Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E59797CEBA4B11F18BB60DEECE1D38B0.roa
File:                     E59797CEBA4B11F18BB60DEECE1D38B0.roa (raw, json)
Hash identifier:          ve+rdT14Fa8wUxDgjiqHMmXljAUCC013yOnl0te+Y64=
Subject key identifier:   BD:BB:2F:EE:9F:E3:99:CC:D3:7D:82:33:84:36:12:28:40:BE:91:F2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D92F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E59797CEBA4B11F18BB60DEECE1D38B0.roa
Signing time:             Sun 27 Sep 2026 08:17:36 +0000
ROA not before:           Sun 27 Sep 2026 08:17:32 +0000
ROA not after:            Wed 26 Sep 2029 08:17:32 +0000
asID:                     17561
IP address blocks:        156.240.60.0/24 maxlen: 24
                          156.240.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121135 (0x1d92f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 27 08:17:32 2026 GMT
            Not After : Sep 26 08:17:32 2029 GMT
        Subject: CN=6ab8d120-9236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0b:d2:8b:61:54:b1:0d:6b:89:50:6f:bb:56:
                    59:ef:18:b5:30:ac:10:d7:7d:cd:32:11:3d:fc:37:
                    71:4a:f5:7f:1c:40:e7:7f:74:ad:24:18:2f:76:d9:
                    c6:1b:df:02:69:75:96:34:ef:5e:5a:e6:4a:e0:b2:
                    a6:a7:68:91:9d:bc:70:78:ce:cf:4f:97:ef:7e:f3:
                    bd:d5:e4:d0:4e:b7:b7:87:a8:49:44:b7:a3:8c:d3:
                    fb:2c:59:8e:80:10:cd:00:c6:2f:64:f1:64:27:81:
                    81:54:4d:8d:db:82:1c:a2:ab:47:97:51:2e:e2:71:
                    e8:a9:36:a8:3c:17:56:a4:02:a8:68:7d:bf:eb:49:
                    e7:3d:30:f4:66:6a:75:28:12:75:21:41:ce:a1:33:
                    cb:55:06:ba:1e:f8:e6:e0:a2:80:b4:56:10:cf:7e:
                    5d:91:94:8a:99:b7:aa:41:ac:d0:bf:10:b7:e0:56:
                    53:70:21:e7:00:65:29:0f:64:6a:8f:c2:18:a3:f8:
                    fd:5f:4a:67:53:93:d5:48:e6:68:91:90:16:9e:e4:
                    44:28:04:b4:b6:ce:c9:bb:66:f3:9f:63:b0:d7:ba:
                    b5:c3:74:ee:ec:10:d4:ab:28:cb:ae:96:04:89:27:
                    0f:ca:b1:3f:d4:45:c2:a1:8c:e6:da:52:6e:a5:71:
                    6f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BB:2F:EE:9F:E3:99:CC:D3:7D:82:33:84:36:12:28:40:BE:91:F2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E59797CEBA4B11F18BB60DEECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.240.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:84:c7:74:41:a7:bf:0e:e1:0f:44:d5:ba:3e:9a:11:f9:0e:
         ca:f7:92:8e:74:4f:25:f2:35:31:ed:ea:dd:44:17:78:6c:a9:
         21:5a:ee:93:d9:e8:0a:cc:03:79:fd:c1:ee:9d:4d:05:ca:e9:
         bc:2e:08:58:03:02:e6:56:06:70:2c:89:f9:54:c6:f0:f2:56:
         38:bf:11:76:c3:d5:85:40:a1:ef:6c:1f:fd:1a:b2:d8:20:9b:
         0d:ad:c9:03:c9:18:b7:c3:c9:da:19:d6:5b:7b:85:86:7d:1c:
         6a:c2:ad:e5:d4:56:e2:d7:18:9e:bb:54:42:bc:82:ed:22:18:
         ee:84:bb:6f:82:42:0d:eb:f8:bd:77:f5:e2:69:d7:59:28:b6:
         07:ea:d3:3d:5d:00:c4:7d:b8:53:4f:ba:8b:63:ef:dd:cc:a5:
         47:93:6e:a7:6d:4a:dc:e1:df:17:b4:ca:57:61:25:44:88:f9:
         a3:28:dc:3d:a8:8d:b5:5b:b6:c6:2d:85:a5:fc:3c:8e:86:4e:
         ba:06:39:7f:a0:03:5c:dd:06:75:ee:b9:a5:8d:94:63:67:32:
         44:9a:db:3d:70:f9:59:03:d5:6f:08:5c:e7:ca:7f:e3:ae:f9:
         18:1b:23:83:fc:de:ce:f7:bf:ba:f8:5e:5f:09:08:7b:f5:3d:
         94:16:a3:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----