Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F46FB5586E0911F1BBC19FCACE1D38B0.roa
File:                     F46FB5586E0911F1BBC19FCACE1D38B0.roa (raw, json)
Hash identifier:          LjQvYNG4L/F36JTx1ptJCd3pmsTjHy5lzXTZwMgFgw4=
Subject key identifier:   C1:B7:C9:A9:DD:5B:E8:48:D9:74:AC:D9:AF:B6:43:65:6B:7D:C0:49
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BF5A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F46FB5586E0911F1BBC19FCACE1D38B0.roa
Signing time:             Mon 22 Jun 2026 07:14:06 +0000
ROA not before:           Mon 22 Jun 2026 07:14:02 +0000
ROA not after:            Sat 25 Jul 2026 07:14:02 +0000
asID:                     151066
IP address blocks:        45.195.48.0/22 maxlen: 24
                          45.195.48.0/24 maxlen: 24
                          45.195.49.0/24 maxlen: 24
                          45.195.50.0/24 maxlen: 24
                          45.195.51.0/24 maxlen: 24
                          45.195.154.0/23 maxlen: 24
                          45.195.154.0/24 maxlen: 24
                          45.195.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114522 (0x1bf5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 22 07:14:02 2026 GMT
            Not After : Jul 25 07:14:02 2026 GMT
        Subject: CN=6a38e0be-c2ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:3f:32:d9:0e:3d:d5:3a:7e:d9:38:2c:bc:
                    e0:64:c3:cf:68:84:77:9f:ba:a1:f8:f6:87:91:53:
                    75:c6:96:b9:4c:57:84:74:f8:3e:b8:a8:e4:f0:e8:
                    25:c2:a4:58:7f:ba:43:d3:f6:33:b5:f8:95:ee:7d:
                    fe:c7:39:ba:f2:03:e8:13:fd:18:2d:de:dd:a5:f5:
                    15:04:72:be:6c:ba:d6:8a:a3:e6:e6:20:cd:4f:2e:
                    8f:3d:29:d6:db:91:f5:cd:15:b5:17:78:4b:3c:ab:
                    5f:64:cb:49:63:f6:5d:17:3f:1e:4f:0b:7b:3d:10:
                    87:9e:ae:e7:55:24:e2:d4:a5:34:b9:70:74:37:21:
                    4f:5d:a6:b0:35:ee:37:45:5e:2f:9f:b0:2d:aa:35:
                    04:ba:b7:26:46:3c:d2:88:01:c7:d9:52:99:d1:f4:
                    67:00:46:14:66:45:7a:e1:3f:1b:ee:5b:2e:b8:ed:
                    68:e7:84:13:47:04:97:91:86:3b:c1:7f:6b:98:d1:
                    01:3c:5a:6f:28:db:69:56:90:17:68:be:f9:df:90:
                    4d:da:eb:0a:81:03:66:5b:6f:0e:35:6e:ab:22:60:
                    ea:34:19:f8:de:6d:9f:7a:8e:20:59:e7:fe:d3:65:
                    3f:23:27:b2:f8:85:da:1e:0c:0c:18:08:73:66:97:
                    95:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B7:C9:A9:DD:5B:E8:48:D9:74:AC:D9:AF:B6:43:65:6B:7D:C0:49
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F46FB5586E0911F1BBC19FCACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.48.0/22
                  45.195.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:b2:4c:01:94:14:40:64:ad:eb:f8:f5:04:b1:f3:b8:91:02:
         0f:db:ca:4e:51:99:54:af:20:f8:e7:bd:b3:a1:6e:4f:ce:c9:
         64:51:73:55:a6:67:be:aa:d4:dd:6d:12:82:16:69:a0:db:6e:
         b2:67:70:ab:76:ab:62:bd:9e:42:3a:d6:e9:30:12:51:e9:11:
         34:0f:d1:99:74:24:7f:51:d3:2a:33:fd:b1:05:ba:e7:34:0a:
         b6:50:ec:f1:29:a7:e9:19:f4:18:fd:a4:ff:16:5c:b8:09:7a:
         bc:2d:2e:31:89:e5:eb:fc:38:64:3c:d4:41:64:fd:1e:32:92:
         5f:c7:92:cf:dc:de:fc:50:47:d2:10:a3:a7:97:2c:c0:78:3f:
         6c:60:26:39:b8:56:94:81:79:96:e5:72:be:36:60:1a:bf:67:
         ed:8e:2e:a5:59:8c:49:31:51:3f:33:8c:ed:e0:81:e4:83:bf:
         62:ae:eb:35:5a:c1:46:6c:3b:c8:d8:9c:69:16:d3:25:13:76:
         53:43:d6:48:fe:f0:c8:05:0f:3e:aa:9a:15:34:81:bc:b4:a5:
         23:0a:ad:20:36:d5:c4:43:98:93:25:a3:b3:ca:ba:7d:9b:3d:
         7c:5d:a1:6d:b8:e6:3e:ad:b5:99:4d:b9:d1:7b:32:aa:47:c3:
         6e:59:0b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:49 2026 by rpki-client