Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E4BC698699E11F1B670AC1CCF1D38B0.roa
File:                     6E4BC698699E11F1B670AC1CCF1D38B0.roa (raw, json)
Hash identifier:          w33tLFUcn4RVxofTJvfU0CF/ZLg2g02rJNFvr9x8vho=
Subject key identifier:   AC:E4:F0:6F:DF:97:4C:10:B2:86:A8:37:4F:64:9D:53:A1:7A:5A:CA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BE38
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E4BC698699E11F1B670AC1CCF1D38B0.roa
Signing time:             Tue 16 Jun 2026 16:14:20 +0000
ROA not before:           Tue 16 Jun 2026 16:14:16 +0000
ROA not after:            Wed 29 Jul 2026 16:14:16 +0000
asID:                     133073
IP address blocks:        45.196.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 22 Jun 2026 00:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114232 (0x1be38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 16 16:14:16 2026 GMT
            Not After : Jul 29 16:14:16 2026 GMT
        Subject: CN=6a31765c-380e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6d:43:1d:9f:95:bb:ab:39:09:2a:54:7a:a7:
                    fd:17:2a:77:24:bc:ca:90:69:1c:62:69:40:a8:5a:
                    b0:12:28:02:d4:41:fa:b3:4d:87:8d:84:25:a7:99:
                    85:7b:7a:7f:4e:8f:c3:16:77:85:19:9e:47:51:a9:
                    f1:d2:89:67:ca:db:2f:a2:a9:1b:0c:f1:a4:f3:be:
                    dc:9b:a9:76:be:65:1f:56:34:51:19:37:5f:88:46:
                    c5:33:9c:98:27:c2:f0:ed:9a:cd:3a:9d:78:8b:64:
                    54:45:44:17:2a:29:26:96:86:12:7a:10:c0:27:29:
                    e5:36:4b:37:37:7d:6f:f7:9b:69:14:cd:bd:2e:87:
                    1c:6b:cf:6c:3d:2f:6d:20:82:b4:cf:0f:d4:47:40:
                    0a:94:2c:0e:42:df:f5:0d:f5:9c:22:23:f2:19:8e:
                    85:5f:54:47:bf:c7:fe:52:af:10:02:2d:9b:fe:e9:
                    7f:2a:96:fa:79:95:9e:10:a3:5e:b6:75:03:af:7f:
                    33:8c:82:06:a7:11:90:4d:3e:22:e6:bd:45:24:b5:
                    e3:d1:74:dc:5b:f1:db:1e:bd:19:d2:54:99:ec:51:
                    5a:a1:06:81:3c:95:ba:a7:56:7f:22:e3:9c:54:78:
                    da:60:1d:d2:5b:d8:00:23:2b:66:24:99:f3:3b:d7:
                    66:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E4:F0:6F:DF:97:4C:10:B2:86:A8:37:4F:64:9D:53:A1:7A:5A:CA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E4BC698699E11F1B670AC1CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:6c:e9:c4:ce:1d:d5:31:70:01:40:7e:4d:19:8a:82:20:7a:
         e3:34:21:de:d0:d9:68:37:ed:c6:24:6f:34:1f:4a:4e:41:85:
         50:57:dd:31:c4:62:19:cd:31:ab:43:15:67:5c:c1:3b:54:59:
         a9:0f:c1:de:12:1b:af:83:cc:37:67:a3:8f:2b:7c:9b:5c:24:
         a0:cf:ec:62:7a:81:1e:70:b1:70:21:50:eb:82:4f:4d:ef:4b:
         31:1c:20:95:ad:22:56:34:db:af:af:9c:c3:e0:f7:eb:30:53:
         0d:1a:23:a9:15:fc:9f:07:94:b1:08:b3:70:9e:36:e8:a7:86:
         b0:0a:14:a7:5d:9d:d3:b7:be:60:f5:c5:09:a6:4d:97:b5:b3:
         3d:66:34:2e:d4:d7:66:7c:fe:02:e1:ec:e0:c0:ec:3b:09:ca:
         c8:53:6d:ff:f8:3e:b5:e6:26:58:0a:1b:27:38:c7:94:07:e4:
         4d:b2:fb:9a:ea:da:9c:b7:8a:59:24:9f:8f:89:e1:ae:4b:5a:
         b5:98:f1:1a:da:93:f3:5f:7a:8a:91:f2:c1:c6:44:51:ff:65:
         a8:05:c7:0a:5c:26:f0:b7:5b:3f:e8:ab:1f:5c:fd:5a:ff:af:
         22:99:fc:df:27:e8:97:9e:7c:00:df:f7:78:45:90:41:f5:47:
         3b:78:b5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 11:03:33 2026 by rpki-client