Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6D721E656DD11F1884925A0CE1D38B0.roa
File:                     C6D721E656DD11F1884925A0CE1D38B0.roa (raw, json)
Hash identifier:          oqq/krulLMLiRbqNYnO5q6ZUE3sz45VVQECAERKfED8=
Subject key identifier:   0A:EC:B1:50:B1:FE:C7:82:04:57:26:3F:13:1B:8D:DE:D8:72:2F:C8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B8B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6D721E656DD11F1884925A0CE1D38B0.roa
Signing time:             Sat 23 May 2026 19:29:55 +0000
ROA not before:           Sat 23 May 2026 19:29:51 +0000
ROA not after:            Tue 16 Jun 2026 19:29:51 +0000
asID:                     134365
IP address blocks:        156.226.176.0/21 maxlen: 24
                          156.226.176.0/24 maxlen: 24
                          156.226.177.0/24 maxlen: 24
                          156.226.178.0/24 maxlen: 24
                          156.226.179.0/24 maxlen: 24
                          156.226.180.0/22 maxlen: 24
                          156.226.180.0/24 maxlen: 24
                          156.226.181.0/24 maxlen: 24
                          156.226.182.0/24 maxlen: 24
                          156.226.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 04 Jun 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112817 (0x1b8b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 23 19:29:51 2026 GMT
            Not After : Jun 16 19:29:51 2026 GMT
        Subject: CN=6a120033-253c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f2:95:b0:94:8c:3d:8b:df:12:06:28:10:7c:
                    03:d6:71:8c:b5:00:2a:41:0a:19:d5:14:a2:f8:ed:
                    d3:9b:e8:16:02:0d:4c:64:01:d1:f2:bd:c1:f5:fd:
                    d4:17:85:09:ae:4a:f8:01:d9:09:db:15:2d:f5:10:
                    ef:56:cd:a8:b7:de:bf:3e:57:20:28:31:2c:78:fc:
                    61:d9:a2:ac:75:a5:b2:bb:d9:b1:c4:63:bd:0a:f3:
                    ab:00:83:f3:83:5a:2b:76:0c:a9:43:f6:90:1d:3f:
                    55:d5:e8:55:c2:1b:83:5d:e6:3f:2d:f1:87:ad:37:
                    6f:b6:01:14:e5:82:9a:b2:ef:55:29:47:ef:a3:e4:
                    e6:a8:62:02:e4:6d:6c:ef:f8:0e:f9:44:12:84:46:
                    75:34:4b:cd:47:29:b7:5b:bd:e3:ce:e6:c8:cd:85:
                    52:40:94:ca:d1:53:8d:5a:67:f5:35:08:82:dd:4a:
                    49:29:b6:ec:56:6f:a1:66:de:e9:71:10:3d:e3:4f:
                    a9:51:65:06:61:33:ad:ba:cf:5b:fc:33:20:c9:33:
                    a1:e8:78:4e:ee:3f:91:26:d2:28:b8:53:6b:2f:3c:
                    7f:96:8c:7a:2b:36:5c:dd:23:b5:c0:15:e9:db:2a:
                    4f:1b:d1:12:f6:1d:2d:d4:df:32:c5:4e:df:78:21:
                    9f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EC:B1:50:B1:FE:C7:82:04:57:26:3F:13:1B:8D:DE:D8:72:2F:C8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6D721E656DD11F1884925A0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4e:db:28:53:6f:97:80:c4:43:69:82:8a:35:43:ec:00:d8:a4:
         79:47:cb:3c:68:50:e7:e2:35:7f:88:d4:04:97:e6:e8:61:55:
         44:f2:04:91:a1:95:32:b9:19:0f:4c:f7:34:e6:c4:f3:ee:2a:
         7f:45:da:c7:89:02:bb:41:38:a3:d9:8c:54:e9:12:42:e0:e2:
         24:07:90:94:2a:fd:93:d4:e2:82:45:07:85:03:ab:76:4d:2e:
         4e:57:a2:7a:52:ea:6a:c6:cd:74:3d:03:da:37:55:90:14:33:
         d2:32:c8:34:37:80:a0:bb:d9:be:d9:39:ce:99:6d:8c:e1:a0:
         50:6d:4d:0e:59:3e:ac:80:1b:d3:48:5b:fe:79:31:95:6a:01:
         27:73:e6:69:8e:29:3d:67:38:69:55:4e:6a:9e:ba:25:c2:e9:
         ee:0f:c9:91:ae:fb:16:1a:47:54:e7:d1:6a:ea:cb:dd:a9:5f:
         47:53:3a:c7:c8:7f:3a:da:19:e2:54:1b:49:dc:06:aa:1a:60:
         f6:eb:20:69:1d:a6:43:67:ef:19:69:67:4c:a2:d9:26:00:ff:
         2b:93:b5:a0:c4:b1:f4:d4:6e:08:bc:43:10:7d:c5:41:a4:15:
         21:f9:0c:6d:38:66:91:64:87:4a:b8:8a:91:a6:01:d2:11:73:
         32:e6:79:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:33 2026 by rpki-client