Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96C3AD22510011F18A2A36F1CE1D38B0.roa
File:                     96C3AD22510011F18A2A36F1CE1D38B0.roa (raw, json)
Hash identifier:          ZslCRx/84sOPUkDEMZAa370A4ldm7NSIZSoEJ+dGvog=
Subject key identifier:   D6:B4:D0:C6:EB:9B:95:3F:92:3E:CD:43:8E:59:C5:95:DB:7A:16:74
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B503
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96C3AD22510011F18A2A36F1CE1D38B0.roa
Signing time:             Sat 16 May 2026 08:24:00 +0000
ROA not before:           Sat 16 May 2026 08:23:54 +0000
ROA not after:            Mon 22 Jun 2026 08:23:54 +0000
asID:                     273986
IP address blocks:        45.194.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 04 Jun 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111875 (0x1b503)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 16 08:23:54 2026 GMT
            Not After : Jun 22 08:23:54 2026 GMT
        Subject: CN=6a0829a0-9e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8b:d3:17:26:da:74:2d:87:df:e6:7f:bf:16:
                    11:20:e0:43:d7:e4:be:c3:42:53:e5:b4:30:c5:d4:
                    45:ca:13:1a:5d:a4:45:0e:1c:69:23:26:fb:02:16:
                    97:86:35:b3:55:cd:7c:5b:7f:5d:a3:d2:d2:1f:c8:
                    e7:3a:46:9f:e3:df:9a:98:ba:61:86:85:15:8c:f2:
                    50:b5:a4:6f:7a:2b:ae:59:90:62:b3:15:bc:57:ad:
                    ff:5b:59:f1:26:46:f0:b8:ea:4c:c3:26:2a:5a:2a:
                    c1:01:16:6d:50:b8:1e:ef:96:af:40:52:97:17:0a:
                    10:9b:d0:e5:cb:af:28:f2:d5:53:d0:04:ef:a2:87:
                    ff:43:4a:03:7f:94:4e:92:56:3d:58:b9:7b:4c:6a:
                    4e:1a:bb:98:66:48:0d:3d:d9:68:f5:36:50:b1:15:
                    b4:8a:f0:55:27:38:4f:96:9c:33:92:eb:4c:25:d1:
                    f7:ff:b6:a3:17:42:23:c8:d4:48:1e:83:c1:8f:92:
                    84:d1:46:de:4e:86:fe:c2:95:82:c8:88:3a:eb:6e:
                    40:80:16:29:2e:c3:4d:f8:d0:67:1b:2f:c3:e2:69:
                    41:af:71:9f:cb:91:51:6a:ca:d1:2e:a2:8f:94:45:
                    e6:de:bb:db:f0:84:c6:76:fb:25:30:f8:3f:df:39:
                    43:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B4:D0:C6:EB:9B:95:3F:92:3E:CD:43:8E:59:C5:95:DB:7A:16:74
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96C3AD22510011F18A2A36F1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:c7:ed:9f:65:98:9d:de:1b:dd:0e:d7:be:4d:50:86:6c:68:
         04:ba:c1:b2:62:4f:32:90:c2:2b:9e:a7:6c:c4:4e:64:c8:5f:
         67:7e:81:7c:7f:d0:f9:62:83:2b:b4:a8:5c:2c:88:88:f4:2b:
         3c:36:6f:01:2d:fa:a7:3c:d9:58:bb:5f:55:cf:1d:dd:50:c6:
         d7:e6:c9:4c:ae:e3:cd:95:0f:01:83:52:98:49:f0:8d:6c:90:
         c2:61:25:b4:e3:0a:fa:aa:35:8e:57:73:3e:3b:0f:a8:89:38:
         fc:74:7b:4e:d9:d1:04:3e:d2:01:20:83:97:35:bd:6f:59:ba:
         50:d3:75:2c:37:c8:3b:5e:26:a3:be:7a:e9:5c:ee:da:be:b0:
         2f:70:bf:89:a2:cf:e5:55:fb:70:30:fc:63:be:d8:8d:70:89:
         62:74:4c:a4:1f:b5:17:5d:43:ed:00:fd:d2:45:d0:e0:69:a8:
         3b:39:ca:0c:ad:6e:ae:b6:89:1b:31:85:56:db:36:a0:84:be:
         c6:1a:cf:8e:dc:00:66:76:57:5d:20:b7:51:e5:83:da:1c:8c:
         30:d2:76:17:10:03:7d:c4:bc:08:c0:00:c1:a4:dd:85:8f:44:
         ca:9a:2a:5c:25:e7:f4:dd:f8:8e:38:35:31:83:cf:20:90:e1:
         3d:ad:2d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:13:57 2026 by rpki-client