Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92E3C8F06FB811F1BDFF9AFDCE1D38B0.roa
File:                     92E3C8F06FB811F1BDFF9AFDCE1D38B0.roa (raw, json)
Hash identifier:          zgSxZT3tqC3cUoJOVO1M9kYfp/u7ISstweF2Aks2Km4=
Subject key identifier:   67:84:F4:7D:5E:A1:AC:38:0A:AD:65:47:8F:E1:9D:95:31:12:BC:0D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C018
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92E3C8F06FB811F1BDFF9AFDCE1D38B0.roa
Signing time:             Wed 24 Jun 2026 10:36:36 +0000
ROA not before:           Wed 24 Jun 2026 10:36:31 +0000
ROA not after:            Sat 01 Aug 2026 10:36:31 +0000
asID:                     44559
IP address blocks:        156.233.8.0/24 maxlen: 24
                          156.233.32.0/24 maxlen: 24
                          156.233.33.0/24 maxlen: 24
                          156.233.35.0/24 maxlen: 24
                          156.233.40.0/24 maxlen: 24
                          156.233.43.0/24 maxlen: 24
                          156.233.46.0/24 maxlen: 24
                          156.233.49.0/24 maxlen: 24
                          156.233.50.0/24 maxlen: 24
                          156.233.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114712 (0x1c018)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 24 10:36:31 2026 GMT
            Not After : Aug  1 10:36:31 2026 GMT
        Subject: CN=6a3bb334-8de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:39:f6:e3:96:76:4a:2b:49:f9:70:4d:78:f6:
                    ca:5b:8d:df:e9:ee:fc:e0:ea:35:81:5f:38:81:4a:
                    fd:4b:d1:54:4a:01:f8:ec:b7:8a:ce:4a:3a:25:f5:
                    d7:ad:b1:a8:8a:5c:6d:38:c4:6d:f2:b6:bb:a5:9a:
                    12:9a:ef:e9:6b:d3:f6:fa:ff:0d:c4:48:47:f0:45:
                    2f:84:11:53:73:73:6b:e7:e0:b4:2a:7b:8d:82:f2:
                    3a:5a:c6:35:dc:2b:91:09:22:3d:c3:55:98:d5:85:
                    5f:c7:f7:f1:07:f6:83:89:28:23:3a:a3:22:76:b3:
                    e7:64:74:75:01:70:95:c1:42:c8:e1:0f:0d:a0:c2:
                    e0:ff:28:8c:8f:dd:cc:9f:ca:6e:81:cb:fb:eb:7a:
                    12:b9:cd:69:9b:16:a6:f3:b3:7a:ec:c3:de:98:5c:
                    11:6e:88:85:35:b2:b0:e6:bb:d9:33:f0:be:82:9c:
                    10:d6:a3:d4:32:ea:eb:85:4e:9a:a5:3d:40:2b:af:
                    1c:a3:4b:d0:8a:92:23:ea:18:2c:af:72:6a:5c:3d:
                    7b:46:ec:19:f4:5d:cc:97:dc:c9:ee:97:49:db:5a:
                    7e:19:11:9c:b3:22:f7:d2:c3:d0:2e:ac:71:d0:e5:
                    c4:96:c5:41:6d:08:2d:98:a4:af:78:1d:8e:8a:96:
                    3f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:84:F4:7D:5E:A1:AC:38:0A:AD:65:47:8F:E1:9D:95:31:12:BC:0D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92E3C8F06FB811F1BDFF9AFDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.8.0/24
                  156.233.32.0/23
                  156.233.35.0/24
                  156.233.40.0/24
                  156.233.43.0/24
                  156.233.46.0/24
                  156.233.49.0-156.233.50.255
                  156.233.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:f5:b7:77:d7:1e:0e:aa:d0:0d:aa:a1:d4:d4:20:39:4b:94:
         09:8f:e6:5c:cc:56:41:e8:0f:a4:ee:b2:2e:a3:75:75:52:0e:
         3f:a0:bd:d1:f6:f4:6c:08:77:22:65:5c:fc:c7:53:ed:ac:0a:
         c6:75:65:ff:d8:42:d5:a6:05:3c:3b:6d:e7:68:f1:93:8e:68:
         81:df:74:e9:09:ce:9e:86:be:da:91:ea:4c:c0:73:2b:cf:c0:
         2b:d8:5a:71:7c:ad:c0:e6:69:be:8e:ab:fa:3b:df:a4:74:8a:
         fd:04:57:bb:17:53:e5:61:0a:ab:38:7e:ae:d4:61:f7:e3:7e:
         d6:c9:04:07:3e:24:0d:ce:0e:ac:f7:80:0a:24:13:7c:d5:c0:
         e8:b3:fc:62:65:c6:39:00:1b:eb:b6:18:f1:0f:8d:cc:58:dd:
         43:0f:fd:b7:f2:17:b5:d0:a8:a8:f4:29:f7:a3:e8:c4:ae:d8:
         7a:15:5d:dd:4c:9c:47:01:f3:5a:01:af:6b:e5:7c:da:c1:53:
         04:a3:11:92:0b:44:7b:aa:e0:61:2b:29:ac:8d:61:3c:17:5d:
         de:46:63:03:33:b4:51:02:e5:c6:90:ba:14:8b:19:56:54:f0:
         1f:70:8c:7b:11:38:29:67:a2:db:8c:a9:17:e9:56:1f:a7:b1:
         c5:5d:18:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:29 2026 by rpki-client