Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/738FEB58816711F186AF34FCCE1D38B0.roa
File:                     738FEB58816711F186AF34FCCE1D38B0.roa (raw, json)
Hash identifier:          QQpcph77hK51uWObjGRrf94WF7QDpLh3fjmnNImzRW4=
Subject key identifier:   9E:29:54:EC:95:1D:C9:58:82:46:0A:BA:E7:15:BB:55:66:61:9F:06
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C584
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/738FEB58816711F186AF34FCCE1D38B0.roa
Signing time:             Thu 16 Jul 2026 22:41:15 +0000
ROA not before:           Thu 16 Jul 2026 22:41:11 +0000
ROA not after:            Thu 20 Aug 2026 22:41:11 +0000
asID:                     139923
IP address blocks:        156.254.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116100 (0x1c584)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 16 22:41:11 2026 GMT
            Not After : Aug 20 22:41:11 2026 GMT
        Subject: CN=6a595e0b-b708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a4:29:b6:43:7b:df:af:d5:48:76:64:0a:81:
                    c0:36:62:d6:2b:de:9a:04:f1:e5:bb:28:eb:02:5b:
                    2b:61:d1:de:78:f3:fe:62:05:23:04:1a:7b:61:93:
                    be:83:43:2f:ef:f8:5c:9d:e7:f2:a1:ca:da:5b:ee:
                    4a:91:51:54:06:48:4e:86:56:77:82:53:17:b1:12:
                    e8:33:ae:28:2f:52:d1:7d:f7:48:84:60:4c:25:5c:
                    1c:64:bf:aa:97:7b:66:13:d2:48:79:a2:d7:28:26:
                    1a:0d:c0:ba:27:67:43:f6:d9:72:6a:74:76:35:8e:
                    1c:91:a4:fc:f5:6b:a0:f7:1a:d6:96:71:ee:e4:34:
                    37:26:a8:7e:31:04:00:09:96:de:31:5e:0e:6a:e1:
                    0a:bf:46:ae:b1:f6:f6:ea:3b:4b:28:4c:35:d6:ce:
                    d9:aa:10:c6:5c:69:61:61:b2:aa:04:82:3b:c9:e8:
                    6c:95:4f:c4:66:7c:3e:d3:84:11:d0:71:09:b9:48:
                    5b:0a:48:13:ad:ca:75:05:13:ca:03:a0:85:23:4d:
                    6b:0e:bd:21:aa:ef:5d:72:04:b3:da:e3:6a:48:b3:
                    c5:2e:33:3a:ae:95:58:1e:5d:e8:f9:63:2e:1f:1c:
                    9a:2a:04:fa:25:be:e7:06:9d:45:45:f2:e5:c9:60:
                    9b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:29:54:EC:95:1D:C9:58:82:46:0A:BA:E7:15:BB:55:66:61:9F:06
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/738FEB58816711F186AF34FCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:c7:2d:8f:ba:da:84:e3:83:3b:a8:c4:53:ae:8a:49:e0:e3:
         75:53:6a:6b:ff:27:df:19:54:b4:58:30:ae:dc:19:37:c6:ed:
         8b:08:19:93:ad:f6:51:cf:9c:c0:5c:1a:95:26:23:c3:13:f4:
         0d:b5:bb:ab:eb:12:cc:28:fa:75:97:cb:a2:8f:5a:1e:d2:d1:
         cb:25:0e:f1:bf:af:fe:54:78:48:eb:05:88:c6:de:d3:8d:70:
         4c:22:19:3c:c7:6f:13:69:b2:62:30:d1:25:d0:10:d3:10:70:
         65:80:71:7b:dc:3e:a6:03:dd:d5:00:78:27:98:1d:4f:03:4f:
         56:ad:c5:99:89:53:14:e3:ce:44:a1:69:ca:d0:a2:b6:17:55:
         ef:3f:2a:02:b8:f0:a5:e0:9c:dc:77:19:b9:b6:2f:7b:45:a5:
         42:35:ea:eb:7c:19:3c:25:02:64:ed:b8:f3:d5:ed:28:69:7e:
         00:27:ab:4e:5e:52:54:33:6d:04:12:50:6b:66:e1:54:09:0c:
         27:ae:70:47:1e:7e:df:64:21:69:f5:15:a6:d7:66:fe:1a:73:
         6c:1b:f5:5d:9e:c8:e5:57:ca:96:6d:18:09:a8:80:41:a4:76:
         7f:7a:b1:1e:d0:37:1f:0f:d5:e2:34:d5:4d:08:86:3c:2a:66:
         ae:ae:43:9e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcWEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzE2MjI0MTExWhcNMjYwODIwMjI0MTExWjAYMRYw
FAYDVQQDEw02YTU5NWUwYi1iNzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuKQptkN736/VSHZkCoHANmLWK96aBPHluyjrAlsrYdHeePP+YgUjBBp7
YZO+g0Mv7/hcnefyocraW+5KkVFUBkhOhlZ3glMXsRLoM64oL1LRffdIhGBMJVwc
ZL+ql3tmE9JIeaLXKCYaDcC6J2dD9tlyanR2NY4ckaT89Wug9xrWlnHu5DQ3Jqh+
MQQACZbeMV4OauEKv0ausfb26jtLKEw11s7ZqhDGXGlhYbKqBII7yehslU/EZnw+
04QR0HEJuUhbCkgTrcp1BRPKA6CFI01rDr0hqu9dcgSz2uNqSLPFLjM6rpVYHl3o
+WMuHxyaKgT6Jb7nBp1FRfLlyWCbaQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJ4p
VOyVHclYgkYKuucVu1VmYZ8GMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83MzhGRUI1ODgxNjcxMUYxODZBRjM0RkNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnP4FMA0GCSqGSIb3DQEBCwUA
A4IBAQBDxy2PutqE44M7qMRTropJ4ON1U2pr/yffGVS0WDCu3Bk3xu2LCBmTrfZR
z5zAXBqVJiPDE/QNtbur6xLMKPp1l8uij1oe0tHLJQ7xv6/+VHhI6wWIxt7TjXBM
Ihk8x28TabJiMNEl0BDTEHBlgHF73D6mA93VAHgnmB1PA09WrcWZiVMU485EoWnK
0KK2F1XvPyoCuPCl4Jzcdxm5ti97RaVCNerrfBk8JQJk7bjz1e0oaX4AJ6tOXlJU
M20EElBrZuFUCQwnrnBHHn7fZCFp9RWm12b+GnNsG/VdnsjlV8qWbRgJqIBBpHZ/
erEe0DcfD9XiNNVNCIY8KmaurkOe
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:20 2026 by rpki-client