Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83461A0080F311F198A12CCBCE1D38B0.roa
File:                     83461A0080F311F198A12CCBCE1D38B0.roa (raw, json)
Hash identifier:          FZyiN1SMtGwIi4wi6LFzT98eqLb9x5a7JbwisZDglIM=
Subject key identifier:   EC:95:6D:F2:8A:94:07:E1:B5:4C:1A:2C:59:54:72:9A:2D:95:2E:01
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C551
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83461A0080F311F198A12CCBCE1D38B0.roa
Signing time:             Thu 16 Jul 2026 08:51:20 +0000
ROA not before:           Thu 16 Jul 2026 08:51:16 +0000
ROA not after:            Sun 26 Jul 2026 08:51:16 +0000
asID:                     154321
IP address blocks:        156.226.176.0/22 maxlen: 24
                          156.226.176.0/24 maxlen: 24
                          156.226.177.0/24 maxlen: 24
                          156.226.178.0/24 maxlen: 24
                          156.226.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116049 (0x1c551)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 16 08:51:16 2026 GMT
            Not After : Jul 26 08:51:16 2026 GMT
        Subject: CN=6a589b87-38b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7c:6e:d4:d2:89:29:d2:8b:cf:53:75:33:e8:
                    0d:14:7e:0b:e6:ff:22:ed:4d:ae:67:5d:6d:2b:83:
                    b7:d1:ee:ea:f7:6f:2f:1b:dd:65:0b:a3:62:12:86:
                    48:20:76:cd:0a:85:2d:c3:d2:cb:1c:df:f7:ab:b8:
                    c8:a0:12:60:79:59:11:02:ed:51:93:f0:67:de:e9:
                    82:ca:89:1f:06:ee:4b:b9:06:21:91:0b:fe:93:25:
                    82:a9:af:1c:4c:1d:86:d1:3c:a2:76:ee:ab:85:69:
                    2b:cc:d0:04:f0:f4:af:43:31:30:2f:11:f0:9d:3d:
                    82:da:0f:87:c7:e0:ff:58:21:dc:fd:9a:e3:4c:eb:
                    16:7b:ad:6b:71:ea:01:90:85:36:c0:e9:02:b9:74:
                    74:f3:8d:57:0a:4c:5f:36:c8:73:ab:e1:24:87:59:
                    ab:89:c8:d7:1f:21:1d:fd:85:16:b3:74:1d:d3:a7:
                    e9:ff:7c:f6:0c:ca:fa:13:d6:0b:44:47:79:94:7d:
                    41:d4:3d:25:b9:39:f4:9d:76:c4:e0:05:a8:7c:03:
                    b8:2f:e8:74:7d:9f:91:fc:6e:9c:03:da:7a:73:4e:
                    b8:f3:fd:cc:4e:45:da:64:b0:6f:1e:4f:35:e1:9d:
                    f3:46:d0:df:b1:58:5a:be:07:e6:ab:73:c3:c8:bc:
                    c6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:95:6D:F2:8A:94:07:E1:B5:4C:1A:2C:59:54:72:9A:2D:95:2E:01
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83461A0080F311F198A12CCBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:7f:a4:28:3c:7f:82:ac:77:c9:60:9a:c6:93:af:c8:a8:57:
         74:50:1a:bc:d4:bd:d6:01:43:e0:88:da:8a:aa:ce:89:d6:ba:
         5d:88:67:8f:1a:03:87:ac:b3:36:04:d0:73:07:e3:1a:83:89:
         71:28:37:18:37:70:1f:cc:ea:d3:f6:18:9f:6e:7d:fa:dc:d0:
         ab:31:41:5f:44:3a:22:49:11:15:62:0d:d0:ca:ae:9f:38:63:
         3c:12:58:2c:b0:a8:aa:bb:c5:43:b2:8e:7b:69:03:db:2a:0a:
         87:b0:a3:be:38:9f:93:32:96:44:5d:2e:aa:6a:dd:ac:a4:7d:
         2d:ce:23:61:99:59:71:44:f7:bf:a4:cc:50:e2:46:a0:aa:39:
         c6:bc:22:26:bb:b8:26:45:a9:21:d0:b3:fe:f2:18:78:f7:d7:
         f8:e3:29:01:e2:34:58:ca:90:c4:8e:46:3b:bc:dd:3a:48:4e:
         bd:81:fe:53:37:1f:15:06:b3:ce:60:70:58:46:5b:17:30:05:
         5f:df:af:99:88:da:c5:5e:ca:1d:4b:02:a0:d2:46:b1:2c:d4:
         0f:1f:ab:b5:06:d6:85:78:57:1a:ed:f6:d7:70:30:cb:8f:f2:
         94:4c:e0:5f:15:2a:33:f8:58:d3:27:db:3b:c1:59:c5:4e:35:
         d6:2f:f3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:20 2026 by rpki-client