf:f4:29:73:1b:cc:ae:13:17:
                    e9:41:cb:2f:88:c0:f8:b9:38:9a:6c:39:92:53:d0:
                    49:6d:ee:d9:17:51:2c:66:95:bf:1b:40:f8:c6:6b:
                    49:a4:7c:19:7d:c0:ea:85:9d:8f:1d:ca:4f:84:f6:
                    0b:40:3f:3d:d3:d8:f7:8d:b4:1e:6e:0e:e4:4d:ae:
                    f3:bb:db:c0:5d:11:1a:52:03:ce:da:4c:af:df:24:
                    50:73:56:26:ce:13:c4:ff:fa:a1:3c:14:d4:12:a9:
                    57:1d:26:db:38:cd:b2:36:73:95:fe:0a:df:32:d4:
                    09:48:d6:b4:d2:9b:ef:74:3b:d8:e0:e6:ee:50:22:
                    1c:df:b7:30:9c:eb:62:c6:54:53:f4:e4:c2:a1:2a:
                    9b:33:97:1c:d0:4a:cd:4b:be:f2:8b:46:91:f3:f1:
                    13:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:80:46:F0:42:D1:E6:9E:E3:77:54:C6:A3:3D:4D:3D:2E:23:9C:9F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C2180326BB611F1BFF4B6DDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:e2:51:45:34:ef:de:2f:38:d7:7f:0f:3a:5b:80:44:6a:29:
         b5:5e:6c:5b:41:b3:ae:2b:23:d8:94:29:66:0b:e9:6e:d0:2c:
         99:e1:99:ae:69:20:91:9d:03:0c:74:e8:e4:7f:dc:07:cf:11:
         7d:bc:f5:b9:83:bc:42:b4:d8:bf:bc:87:00:50:20:7b:be:27:
         22:c9:5b:23:94:58:53:73:36:39:7f:ba:ab:a1:5d:6d:68:24:
         3e:45:42:57:82:8c:7a:b0:55:b0:4c:8b:9d:13:fa:0d:7a:48:
         e2:b8:88:be:7b:a4:95:2b:11:ef:2d:4d:ee:35:db:58:e2:52:
         3f:bd:85:23:53:3b:f6:60:25:60:9a:a8:fe:aa:06:0e:60:75:
         7e:94:58:3b:1d:bf:97:9a:f2:7a:6b:02:68:f7:5a:6d:02:86:
         01:26:06:50:b1:9d:a7:7e:8b:29:ce:c0:d4:7a:de:20:4a:ce:
         6b:3a:23:96:bc:e3:81:47:f5:f0:5b:da:6e:89:f1:21:6f:53:
         cf:26:37:bc:7e:41:1f:59:2d:1b:30:4e:65:b8:8d:04:98:25:
         1e:bf:04:c2:e2:7e:9e:ae:5c:53:cc:c6:07:25:2e:8c:72:29:
         45:7d:56:21:53:82:44:18:6d:44:c3:5b:4f:c1:f5:5f:83:e3:
         89:9e:4a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:16 2026 by rpki-client