Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FFBF464C92E11F1927575A4CE1D38B0.roa
File:                     6FFBF464C92E11F1927575A4CE1D38B0.roa (raw, json)
Hash identifier:          vgv7n67bdi9lccQj9rZ4fio5vGxUCAlXAi6N6vQwRcU=
Subject key identifier:   A1:83:DB:01:51:1B:55:D6:59:59:5A:65:EC:0F:D6:E1:F5:F5:09:CA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DDCC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FFBF464C92E11F1927575A4CE1D38B0.roa
Signing time:             Fri 16 Oct 2026 06:54:31 +0000
ROA not before:           Fri 16 Oct 2026 06:54:27 +0000
ROA not after:            Sun 22 Nov 2026 06:54:27 +0000
asID:                     57043
IP address blocks:        45.197.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122316 (0x1ddcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 16 06:54:27 2026 GMT
            Not After : Nov 22 06:54:27 2026 GMT
        Subject: CN=6ad1ca27-c5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fd:86:67:0c:ce:0b:48:0b:5a:0d:da:0b:2f:
                    16:0b:e4:27:6c:06:e9:79:c7:76:88:c7:7b:8b:be:
                    27:d1:51:1e:17:c1:f0:43:4d:0b:d3:ff:ea:9f:5b:
                    11:ae:bf:bb:61:ce:03:bc:a2:88:47:f1:91:63:b8:
                    7b:bf:c9:7c:d6:65:5e:95:8f:54:5b:20:3d:9f:8f:
                    b0:07:b0:91:99:66:3b:29:78:28:eb:d0:2b:0d:3e:
                    f2:b8:d4:2e:ce:da:f1:46:6a:e4:52:55:42:56:ea:
                    2b:f9:67:36:08:5d:f1:aa:4b:db:33:ce:20:ea:79:
                    a0:59:98:ac:33:13:f7:5f:36:3d:d5:0d:4f:e0:64:
                    78:8a:33:d9:e7:5f:f3:f2:7a:52:02:36:c7:fb:96:
                    ed:8a:34:fc:ee:ff:0f:1a:05:8e:9d:8f:8f:de:b3:
                    7c:e7:49:3c:0b:e7:75:7a:fb:4c:c1:b9:3e:8b:d4:
                    e4:b8:72:a5:b0:ad:63:ee:77:49:0a:40:82:5f:ef:
                    9e:c2:a2:9d:ce:14:dd:7e:ff:e8:8c:04:d3:a9:d0:
                    03:50:9f:62:b3:f2:a9:e9:a3:9f:99:e8:48:b9:25:
                    33:f2:31:92:ee:18:bf:8e:28:84:f0:34:35:65:0e:
                    87:5b:a0:7b:56:58:31:e9:15:d1:6b:1c:18:47:0a:
                    38:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:83:DB:01:51:1B:55:D6:59:59:5A:65:EC:0F:D6:E1:F5:F5:09:CA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FFBF464C92E11F1927575A4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:cb:c1:ea:d5:39:58:0d:2f:0b:1a:84:29:6a:de:85:b4:6b:
         08:2e:b3:6a:e6:9f:e2:95:9d:95:b7:4f:76:b4:55:78:08:25:
         7b:31:f0:c3:58:59:f6:5a:54:e2:fb:73:38:ae:cd:0a:46:63:
         cb:88:ca:44:49:ce:9e:f2:f4:c6:b8:9a:4e:15:d2:e2:56:cc:
         0f:9c:ef:36:6a:7b:db:41:c9:7e:f7:23:24:5a:3c:db:72:f1:
         3c:4c:0e:bc:aa:06:94:13:13:35:c7:ba:56:1e:4c:8a:89:5b:
         19:92:10:1c:03:48:d9:d1:6e:3a:05:c6:8d:83:67:c3:44:02:
         c5:08:16:e7:3a:3b:d9:20:0e:5d:83:3d:d6:7f:6f:e8:9a:99:
         d2:1c:be:5e:cb:e4:19:a3:7e:86:41:d4:48:9a:f4:b2:07:70:
         7a:2a:0d:79:e0:f1:44:4a:0e:31:4f:bd:58:59:95:1f:b1:be:
         c2:ae:62:1c:b3:ba:8c:83:6f:4c:c1:03:8e:68:82:8a:a8:13:
         99:e8:10:d7:0d:73:22:bc:e5:c3:92:64:35:4a:d8:6f:ee:21:
         b8:e1:bc:ec:37:2f:53:c9:70:d8:32:75:f4:30:2a:bb:2b:ad:
         2f:6a:2a:09:5c:8b:b4:f9:6d:0b:18:56:8e:42:21:14:89:39:
         8d:90:8b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----