Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAEA4F9A7F6D11F1AFA2ABB9CE1D38B0.roa
File:                     AAEA4F9A7F6D11F1AFA2ABB9CE1D38B0.roa (raw, json)
Hash identifier:          PMdMFuFpJClQoA2Cux4kA8hVEkSPzyU9P/59vMoQFgQ=
Subject key identifier:   67:62:14:29:C9:51:B3:CC:80:A2:B2:68:3C:E2:4E:51:89:46:94:52
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C50D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAEA4F9A7F6D11F1AFA2ABB9CE1D38B0.roa
Signing time:             Tue 14 Jul 2026 10:20:42 +0000
ROA not before:           Tue 14 Jul 2026 10:20:38 +0000
ROA not after:            Fri 21 Aug 2026 10:20:38 +0000
asID:                     401783
IP address blocks:        156.252.9.0/24 maxlen: 24
                          156.252.177.0/24 maxlen: 24
                          156.252.178.0/24 maxlen: 24
                          156.252.179.0/24 maxlen: 24
                          156.252.180.0/24 maxlen: 24
                          156.252.181.0/24 maxlen: 24
                          156.252.182.0/24 maxlen: 24
                          156.252.183.0/24 maxlen: 24
                          156.252.184.0/24 maxlen: 24
                          156.252.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115981 (0x1c50d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 14 10:20:38 2026 GMT
            Not After : Aug 21 10:20:38 2026 GMT
        Subject: CN=6a560d7a-48c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:8f:bd:c9:d8:36:4d:c1:bc:4e:7a:5d:06:
                    a6:19:f2:15:c9:ea:1f:3c:f1:d9:3e:b0:1d:d3:09:
                    bb:d2:a9:3c:d6:e6:a5:94:08:1d:5c:01:4f:ca:f2:
                    0d:10:28:6a:13:4b:05:9e:1e:ef:2b:0e:cc:92:5b:
                    96:e1:2d:6d:e3:f2:59:61:10:f3:00:2e:28:cd:61:
                    b8:3e:75:9e:95:ab:9f:35:bb:93:e2:43:98:52:79:
                    3b:ad:34:a2:87:96:17:f6:07:51:2b:9d:5a:c4:77:
                    73:21:af:24:ce:54:4b:c7:bc:da:fe:43:84:3d:f5:
                    a3:c6:1b:d2:df:17:07:7e:e8:f2:54:7e:ad:d5:99:
                    c9:a2:37:63:26:e7:d0:ca:65:51:18:f6:04:ed:bc:
                    8c:4f:0f:d9:6c:87:1e:de:1b:c8:a0:6c:85:0e:cb:
                    3d:26:e9:bb:6d:5b:83:90:09:3a:63:f8:3a:a4:f8:
                    5c:35:a5:bf:4e:14:42:d0:44:67:3a:2d:79:cc:91:
                    f7:38:52:f9:b1:a0:3b:f9:e5:64:5c:af:41:f1:1a:
                    09:8e:c1:c4:a9:93:8f:46:09:d7:54:84:55:25:81:
                    5b:e0:93:16:bc:b6:9a:82:17:dc:42:64:1b:5b:49:
                    4f:6e:47:48:f7:69:77:32:6c:16:1f:bb:ea:91:90:
                    e7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:62:14:29:C9:51:B3:CC:80:A2:B2:68:3C:E2:4E:51:89:46:94:52
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAEA4F9A7F6D11F1AFA2ABB9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.252.9.0/24
                  156.252.177.0-156.252.184.255
                  156.252.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:38:46:ed:5e:10:37:34:53:46:2c:ff:44:df:1d:cd:09:fe:
         43:93:4f:6c:4c:0f:59:2f:85:ee:60:3e:72:a1:ca:2c:5b:59:
         98:59:42:21:76:d3:81:7c:87:c9:c6:b0:e3:57:02:d9:18:bd:
         b7:e5:e8:1c:ec:f7:4b:e3:f6:ea:97:e0:41:dd:3e:67:fd:a9:
         0a:67:2c:8e:23:94:dd:41:52:d6:c8:b1:0e:0c:e5:4c:d2:6a:
         1c:65:a8:94:76:22:a7:20:03:7c:73:47:ee:b3:f5:2a:59:8e:
         c5:d0:0c:90:9b:11:1b:c4:61:23:b5:bb:e9:1f:d3:79:5e:84:
         61:e7:50:9d:a0:1b:42:3c:d3:ba:f6:47:fa:c6:6e:e4:e2:30:
         be:b2:85:79:74:98:40:cb:13:97:e0:60:92:91:79:17:49:8f:
         25:b2:98:8c:15:c4:d8:7b:19:7a:21:a3:3c:32:d9:35:a2:e4:
         e5:87:e3:ef:f1:ab:84:c3:08:12:3e:69:2f:73:28:fd:e2:e4:
         c6:7e:4d:2a:c3:95:c8:f2:77:46:60:d4:60:81:e7:f9:cb:b0:
         28:7d:5c:8a:f0:07:d3:82:15:5a:ba:d8:dd:11:c0:14:da:12:
         3b:9f:b6:63:04:61:28:16:4d:d0:ce:f9:af:e6:91:6e:e3:8a:
         a0:6c:df:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:47 2026 by rpki-client