Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82DEA3A06EE411F19AFB82F8CE1D38B0.roa
File:                     82DEA3A06EE411F19AFB82F8CE1D38B0.roa (raw, json)
Hash identifier:          qGBZ5jmMuLKM+x7fRLSO8k8i+5xvrAzXWdXXpVbYhX0=
Subject key identifier:   AB:43:15:5A:2D:2F:02:79:30:23:F7:E3:86:67:69:10:0F:6F:66:A7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BFC3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82DEA3A06EE411F19AFB82F8CE1D38B0.roa
Signing time:             Tue 23 Jun 2026 09:18:35 +0000
ROA not before:           Tue 23 Jun 2026 09:18:31 +0000
ROA not after:            Sun 09 Aug 2026 09:18:31 +0000
asID:                     395793
IP address blocks:        45.192.115.0/24 maxlen: 24
                          45.194.12.0/23 maxlen: 24
                          45.195.133.0/24 maxlen: 24
                          45.197.6.0/23 maxlen: 24
                          45.198.183.0/24 maxlen: 24
                          45.198.184.0/24 maxlen: 24
                          45.204.150.0/24 maxlen: 24
                          45.204.151.0/24 maxlen: 24
                          45.206.65.0/24 maxlen: 24
                          45.206.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114627 (0x1bfc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 23 09:18:31 2026 GMT
            Not After : Aug  9 09:18:31 2026 GMT
        Subject: CN=6a3a4f6b-4800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2e:0f:da:8f:cc:1b:ab:45:95:46:b3:29:15:
                    ad:bf:5e:89:d0:d1:81:ca:a7:02:4f:36:59:b9:c1:
                    4d:9d:d3:eb:b6:3e:8f:c9:db:f1:a6:44:7b:10:70:
                    ee:8c:bc:a1:b2:09:39:0c:69:9f:cc:c1:08:b6:1b:
                    6b:22:dd:c1:33:f6:c9:61:2d:cb:ce:d7:eb:ab:5c:
                    51:6a:60:f4:77:49:af:1f:25:93:bf:60:78:75:ce:
                    ba:e0:d4:14:66:1e:ad:8d:e6:2d:9e:b1:96:a4:78:
                    aa:c4:fc:3f:5c:6e:3f:3a:e0:f3:59:ae:00:ed:e8:
                    c7:06:e2:17:35:c8:d5:33:97:61:5d:93:30:f6:5d:
                    b0:22:83:da:11:0f:a1:51:60:09:23:f8:6e:40:8c:
                    0f:fa:c2:7a:48:fb:37:e9:95:ee:9d:a5:96:d5:90:
                    0e:47:1e:aa:e0:94:91:53:59:c0:21:63:fa:6b:a3:
                    9d:70:ff:f4:7b:08:7b:f9:71:23:d7:68:8c:8e:3c:
                    e1:59:85:dc:08:07:a5:08:bc:ad:a9:82:a0:ee:d7:
                    79:eb:75:73:1c:9c:63:cd:9b:8d:45:1f:78:9b:7d:
                    dd:06:7d:d6:a5:b7:5a:92:59:0d:6b:53:26:6e:39:
                    2e:0c:5b:cf:e0:67:ea:f3:d6:ce:af:a5:c9:dc:24:
                    b1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:43:15:5A:2D:2F:02:79:30:23:F7:E3:86:67:69:10:0F:6F:66:A7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/82DEA3A06EE411F19AFB82F8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.115.0/24
                  45.194.12.0/23
                  45.195.133.0/24
                  45.197.6.0/23
                  45.198.183.0-45.198.184.255
                  45.204.150.0/23
                  45.206.65.0-45.206.66.255

    Signature Algorithm: sha256WithRSAEncryption
         71:19:cb:f2:8f:a3:9f:14:84:c0:da:0a:37:db:f0:78:b8:3f:
         b0:c2:7d:ec:3e:bf:68:55:41:d7:e5:d5:82:3d:b4:7c:9e:5c:
         8c:38:48:ef:cd:8b:7e:ba:9d:13:0d:7f:f5:ea:23:03:8d:50:
         a2:c8:03:05:fb:ce:25:ca:aa:d3:4c:1d:56:a0:b7:dc:c6:48:
         05:b3:5d:a0:52:0f:1d:52:1f:c1:25:fd:61:20:ad:4b:db:1a:
         09:41:38:50:a6:b0:75:f9:20:ee:1b:40:bf:32:79:ce:4a:4a:
         bd:bf:4a:5d:40:e2:8b:aa:f2:e5:3a:39:fa:c9:96:92:8a:93:
         e6:4d:d8:cf:9a:a5:69:ff:ae:a2:74:d9:03:c2:7b:13:e1:f7:
         d2:0c:da:35:4e:9c:67:50:f1:4e:1a:19:39:7c:83:ad:70:41:
         bb:f7:16:6a:0b:87:86:53:cb:37:f3:ae:23:b6:ba:c1:79:82:
         d7:14:bf:18:7f:5f:0e:5b:f7:0a:1a:78:fe:3e:3a:31:e5:9a:
         f2:12:d4:b3:8b:63:8a:8a:61:60:fc:0c:6d:2c:e8:6c:c6:f7:
         78:6a:39:33:c8:da:bf:ff:d1:09:ce:93:d3:37:30:a2:c3:db:
         8b:10:27:a3:40:89:1e:1d:f0:75:d8:63:f0:00:cb:3f:7a:e1:
         7d:fa:3f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:36 2026 by rpki-client