Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0C4B57E6E5B11F1A449E3AECE1D38B0.roa
File:                     E0C4B57E6E5B11F1A449E3AECE1D38B0.roa (raw, json)
Hash identifier:          7X7H77syznqQGrHQBaXdnqjiD6jadbSPEb6uP51L2hs=
Subject key identifier:   B8:56:A1:86:BF:B3:67:00:3D:70:9B:CD:ED:FC:93:9C:1E:6D:60:5D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BFA2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0C4B57E6E5B11F1A449E3AECE1D38B0.roa
Signing time:             Mon 22 Jun 2026 17:00:32 +0000
ROA not before:           Mon 22 Jun 2026 17:00:27 +0000
ROA not after:            Tue 28 Jul 2026 17:00:27 +0000
asID:                     44559
IP address blocks:        156.246.160.0/24 maxlen: 24
                          156.246.200.0/24 maxlen: 24
                          156.246.201.0/24 maxlen: 24
                          156.246.202.0/24 maxlen: 24
                          156.246.203.0/24 maxlen: 24
                          156.246.204.0/24 maxlen: 24
                          156.246.205.0/24 maxlen: 24
                          156.246.206.0/24 maxlen: 24
                          156.246.207.0/24 maxlen: 24
                          156.246.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114594 (0x1bfa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 22 17:00:27 2026 GMT
            Not After : Jul 28 17:00:27 2026 GMT
        Subject: CN=6a396a30-6a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a4:93:31:13:75:ba:ed:d0:53:3d:ba:ab:44:
                    17:6c:48:e9:92:5d:cb:fd:ba:90:e5:2a:b6:d1:c1:
                    c7:37:66:b1:95:cc:e8:28:34:92:64:1a:08:a8:51:
                    03:df:96:61:13:83:c6:d1:16:b5:90:4b:c1:19:91:
                    4f:ac:fa:7d:a4:cb:08:c7:14:3a:0b:7a:0a:34:9f:
                    47:98:62:c1:22:4f:03:8f:12:4f:11:85:72:1a:96:
                    74:2c:92:bf:6c:ec:3f:09:df:d1:35:2d:2a:e9:9e:
                    da:a6:97:62:0b:42:e0:5b:e2:ed:57:74:e4:1f:19:
                    7d:d6:8d:08:8d:88:3c:46:bc:bb:d3:eb:11:f0:ce:
                    2a:db:e1:4e:98:ef:90:a6:7b:ef:ef:58:17:ed:bd:
                    f5:59:d0:b6:ed:8f:35:ac:7f:55:9d:da:5f:94:da:
                    30:cb:92:09:57:ad:c7:fa:83:03:51:e6:3f:cb:95:
                    47:af:38:5b:6a:34:6e:6b:ce:a0:6f:2a:05:57:1d:
                    2c:72:87:73:87:40:00:3d:d4:a0:5d:a1:35:68:65:
                    5c:e9:18:5d:f8:7c:d7:7b:c1:e8:3d:ab:6c:ea:bc:
                    19:d6:4a:7a:0c:c1:eb:3a:d3:3f:b0:8a:fd:33:53:
                    94:ee:37:e1:5c:08:89:52:4e:ea:98:8b:9a:a8:6b:
                    ad:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:56:A1:86:BF:B3:67:00:3D:70:9B:CD:ED:FC:93:9C:1E:6D:60:5D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0C4B57E6E5B11F1A449E3AECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.160.0/24
                  156.246.200.0-156.246.208.255

    Signature Algorithm: sha256WithRSAEncryption
         53:97:82:45:db:d3:d2:f3:c1:b9:18:29:8f:ef:98:d3:45:b0:
         91:7e:f2:62:ea:6f:cc:58:29:ca:e7:db:24:ca:2e:58:85:29:
         28:02:a9:fa:c1:c4:c9:ae:82:58:59:05:76:ac:d3:3e:a2:d7:
         82:15:53:a4:87:f8:9d:5b:d2:39:d0:8e:16:c8:60:8c:2b:0f:
         48:c4:07:ac:7d:ba:ad:7f:76:b6:18:48:62:7a:d5:52:a2:86:
         16:85:6a:f2:d5:a6:9f:63:b5:0e:5f:41:0c:28:87:e9:98:f0:
         89:ce:9f:b7:15:7a:e4:c6:e3:f5:de:66:18:f7:7c:4e:42:2c:
         32:03:6a:0e:fc:43:20:be:e1:04:a9:b5:f4:41:4b:60:57:18:
         3c:3f:0a:2f:69:46:0c:d8:fc:e7:0b:d9:6d:49:b8:cb:32:23:
         65:fd:9a:12:c6:c0:36:d4:48:37:3e:1b:4e:ce:1b:48:b5:78:
         0f:91:a3:52:93:07:c7:a4:1a:60:91:76:ce:66:4c:ac:1a:93:
         89:2a:1a:ce:b2:28:7a:ef:26:e0:eb:34:09:ea:60:83:56:d5:
         cc:ed:17:d3:ca:89:29:67:d1:8b:4f:ff:f9:7e:32:5d:7f:91:
         89:fa:49:a6:4a:32:93:05:37:d4:ec:21:ea:c7:ad:5e:ba:ba:
         44:c4:93:08
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAb+iMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjIyMTcwMDI3WhcNMjYwNzI4MTcwMDI3WjAYMRYw
FAYDVQQDEw02YTM5NmEzMC02YTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8aSTMRN1uu3QUz26q0QXbEjpkl3L/bqQ5Sq20cHHN2axlczoKDSSZBoI
qFED35ZhE4PG0Ra1kEvBGZFPrPp9pMsIxxQ6C3oKNJ9HmGLBIk8DjxJPEYVyGpZ0
LJK/bOw/Cd/RNS0q6Z7appdiC0LgW+LtV3TkHxl91o0IjYg8Rry70+sR8M4q2+FO
mO+Qpnvv71gX7b31WdC27Y81rH9VndpflNowy5IJV63H+oMDUeY/y5VHrzhbajRu
a86gbyoFVx0scodzh0AAPdSgXaE1aGVc6Rhd+HzXe8HoPats6rwZ1kp6DMHrOtM/
sIr9M1OU7jfhXAiJUk7qmIuaqGutnQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFLhW
oYa/s2cAPXCbze38k5webWBdMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMEM0QjU3RTZFNUIxMUYxQTQ0OUUzQUVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAnPagMAwDBAOc9sgDBACc9tAw
DQYJKoZIhvcNAQELBQADggEBAFOXgkXb09LzwbkYKY/vmNNFsJF+8mLqb8xYKcrn
2yTKLliFKSgCqfrBxMmuglhZBXas0z6i14IVU6SH+J1b0jnQjhbIYIwrD0jEB6x9
uq1/drYYSGJ61VKihhaFavLVpp9jtQ5fQQwoh+mY8InOn7cVeuTG4/XeZhj3fE5C
LDIDag78QyC+4QSptfRBS2BXGDw/Ci9pRgzY/OcL2W1JuMsyI2X9mhLGwDbUSDc+
G07OG0i1eA+Ro1KTB8ekGmCRds5mTKwak4kqGs6yKHrvJuDrNAnqYINW1cztF9PK
iSln0YtP//l+Ml1/kYn6SaZKMpMFN9TsIerHrV66ukTEkwg=
-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:21 2026 by rpki-client