Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C94926E8BE2C11F190437EBDCE1D38B0.roa
File:                     C94926E8BE2C11F190437EBDCE1D38B0.roa (raw, json)
Hash identifier:          tmBNs5F4JNAZUZOb4jJSWq/d2lGdaMFCKrfw7nkNlwQ=
Subject key identifier:   87:27:4A:80:06:44:00:51:20:AB:29:AF:44:23:EC:B1:3B:0A:88:FD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D9E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C94926E8BE2C11F190437EBDCE1D38B0.roa
Signing time:             Fri 02 Oct 2026 06:44:59 +0000
ROA not before:           Fri 02 Oct 2026 06:44:55 +0000
ROA not after:            Wed 06 Oct 2027 06:44:55 +0000
asID:                     32848
IP address blocks:        45.199.160.0/24 maxlen: 24
                          45.199.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121314 (0x1d9e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  2 06:44:55 2026 GMT
            Not After : Oct  6 06:44:55 2027 GMT
        Subject: CN=6abf52eb-2e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:56:56:74:51:40:16:de:a8:f8:fd:56:3f:a2:
                    52:1f:83:fe:2d:26:a3:2e:8f:c1:1a:2e:71:bc:19:
                    57:a2:93:60:1e:c6:f3:2d:eb:5f:fd:60:d9:24:b2:
                    7e:93:d1:25:cf:f7:d6:04:de:5d:3f:95:1a:dd:e9:
                    4e:95:6f:02:4d:a6:40:ec:f3:f4:88:62:bd:e7:eb:
                    8e:1b:df:50:36:e6:9c:23:27:c0:61:e2:05:1c:52:
                    0d:1b:00:4e:2e:b3:60:9a:3b:4c:0d:e6:48:ce:af:
                    4e:58:9b:06:9e:cc:25:ff:a6:ce:53:a6:45:9d:27:
                    b3:9d:d9:e0:da:9d:f2:79:f9:42:85:29:ab:6b:96:
                    2b:4e:9d:f4:21:5b:93:f9:a8:ff:6e:b6:fa:4c:87:
                    9e:89:14:71:fe:b9:64:f8:2e:94:7e:8e:34:77:af:
                    65:ed:08:c4:11:18:37:a7:e5:fd:41:3b:93:e2:3a:
                    33:83:a7:7a:c7:6d:6c:f8:d0:e8:55:22:55:70:88:
                    58:a2:ae:25:be:0f:e3:d1:64:f4:55:f5:fd:6b:81:
                    b3:82:ce:52:c3:4b:1b:01:93:94:3e:65:c9:74:a5:
                    9a:f0:8e:06:7d:a4:5c:6e:d8:3d:72:7a:86:e4:8f:
                    58:74:0e:4a:a3:61:ff:79:06:8f:a0:1e:32:e2:b3:
                    cf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:27:4A:80:06:44:00:51:20:AB:29:AF:44:23:EC:B1:3B:0A:88:FD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C94926E8BE2C11F190437EBDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.160.0/24
                  45.199.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:2c:3f:ca:4a:b2:a0:e1:c2:bf:37:a6:3c:84:a1:b4:4c:83:
         f0:1b:16:a6:d0:e3:82:bb:78:1d:38:64:fb:a4:f5:39:79:ab:
         02:fc:8a:40:f0:ef:5d:90:99:69:95:6c:21:36:da:fc:c4:b1:
         b8:92:1d:a7:0c:d6:6b:78:ce:5a:9e:cd:c1:62:16:05:85:e5:
         fd:2e:ea:41:60:3a:55:04:30:4e:68:36:01:a3:23:60:c9:ff:
         57:88:19:9a:c7:ab:99:58:c3:13:91:28:cc:73:af:37:76:af:
         12:d1:07:38:92:ce:d8:c8:71:5b:da:ee:67:3e:fe:94:5d:72:
         ea:43:0d:0e:c7:c4:5d:ea:52:f5:08:f5:8f:2a:64:14:8a:62:
         7a:fb:c4:87:7e:0c:74:7a:fb:ff:3b:d3:05:e4:0e:8b:b3:21:
         1c:91:dc:77:5d:9d:91:8f:05:4e:61:32:0e:66:c3:54:34:84:
         79:49:14:48:b7:a2:de:4b:29:15:64:80:49:7d:b8:4c:91:67:
         fc:6d:8f:8f:6a:e6:b1:fc:bb:a8:a0:ec:2b:0a:e5:ee:b5:c5:
         ca:82:48:0e:b4:19:89:e3:2a:3e:b8:19:82:b8:c0:67:63:16:
         e6:d0:ec:1d:04:c9:4d:19:88:21:ac:2e:77:26:6f:7f:e1:46:
         d3:a3:cf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----