Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B78B735C81B911F180984301CF1D38B0.roa
File:                     B78B735C81B911F180984301CF1D38B0.roa (raw, json)
Hash identifier:          z/m9yXz8L3haPW5/UH0BRF+eFZR5WU6fAqqemTO72/0=
Subject key identifier:   A5:E0:7F:44:E1:DA:98:35:16:FF:FD:CC:4E:61:3D:CC:F5:72:2F:65
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C5B6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B78B735C81B911F180984301CF1D38B0.roa
Signing time:             Fri 17 Jul 2026 08:30:08 +0000
ROA not before:           Fri 17 Jul 2026 08:30:04 +0000
ROA not after:            Mon 24 Aug 2026 08:30:04 +0000
asID:                     401783
IP address blocks:        156.230.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116150 (0x1c5b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 17 08:30:04 2026 GMT
            Not After : Aug 24 08:30:04 2026 GMT
        Subject: CN=6a59e80f-0fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:60:0d:b9:45:9a:63:37:6d:4a:9f:c6:e4:6c:
                    4d:b1:8d:08:01:75:31:7a:ec:84:da:2f:23:09:50:
                    01:3d:8c:6d:b9:a4:e1:33:7f:bb:cc:8a:2b:f3:e3:
                    b4:62:39:d5:e5:61:ab:9f:65:5c:6e:77:f7:41:0c:
                    4d:38:11:a4:cb:b4:8c:61:0f:6f:e1:a1:4c:b7:30:
                    0b:60:61:fc:99:3b:38:80:62:e8:89:44:59:45:80:
                    a2:da:42:5b:1c:57:29:36:ba:31:bc:d5:46:9a:77:
                    3b:b0:db:e0:5f:1b:12:76:d5:01:31:54:8f:57:ab:
                    10:bc:5c:2b:47:3a:85:80:97:b0:8d:67:5f:fe:81:
                    0e:7f:4d:0a:ee:b6:5f:72:83:f8:8c:17:c7:1a:1c:
                    4f:7a:a6:d5:02:f2:a7:d6:78:1a:b5:14:12:bd:5d:
                    b1:47:e0:e1:31:a7:cd:35:fe:b9:5f:20:74:89:57:
                    24:01:28:58:cf:31:a9:67:26:d8:de:6b:c2:a3:0b:
                    e6:e9:15:b1:48:db:7f:76:eb:3f:4c:41:78:2e:57:
                    52:61:2b:a7:c7:f2:fa:1c:b3:64:a4:1c:d0:b5:22:
                    d6:de:19:0e:bc:03:6c:25:84:30:90:8a:78:ca:c3:
                    b0:c4:92:91:e9:2c:42:40:06:26:65:6e:1c:7c:4c:
                    f7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E0:7F:44:E1:DA:98:35:16:FF:FD:CC:4E:61:3D:CC:F5:72:2F:65
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B78B735C81B911F180984301CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.230.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:2c:82:03:ed:94:69:17:4e:7b:d3:a9:22:f8:24:6c:11:cf:
         ad:33:c6:9f:5a:d9:13:de:f9:5f:11:35:a7:07:83:45:2f:91:
         fe:e8:97:14:41:ad:8e:80:eb:16:a3:97:78:43:7c:0c:f5:c5:
         f7:d7:b6:e4:4b:52:59:42:d6:ca:a9:d4:e8:51:c0:8b:74:e0:
         42:d0:09:b8:d6:68:9f:b4:ab:1f:bf:5f:49:6b:00:0b:52:db:
         dc:8c:3f:c5:3c:79:c8:87:be:79:c6:20:17:26:00:06:49:fb:
         e2:73:91:03:2f:4b:19:2c:15:c1:f9:18:f9:78:87:ce:b9:a6:
         68:34:c1:ec:45:c1:8c:c9:90:ca:4b:89:ae:03:dd:6f:41:f6:
         b9:8b:45:96:07:38:5e:18:58:5b:f2:09:aa:69:ad:b6:03:2d:
         8b:36:2a:88:1e:ac:d2:07:a0:ad:9a:b1:48:54:96:35:0d:36:
         ab:42:73:5b:36:17:d9:ff:90:92:e1:1b:00:7c:a2:78:ea:b6:
         0d:83:37:93:8d:96:10:9d:da:c4:dd:5b:44:89:ef:30:d0:ff:
         40:8d:ee:d4:1e:68:a1:bd:08:69:c9:ca:01:4d:a0:46:12:67:
         b8:c5:e1:fd:cd:90:38:6f:03:46:68:63:43:78:8d:33:8f:29:
         1d:26:15:b7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcW2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzE3MDgzMDA0WhcNMjYwODI0MDgzMDA0WjAYMRYw
FAYDVQQDEw02YTU5ZTgwZi0wZmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtmANuUWaYzdtSp/G5GxNsY0IAXUxeuyE2i8jCVABPYxtuaThM3+7zIor
8+O0YjnV5WGrn2Vcbnf3QQxNOBGky7SMYQ9v4aFMtzALYGH8mTs4gGLoiURZRYCi
2kJbHFcpNroxvNVGmnc7sNvgXxsSdtUBMVSPV6sQvFwrRzqFgJewjWdf/oEOf00K
7rZfcoP4jBfHGhxPeqbVAvKn1ngatRQSvV2xR+DhMafNNf65XyB0iVckAShYzzGp
ZybY3mvCowvm6RWxSNt/dus/TEF4LldSYSunx/L6HLNkpBzQtSLW3hkOvANsJYQw
kIp4ysOwxJKR6SxCQAYmZW4cfEz3+QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKXg
f0Th2pg1Fv/9zE5hPcz1ci9lMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CNzhCNzM1QzgxQjkxMUYxODA5ODQzMDFDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOagMA0GCSqGSIb3DQEBCwUA
A4IBAQAyLIID7ZRpF05706ki+CRsEc+tM8afWtkT3vlfETWnB4NFL5H+6JcUQa2O
gOsWo5d4Q3wM9cX317bkS1JZQtbKqdToUcCLdOBC0Am41miftKsfv19JawALUtvc
jD/FPHnIh755xiAXJgAGSfvic5EDL0sZLBXB+Rj5eIfOuaZoNMHsRcGMyZDKS4mu
A91vQfa5i0WWBzheGFhb8gmqaa22Ay2LNiqIHqzSB6CtmrFIVJY1DTarQnNbNhfZ
/5CS4RsAfKJ46rYNgzeTjZYQndrE3VtEie8w0P9Aje7UHmihvQhpycoBTaBGEme4
xeH9zZA4bwNGaGNDeI0zjykdJhW3
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:30 2026 by rpki-client