Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECA09B70816A11F192A5C20ECF1D38B0.roa
File:                     ECA09B70816A11F192A5C20ECF1D38B0.roa (raw, json)
Hash identifier:          e3UgeMcAAbBJxt9LZNqO3e7X7A13gI2HRrnAPwz5HSs=
Subject key identifier:   5E:27:8F:48:EB:07:84:1E:89:72:59:30:FA:9A:FF:BB:7C:E7:C5:A3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C58C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECA09B70816A11F192A5C20ECF1D38B0.roa
Signing time:             Thu 16 Jul 2026 23:06:06 +0000
ROA not before:           Thu 16 Jul 2026 23:06:02 +0000
ROA not after:            Sat 22 Aug 2026 23:06:02 +0000
asID:                     395886
IP address blocks:        156.233.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116108 (0x1c58c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 16 23:06:02 2026 GMT
            Not After : Aug 22 23:06:02 2026 GMT
        Subject: CN=6a5963de-e294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cd:9f:60:8e:3b:84:31:1d:59:5e:85:de:2e:
                    e4:9c:ff:58:53:3e:15:3f:8d:c7:d5:b2:ec:de:45:
                    99:c3:fa:62:72:ec:d0:fc:de:6a:8f:a6:65:eb:6f:
                    57:d2:ff:c8:2f:2a:2b:2f:85:0c:32:2d:0f:67:06:
                    22:73:6a:a8:87:8a:8f:b2:04:6c:58:81:ee:45:97:
                    98:71:1e:46:13:88:18:11:1a:4b:d9:7c:29:1c:da:
                    6c:39:2d:71:dc:1f:6a:a3:ed:c7:8b:b7:b2:24:2d:
                    61:97:d2:21:78:24:2d:18:81:90:01:bb:73:af:c1:
                    91:ff:83:fe:fd:c9:6b:a9:bf:35:15:51:12:25:b7:
                    20:b6:0d:e3:37:00:a8:51:3c:0e:0b:5c:bf:44:2a:
                    38:d1:f5:68:e0:fd:38:39:b6:ac:d2:68:07:5d:4f:
                    00:4d:04:98:4f:99:79:da:d0:34:64:24:e6:24:e1:
                    f2:77:9b:c7:0f:19:25:0d:e6:ff:88:ff:f9:0d:b8:
                    25:06:2f:a0:a7:3b:b7:b7:17:81:62:68:f8:6e:5e:
                    45:27:d0:d3:52:c1:d5:2f:b8:61:17:8e:e6:d0:f0:
                    59:e0:19:41:4a:43:88:b7:ba:73:6c:e3:9e:03:0b:
                    80:7f:ee:b6:e1:ce:9e:85:e8:ba:2e:da:c6:01:57:
                    f2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:27:8F:48:EB:07:84:1E:89:72:59:30:FA:9A:FF:BB:7C:E7:C5:A3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECA09B70816A11F192A5C20ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6b:77:a1:51:0c:f9:15:96:9b:69:6d:e7:73:c5:6f:5d:ce:98:
         b6:c0:4c:c4:5f:17:2b:d6:24:db:b4:cc:3a:e2:30:a8:08:6b:
         35:ae:56:5c:a5:8f:bb:78:d4:c8:5c:5e:20:7d:a8:b5:b3:3b:
         da:ef:b8:ce:c9:c9:d3:21:0c:a7:53:f2:88:af:f0:2b:22:d0:
         5a:3e:27:c8:8d:5c:ef:9d:d5:d0:4a:37:7c:7c:bd:1e:a1:e1:
         20:1c:8a:85:b5:07:f5:ae:cd:b6:c7:6e:f7:82:a8:96:b3:c7:
         cb:21:9e:77:79:26:af:c1:6a:75:bb:84:f3:23:31:ee:d5:93:
         2d:1e:93:b9:25:0d:08:d9:ec:42:4a:82:1e:28:4a:4f:c9:3d:
         af:96:40:34:84:81:29:fc:8c:cb:97:f2:4e:f2:6d:79:d7:93:
         b5:71:b7:39:53:dd:07:03:b4:0e:05:f6:92:3a:aa:72:f1:20:
         f8:99:3a:24:f9:a4:f2:ef:10:8a:22:e7:53:78:fc:a3:cb:02:
         d4:0f:bd:a1:66:e2:21:59:78:3a:14:d6:a7:f3:90:30:6a:60:
         a4:e9:71:73:98:ae:1a:49:bc:3c:7d:7d:7c:c5:5f:0a:78:b7:
         f1:0f:52:14:00:d7:9b:27:06:e6:74:fc:ba:25:b5:01:04:f7:
         b4:cd:63:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:32 2026 by rpki-client