Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A74D44C08E5211F190C892DDCE1D38B0.roa
File:                     A74D44C08E5211F190C892DDCE1D38B0.roa (raw, json)
Hash identifier:          eaPhpZTqeUPF3x4NSg8xsXakp6z8N1qzPkFNsubVEM4=
Subject key identifier:   EA:B7:21:F5:1E:B7:B1:F4:78:35:E0:B7:74:7A:C0:6F:EE:48:62:97
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C931
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A74D44C08E5211F190C892DDCE1D38B0.roa
Signing time:             Sun 02 Aug 2026 09:15:07 +0000
ROA not before:           Sun 02 Aug 2026 09:15:03 +0000
ROA not after:            Wed 16 Sep 2026 09:15:03 +0000
asID:                     40779
IP address blocks:        45.192.96.0/20 maxlen: 24
                          45.205.16.0/20 maxlen: 24
                          45.207.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117041 (0x1c931)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  2 09:15:03 2026 GMT
            Not After : Sep 16 09:15:03 2026 GMT
        Subject: CN=6a6f0a9b-5af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5f:a8:94:0c:eb:b3:48:74:85:da:37:c6:94:
                    57:f7:f0:45:7f:29:1e:55:dc:c7:29:95:29:73:38:
                    6f:50:42:51:40:6f:ac:93:6c:28:33:12:1b:1e:ad:
                    db:cf:0b:1a:2b:ce:fd:70:eb:eb:c8:f9:c4:59:ca:
                    10:ba:8a:31:b1:94:0f:2a:95:35:71:52:00:1a:9d:
                    71:cb:b6:81:45:96:f2:e9:2c:6b:a3:0f:5e:78:16:
                    3e:38:f8:0d:fc:a7:fa:33:7a:4b:53:cb:d5:80:8f:
                    f4:90:c6:46:ec:59:a5:54:e9:cb:18:5a:c5:0c:22:
                    63:7d:53:4a:fe:9a:18:93:4b:76:66:3f:51:5d:1c:
                    d1:1d:ae:01:d1:ff:4e:f7:c3:f8:f3:e4:68:69:a0:
                    13:92:c7:ab:d4:48:65:a9:07:19:b0:f3:1f:a2:f9:
                    40:b3:49:8b:ae:ea:54:cd:ce:ce:e0:a0:fe:5c:e1:
                    c8:71:de:b8:b2:55:da:17:7f:92:26:34:ff:13:79:
                    81:1c:da:79:40:be:82:cd:b2:7f:15:9a:64:31:9d:
                    63:b9:36:c7:c5:fa:f4:f6:8a:56:1d:4f:55:81:0a:
                    f6:44:e4:7e:26:34:de:2d:c8:43:88:83:b5:08:1c:
                    d6:f3:54:67:c6:f9:09:6e:c3:70:12:4f:db:ea:3a:
                    a5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B7:21:F5:1E:B7:B1:F4:78:35:E0:B7:74:7A:C0:6F:EE:48:62:97
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A74D44C08E5211F190C892DDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.96.0/20
                  45.205.16.0/20
                  45.207.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0b:6e:9b:09:65:29:22:66:d9:a9:fd:1f:72:72:2f:1b:ee:88:
         78:a7:ec:12:5b:c3:87:0e:2c:a7:2c:66:38:d8:c4:71:12:1b:
         a3:28:2b:ae:e4:bf:f5:e7:d9:2d:39:15:02:f3:47:81:24:09:
         07:9a:b8:10:27:e7:04:10:30:fa:9c:32:29:a6:8b:41:f0:7e:
         fb:c4:91:08:1e:9c:d3:b9:5e:d0:1e:c7:e1:f8:36:41:ae:51:
         e8:3a:3a:60:1d:4f:7a:b6:79:f3:68:8f:e6:11:da:5e:4b:e8:
         8d:f7:8d:a2:82:60:55:17:85:03:b0:9c:c6:69:e4:42:d1:44:
         e1:11:03:79:c9:ff:f3:16:02:a4:98:29:cb:f4:81:6a:71:ab:
         42:8f:0f:2d:58:fd:3d:f7:22:fb:5c:ea:27:c9:25:f7:40:fa:
         c1:4d:ff:ad:25:f6:e1:f9:b9:48:f3:47:50:df:50:b2:ec:52:
         a3:12:c6:94:1d:67:84:aa:32:93:d4:50:f9:fd:3d:06:96:2a:
         22:72:4d:ba:b9:f7:4a:b8:d3:c3:3b:d1:e4:c3:d6:7b:18:bc:
         47:ef:d4:4c:c7:d0:61:75:a3:1a:e6:47:de:58:c0:bf:a3:8f:
         25:02:39:57:c5:3f:17:e4:ac:2d:fc:a5:16:bf:3e:ef:f4:76:
         ca:42:3d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----