Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4032250C93911F1ADAE2AEFCE1D38B0.roa
File:                     E4032250C93911F1ADAE2AEFCE1D38B0.roa (raw, json)
Hash identifier:          Ey3YbTAzLk/CIuvQ9m6nlfh/rhFh2+/jbcOcO/LnqMw=
Subject key identifier:   55:51:80:4E:2D:0C:86:6E:2C:D2:89:1D:AA:FB:57:9A:2E:CB:0C:B8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DDE2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4032250C93911F1ADAE2AEFCE1D38B0.roa
Signing time:             Fri 16 Oct 2026 08:16:30 +0000
ROA not before:           Fri 16 Oct 2026 08:16:26 +0000
ROA not after:            Fri 20 Nov 2026 08:16:26 +0000
asID:                     153706
IP address blocks:        156.254.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122338 (0x1dde2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 16 08:16:26 2026 GMT
            Not After : Nov 20 08:16:26 2026 GMT
        Subject: CN=6ad1dd5e-a268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7b:a6:c4:5e:ac:7c:e4:8d:04:61:83:a8:11:
                    18:c2:6f:72:ed:2c:bc:9a:4a:3e:ea:9f:7f:bd:75:
                    99:26:54:2e:4e:2b:eb:82:70:a8:02:ec:04:49:70:
                    e7:84:37:3d:d0:9a:52:5f:0d:a3:a5:a9:2a:70:ce:
                    ff:9c:18:28:a2:e8:77:7e:5b:53:36:41:64:d9:97:
                    f4:ad:7b:4f:50:26:7f:b7:1d:e5:35:12:9b:4a:2f:
                    ad:69:c7:af:41:13:df:4f:c2:93:dd:33:32:47:09:
                    10:76:04:e3:96:ad:2b:ef:42:2e:06:6c:14:4e:be:
                    da:fd:b6:86:9c:e9:47:a6:95:3a:02:82:e9:ba:e6:
                    79:2c:7f:cb:36:3f:72:c2:2a:3f:f0:2e:90:9c:39:
                    98:4b:76:77:cd:7c:04:62:90:54:1f:91:e9:90:f4:
                    76:ca:29:eb:11:19:0c:ec:b3:2e:91:d3:c6:4a:81:
                    3f:5d:a8:0d:8f:58:98:96:dc:c9:2a:54:be:50:af:
                    47:73:aa:f0:7a:68:8a:49:1e:8c:f2:24:20:2d:c4:
                    53:77:e0:62:08:46:17:25:19:63:e5:ac:9a:c0:ad:
                    f9:2c:16:e2:81:04:1e:52:f6:6c:11:b2:81:cb:8e:
                    df:a7:d5:62:b5:00:65:2c:48:71:9d:87:2d:fd:fd:
                    c7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:51:80:4E:2D:0C:86:6E:2C:D2:89:1D:AA:FB:57:9A:2E:CB:0C:B8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4032250C93911F1ADAE2AEFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:ea:df:b1:3d:60:3f:d2:fc:42:b8:15:4d:ce:cd:61:22:e3:
         6f:6c:36:4b:c3:a1:0b:54:fe:6e:9f:5d:57:af:26:d4:bf:b6:
         cc:0a:7c:b3:f0:db:e5:cb:94:3b:d7:e8:d0:c9:38:f2:6e:bd:
         98:d3:c3:de:00:8b:96:fd:08:27:80:4e:4f:f6:d1:3e:32:60:
         fa:51:8d:f3:03:9a:87:40:f4:b9:d0:a6:7c:b4:4d:34:93:5e:
         be:7f:d2:9f:1c:d7:7c:b0:b9:06:f6:ff:bf:17:bd:29:4e:e2:
         5f:88:18:81:d7:f5:e9:11:ce:43:58:49:93:47:bd:e6:ee:8c:
         c0:2f:a7:77:91:fb:6e:38:af:02:1b:38:35:f8:f3:0a:6b:6a:
         85:d0:35:f1:50:4f:ca:73:7d:f2:42:59:83:61:22:5e:cf:e1:
         e9:f5:61:f1:91:98:de:44:3a:f7:a6:d1:62:ee:30:5b:69:36:
         c3:38:3e:1d:85:f9:07:d4:c3:21:8f:b7:1a:a8:60:73:49:b7:
         34:26:5d:07:33:34:ae:27:40:33:3f:d4:16:45:f0:0c:d6:af:
         42:dc:2b:f7:bf:07:2e:0c:95:e7:e2:a9:64:1c:c8:e8:6a:a2:
         93:a8:4e:bd:be:7e:18:ae:a4:ea:9a:96:69:49:90:e8:8c:c4:
         aa:35:c9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----