Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B940A6446C7A11F19E57E101CF1D38B0.roa
File:                     B940A6446C7A11F19E57E101CF1D38B0.roa (raw, json)
Hash identifier:          8RlPU0sbklVZYxOYOD6ANxZkdNtPfjcfv2k63wSRaGQ=
Subject key identifier:   83:72:EC:8C:81:72:A7:5F:49:42:74:89:71:DE:07:B4:7F:BF:E8:28
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BF26
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B940A6446C7A11F19E57E101CF1D38B0.roa
Signing time:             Sat 20 Jun 2026 07:36:18 +0000
ROA not before:           Sat 20 Jun 2026 07:36:13 +0000
ROA not after:            Sun 26 Jul 2026 07:36:13 +0000
asID:                     7029
IP address blocks:        45.194.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114470 (0x1bf26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 20 07:36:13 2026 GMT
            Not After : Jul 26 07:36:13 2026 GMT
        Subject: CN=6a3642f2-977a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:36:4e:49:4b:68:c9:fb:d8:e7:b4:06:2f:01:
                    cd:34:93:55:81:38:4c:e2:4e:b2:ef:13:52:78:a0:
                    22:b9:c7:5c:b9:8e:e1:41:26:9f:cc:b1:3b:0f:33:
                    79:02:96:7c:5b:fe:c1:20:98:2e:69:6a:1f:9b:aa:
                    23:a3:df:9a:ca:82:de:ce:14:b7:26:53:e2:35:94:
                    f5:bf:c2:95:c9:61:cc:86:3c:eb:4b:05:cf:e1:06:
                    de:26:14:bc:8a:d0:99:e8:5d:a9:a9:0e:c1:1a:b9:
                    d7:b6:4e:d6:fe:d5:52:10:4c:75:e8:6d:42:3d:81:
                    5c:06:7c:28:68:25:3f:05:aa:c1:6d:54:2f:0c:09:
                    ff:dd:7d:41:c1:4d:8d:1a:06:2a:77:8f:d6:b5:0d:
                    35:ae:5e:30:b5:52:a1:a3:d3:ed:fa:73:be:f0:4b:
                    2e:87:7a:4a:76:74:38:79:37:ea:e0:60:57:b7:fc:
                    44:19:a5:bb:85:07:83:d2:4b:b2:ac:52:c3:59:f0:
                    ac:6a:89:2f:70:cd:b8:7c:17:cc:bc:b3:53:4a:b6:
                    00:97:6a:d3:a8:49:0c:16:4c:4e:26:22:01:7d:78:
                    c9:90:47:ca:68:f6:9d:14:b2:ca:d9:b5:c1:1a:94:
                    b2:05:a4:ce:1e:9e:f7:d3:ba:2a:c3:db:54:6a:85:
                    b0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:72:EC:8C:81:72:A7:5F:49:42:74:89:71:DE:07:B4:7F:BF:E8:28
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B940A6446C7A11F19E57E101CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:64:89:3e:a3:2e:63:f9:cf:4e:1e:e7:14:65:47:c8:c8:8f:
         3f:79:fd:63:8b:ff:eb:59:d6:98:7d:e9:09:c0:87:76:c6:ad:
         f2:d9:ff:62:13:92:97:1b:c4:3b:6c:bf:d7:b3:d0:17:3c:46:
         03:f1:e0:54:b6:d1:aa:65:2a:94:4c:0d:ef:17:13:8c:5f:93:
         7b:9c:74:a1:c6:c8:a9:05:bf:d3:dc:46:40:8a:bf:f6:81:b9:
         c0:1a:99:5d:4d:43:b7:c5:63:a3:ca:6e:2b:c0:ab:13:02:b7:
         78:2d:38:19:15:89:33:d0:9f:b2:3f:ef:ce:80:a2:0b:34:3d:
         f7:ac:08:b9:1b:6c:e2:4b:0f:1f:ff:90:4c:02:fe:83:30:5a:
         93:65:f9:c3:65:4e:84:bb:31:8b:0b:15:d5:66:51:5e:8d:48:
         ef:ff:bf:c8:a1:64:a7:b9:00:d1:61:74:1a:0b:51:af:37:bd:
         1d:b1:67:96:8c:6c:a2:50:d6:2b:a8:a4:42:d5:3b:c6:e9:ee:
         7d:ea:13:30:1c:5e:9f:a5:6a:14:97:68:a4:b4:06:79:2a:54:
         0c:42:fb:01:7d:6b:6c:aa:49:1a:86:10:a5:46:35:5d:a3:a9:
         51:f7:70:23:9c:44:9f:75:94:59:b2:1f:8e:a9:55:bf:e4:34:
         9c:d7:9e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:44:03 2026 by rpki-client