Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BEE7D4ECA51311F1900BBE08CF1D38B0.roa
File:                     BEE7D4ECA51311F1900BBE08CF1D38B0.roa (raw, json)
Hash identifier:          ljIj8cN4rt7Ew8qKcH0ZXietPXebgdmRKIDaA4SK1tg=
Subject key identifier:   A2:F2:1A:31:16:F3:1A:79:09:43:C5:9C:1A:C6:4E:99:C7:D7:E5:50
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D210
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BEE7D4ECA51311F1900BBE08CF1D38B0.roa
Signing time:             Mon 31 Aug 2026 08:12:45 +0000
ROA not before:           Mon 31 Aug 2026 08:12:41 +0000
ROA not after:            Thu 30 Aug 2029 08:12:41 +0000
asID:                     17561
IP address blocks:        45.199.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119312 (0x1d210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 31 08:12:41 2026 GMT
            Not After : Aug 30 08:12:41 2029 GMT
        Subject: CN=6a95377d-62c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:85:df:0c:0c:13:14:a5:08:29:80:0a:ae:
                    03:19:93:f9:6a:90:20:87:3a:f7:47:24:79:e8:16:
                    7b:b1:9d:8a:5e:46:83:da:c9:cb:30:8e:6b:35:dc:
                    16:c2:ea:8e:e2:3d:47:27:f6:ea:f8:66:14:88:f1:
                    d7:cb:76:23:07:c4:68:d6:af:f9:d8:10:5f:2b:5e:
                    c7:79:fe:9f:06:46:2e:46:dc:5d:7a:af:89:c2:f1:
                    da:ae:8b:38:84:1c:69:51:6b:46:86:16:0a:e1:b2:
                    aa:9c:4e:46:73:b1:8d:1e:82:4a:a0:53:90:32:26:
                    83:f6:ed:7a:77:f2:c9:37:41:d2:a8:5f:17:25:62:
                    ec:a0:69:ff:5e:bf:2f:48:2d:25:24:83:f8:6b:42:
                    69:f9:48:ec:ea:0f:d5:26:eb:04:2c:d5:e7:db:1b:
                    aa:55:b6:24:41:4a:f7:cc:24:12:a5:7a:29:51:16:
                    33:ca:6d:9e:f1:d7:f5:98:09:d7:82:9c:52:1f:41:
                    c7:44:e4:4b:02:67:64:ed:a7:f3:43:40:af:b9:c9:
                    c8:0e:6b:2d:1d:e2:61:a7:c8:8a:56:aa:00:38:4f:
                    c5:1a:ac:72:ad:9d:a3:6f:d6:12:04:91:32:a8:24:
                    3e:22:70:41:18:0f:79:42:d2:95:bd:25:4d:7a:2a:
                    79:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F2:1A:31:16:F3:1A:79:09:43:C5:9C:1A:C6:4E:99:C7:D7:E5:50
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BEE7D4ECA51311F1900BBE08CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:d1:81:fd:03:91:51:02:c6:44:0d:e4:39:8d:71:89:7d:b1:
         8f:89:cd:e4:79:6d:89:a1:6d:42:46:23:84:34:81:b1:d9:0d:
         6d:50:d7:54:75:c2:25:91:48:7a:41:b5:c8:7e:c3:a6:ad:cc:
         f7:a4:f5:c3:8b:62:42:ed:bd:54:df:48:51:6e:9e:32:46:46:
         0e:7d:94:0a:e0:c5:25:4a:7d:34:af:e5:ec:97:44:82:b6:99:
         ff:cc:de:2e:50:81:2c:fa:22:99:01:8f:11:9c:36:90:24:05:
         b6:4d:82:12:a4:96:08:b1:df:8d:0d:be:2e:e8:59:43:07:9f:
         c8:45:eb:f8:01:35:5b:c7:83:be:18:fa:e6:46:b0:6e:e5:5f:
         e7:26:51:8b:19:94:f1:f9:5a:32:40:86:66:65:4d:12:a7:e9:
         52:79:4c:d3:83:e0:db:a6:ad:6b:c1:4f:16:5b:b8:23:55:7f:
         3c:93:47:fd:c2:7c:bf:1d:2f:02:ad:c1:33:6a:09:16:6e:61:
         ab:9f:ee:4f:67:a9:43:b9:e1:d5:3f:70:72:d4:16:cf:a2:71:
         90:34:ac:4c:d1:1b:af:88:8d:dd:00:53:f6:49:2e:82:c4:71:
         96:19:bc:54:46:a4:8f:12:5f:79:b6:56:ce:3d:2d:94:07:7b:
         4e:93:93:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----