Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E06E4C026AF011F18C6BA7B2CE1D38B0.roa
File:                     E06E4C026AF011F18C6BA7B2CE1D38B0.roa (raw, json)
Hash identifier:          0Lvh1JN4LUJAF/DU9XdEgGtzvQ+w/90tOiOuqyYPOCA=
Subject key identifier:   B6:CB:6B:72:D0:2A:17:15:90:95:7B:07:95:1D:C7:3D:A8:FF:7F:FB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BEFE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E06E4C026AF011F18C6BA7B2CE1D38B0.roa
Signing time:             Thu 18 Jun 2026 08:37:02 +0000
ROA not before:           Thu 18 Jun 2026 08:36:56 +0000
ROA not after:            Fri 18 Jun 2027 08:36:56 +0000
asID:                     263781
IP address blocks:        45.192.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Jun 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114430 (0x1befe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 18 08:36:56 2026 GMT
            Not After : Jun 18 08:36:56 2027 GMT
        Subject: CN=6a33ae2e-4fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:37:64:cb:4e:78:aa:7c:6b:e9:67:d9:bd:d7:
                    82:a6:36:20:26:e9:1f:6f:77:4d:24:43:65:fd:e8:
                    38:37:b0:0f:1e:73:81:ed:ba:b8:d0:b3:63:b7:11:
                    45:aa:7a:4d:bb:b3:eb:31:12:06:de:14:9e:33:c7:
                    8a:88:16:27:ef:32:54:8c:1c:d5:d1:9d:83:31:a6:
                    67:fb:c6:49:9f:90:87:62:a6:fa:dd:6f:02:03:4a:
                    d0:c1:78:36:e2:18:1b:ed:5e:c8:8e:b1:90:b8:d7:
                    18:94:ee:4b:cf:12:9a:80:96:fc:a5:12:08:23:18:
                    72:f1:ed:c8:cc:d4:b0:99:e1:a2:0c:f3:72:6c:5f:
                    35:76:b1:04:ff:e4:61:8f:ce:19:e1:8f:bb:bc:57:
                    fb:9f:ee:ac:05:fa:c3:ed:dd:ab:83:d0:b9:5e:d6:
                    2c:96:8e:10:68:76:f5:40:d7:18:e8:b6:fe:27:17:
                    1b:ff:d6:dd:cf:e2:dc:03:cb:ce:d9:5b:25:c6:90:
                    01:d9:8e:d5:fe:ca:65:bc:5f:d1:5e:5a:d2:6b:2d:
                    b4:10:9a:b0:ed:4e:f5:f5:86:40:08:e3:b5:66:f0:
                    2a:66:01:94:38:6f:be:dc:1a:be:ea:af:ea:5c:ec:
                    23:2a:52:70:a3:00:51:fe:5f:1b:ab:9b:5a:7c:2e:
                    11:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CB:6B:72:D0:2A:17:15:90:95:7B:07:95:1D:C7:3D:A8:FF:7F:FB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E06E4C026AF011F18C6BA7B2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:50:8b:95:ef:a2:9b:65:69:1d:e3:68:94:f2:ea:eb:7f:21:
         79:ef:09:9d:26:26:00:85:91:75:b3:99:92:57:5f:a4:5d:91:
         d3:e0:60:15:70:24:36:12:9a:dc:63:13:aa:ec:44:85:15:ed:
         7e:63:b3:4d:88:6c:02:81:54:5c:8f:27:d4:e0:13:8c:a1:6f:
         4c:b4:0c:6e:d5:b4:99:49:a2:b9:1f:96:29:25:e4:b4:ed:07:
         e0:15:22:24:b2:44:ab:af:47:a4:e5:16:b6:fe:ab:7b:cd:4b:
         20:60:a7:45:da:b7:63:ff:75:38:03:f1:30:9a:8e:55:86:e5:
         4d:0b:11:09:5d:2c:67:98:8c:ad:02:85:52:01:ba:6d:af:16:
         e3:82:59:ae:46:4e:6f:ec:0d:d2:44:61:4c:02:c0:5b:62:97:
         10:b0:bd:ee:28:9f:8d:d9:ca:1c:02:b2:d3:61:2d:ff:67:2e:
         0e:b3:22:5b:4d:6e:70:a3:77:5e:d4:79:59:e9:f1:56:b5:a2:
         4b:62:21:3a:f9:d1:a7:24:9c:8b:65:18:d2:90:9f:a3:67:9b:
         ca:7a:3f:8d:1f:90:b4:2d:4b:80:b9:06:0d:ac:16:33:af:c6:
         88:69:4b:f9:40:d7:e1:c3:6b:07:14:80:7c:57:68:06:91:07:
         70:00:da:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 02:37:31 2026 by rpki-client