Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0C7A532722E11F1A5786EF4CE1D38B0.roa
File:                     E0C7A532722E11F1A5786EF4CE1D38B0.roa (raw, json)
Hash identifier:          /CMB85zJ964Llt+/rXTCRRqAJrIF+7N+HOsJoRJNvDU=
Subject key identifier:   FA:09:A3:4E:94:69:3E:A3:2F:01:A5:FE:D7:72:D9:B5:3D:22:F0:42
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C0F6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0C7A532722E11F1A5786EF4CE1D38B0.roa
Signing time:             Sat 27 Jun 2026 13:49:29 +0000
ROA not before:           Sat 27 Jun 2026 13:48:24 +0000
ROA not after:            Sat 29 May 2027 13:48:24 +0000
asID:                     17976
IP address blocks:        45.201.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114934 (0x1c0f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 27 13:48:24 2026 GMT
            Not After : May 29 13:48:24 2027 GMT
        Subject: CN=6a3fd4e9-c637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9a:da:2f:d6:6a:63:b5:8c:20:b8:6e:a4:b2:
                    9a:96:33:42:07:7a:bf:14:38:20:b5:7f:ad:27:37:
                    ff:55:c0:ed:7e:ed:ff:08:0f:3c:02:01:32:bb:03:
                    d6:a4:3c:88:00:39:3a:6a:eb:8a:4d:86:23:68:ba:
                    99:af:c6:39:1e:a4:77:ab:e7:f4:61:fc:1f:5f:8e:
                    8e:10:9b:34:b4:77:1b:2d:73:c5:e1:88:87:33:e9:
                    6e:9a:4c:c7:20:c8:d3:7b:69:ee:8b:3e:9a:64:b4:
                    0e:24:c4:44:32:c2:a5:93:d2:b6:d5:36:d9:71:63:
                    15:0e:da:5a:27:e8:b7:5e:f5:8f:14:cd:f5:6b:3e:
                    01:ca:25:8e:82:58:f3:ee:6c:a8:90:2a:a2:84:45:
                    e6:cd:f6:c4:bd:db:41:ff:b0:08:b3:81:38:ac:2b:
                    89:7b:f1:ff:ee:a9:4e:e4:65:43:62:74:e9:d2:bd:
                    ac:18:5c:a8:fe:ce:0a:61:fe:27:1f:bd:a7:c7:e8:
                    c7:5c:68:93:d4:8a:c8:bb:3d:9f:f2:a5:aa:3a:79:
                    3d:9f:92:2a:85:8d:fb:b6:ec:c0:b3:e9:6e:8e:41:
                    ef:8b:68:62:40:16:a0:8d:7e:1c:64:98:61:8c:db:
                    2d:ae:45:01:ec:3c:e9:47:2c:88:91:da:6b:d3:4f:
                    86:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:09:A3:4E:94:69:3E:A3:2F:01:A5:FE:D7:72:D9:B5:3D:22:F0:42
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0C7A532722E11F1A5786EF4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:c6:10:25:51:3b:63:dd:9e:a0:01:47:fb:2e:ab:f4:e4:92:
         84:65:41:08:68:a1:d6:ba:72:e7:19:84:fc:d6:94:62:f4:dd:
         31:b4:44:fc:bc:24:de:1c:c0:47:36:e7:d3:d4:4b:35:de:13:
         91:33:bf:e8:34:c3:78:26:66:42:27:35:00:77:ab:f7:24:b7:
         56:1c:ad:a9:d6:b6:eb:d9:33:9f:4e:d8:b2:12:30:4e:ca:c9:
         4e:67:dd:e9:2b:bb:08:59:50:e9:6a:6a:ea:4f:d9:3d:31:10:
         5a:bf:97:1a:84:cf:6f:c7:bb:96:23:46:11:ae:8a:cb:ed:49:
         96:f9:29:9a:b3:9b:8e:46:ec:e0:7c:8d:81:cc:74:18:a4:20:
         32:c4:9f:ca:05:64:63:37:1d:73:5f:40:b8:aa:60:0a:d6:b7:
         19:cf:56:a2:30:99:f1:dd:6b:c9:29:d9:0f:c6:cc:3e:bb:45:
         8d:34:ab:87:6e:c4:ed:5f:98:fc:e4:5d:3a:a8:e0:e4:dc:2c:
         13:91:32:ad:17:e3:0a:70:b5:b4:cf:0e:f2:57:f6:b4:ae:d4:
         7f:39:f3:de:f5:df:e4:17:a9:ea:7b:19:c2:0d:09:4b:30:17:
         c0:73:11:3a:e5:bd:d3:46:f4:46:93:82:85:d5:74:02:6e:8e:
         29:4f:d6:af
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcD2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjI3MTM0ODI0WhcNMjcwNTI5MTM0ODI0WjAYMRYw
FAYDVQQDEw02YTNmZDRlOS1jNjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzJraL9ZqY7WMILhupLKaljNCB3q/FDggtX+tJzf/VcDtfu3/CA88AgEy
uwPWpDyIADk6auuKTYYjaLqZr8Y5HqR3q+f0YfwfX46OEJs0tHcbLXPF4YiHM+lu
mkzHIMjTe2nuiz6aZLQOJMREMsKlk9K21TbZcWMVDtpaJ+i3XvWPFM31az4ByiWO
gljz7myokCqihEXmzfbEvdtB/7AIs4E4rCuJe/H/7qlO5GVDYnTp0r2sGFyo/s4K
Yf4nH72nx+jHXGiT1IrIuz2f8qWqOnk9n5IqhY37tuzAs+lujkHvi2hiQBagjX4c
ZJhhjNstrkUB7DzpRyyIkdpr00+GZQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPoJ
o06UaT6jLwGl/tdy2bU9IvBCMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMEM3QTUzMjcyMkUxMUYxQTU3ODZFRjRDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcm0MA0GCSqGSIb3DQEBCwUA
A4IBAQBMxhAlUTtj3Z6gAUf7Lqv05JKEZUEIaKHWunLnGYT81pRi9N0xtET8vCTe
HMBHNufT1Es13hORM7/oNMN4JmZCJzUAd6v3JLdWHK2p1rbr2TOfTtiyEjBOyslO
Z93pK7sIWVDpamrqT9k9MRBav5cahM9vx7uWI0YRrorL7UmW+Smas5uORuzgfI2B
zHQYpCAyxJ/KBWRjNx1zX0C4qmAK1rcZz1aiMJnx3WvJKdkPxsw+u0WNNKuHbsTt
X5j85F06qODk3CwTkTKtF+MKcLW0zw7yV/a0rtR/OfPe9d/kF6nqexnCDQlLMBfA
cxE65b3TRvRGk4KF1XQCbo4pT9av
-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:17 2026 by rpki-client