Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A0534D25FE711F1A1C47319CF1D38B0.roa
File:                     0A0534D25FE711F1A1C47319CF1D38B0.roa (raw, json)
Hash identifier:          fowWIxuTOr3IL5mQfN5b9Wf2I39GbKYaoSpQLsnrHGU=
Subject key identifier:   58:1C:89:BA:A4:82:89:9D:01:7E:D4:44:7D:7C:7D:13:7D:63:9E:39
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BBAC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A0534D25FE711F1A1C47319CF1D38B0.roa
Signing time:             Thu 04 Jun 2026 07:28:54 +0000
ROA not before:           Thu 04 Jun 2026 07:28:49 +0000
ROA not after:            Fri 10 Jul 2026 07:28:49 +0000
asID:                     154177
IP address blocks:        156.244.0.0/24 maxlen: 24
                          156.244.1.0/24 maxlen: 24
                          156.244.5.0/24 maxlen: 24
                          156.244.6.0/24 maxlen: 24
                          156.244.28.0/24 maxlen: 24
                          156.244.35.0/24 maxlen: 24
                          156.244.36.0/24 maxlen: 24
                          156.244.37.0/24 maxlen: 24
                          156.244.52.0/24 maxlen: 24
                          156.244.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 16 Jun 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113580 (0x1bbac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun  4 07:28:49 2026 GMT
            Not After : Jul 10 07:28:49 2026 GMT
        Subject: CN=6a212936-e679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:86:e6:5f:32:d4:7c:05:29:65:6d:c8:6b:13:
                    a7:5f:da:07:21:09:39:01:bb:5e:a8:cc:8e:31:7a:
                    b9:9f:c5:8d:c2:6c:b5:dd:ba:1d:3e:84:c1:0a:f9:
                    a2:cb:c4:f5:4d:2f:e8:ea:d1:b5:84:fa:25:b3:da:
                    4b:c2:ac:b5:ff:45:14:9b:af:8b:9e:80:c0:ae:aa:
                    5a:9e:ef:9d:eb:36:c8:f5:3c:8a:ad:59:00:41:8c:
                    e8:87:97:00:f2:41:96:8e:ba:a4:18:65:83:a9:19:
                    a4:a7:35:1d:52:bb:06:ab:d1:93:c2:28:ab:24:f6:
                    96:32:1b:13:41:28:a3:d1:48:1e:90:3c:00:dd:07:
                    f6:36:f7:43:09:72:c0:26:76:03:e5:7e:ca:18:24:
                    24:44:bf:df:ba:dc:cb:89:d2:4a:47:f2:22:75:35:
                    7c:b7:fb:8e:5f:01:20:53:42:24:af:68:c6:16:61:
                    01:81:ea:d5:e9:52:a5:97:27:6b:0f:03:64:b4:ce:
                    8c:bc:31:a8:b9:51:68:6c:f6:0d:14:87:ef:96:83:
                    f7:1f:fe:d2:8d:52:04:ff:31:c3:4f:e6:c5:f9:ef:
                    da:5d:c4:2b:e6:86:ec:0e:64:f7:4f:37:8a:42:b5:
                    22:44:4e:61:3a:df:f7:3b:c9:eb:3b:d3:d6:d7:56:
                    9d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1C:89:BA:A4:82:89:9D:01:7E:D4:44:7D:7C:7D:13:7D:63:9E:39
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A0534D25FE711F1A1C47319CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.0.0/23
                  156.244.5.0-156.244.6.255
                  156.244.28.0/24
                  156.244.35.0-156.244.37.255
                  156.244.52.0/24
                  156.244.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:14:49:54:bf:ee:2f:2f:dd:f8:e7:0e:fc:07:53:58:3b:53:
         f1:b8:67:5a:d1:98:11:f4:cb:26:c2:51:71:cf:b6:63:fa:40:
         a9:9b:e3:2d:de:f8:8e:3a:45:50:78:37:a2:89:b1:be:12:69:
         56:d0:e0:05:54:c6:a0:6d:55:f4:fc:45:60:d3:59:ec:65:eb:
         51:86:3a:84:05:6c:a6:d2:48:03:e9:e1:ff:ed:a3:66:27:40:
         64:84:b1:d7:2e:84:b3:c3:2b:4c:bc:9f:91:52:04:5e:b1:9b:
         86:ec:12:04:86:5c:da:8d:35:9f:6f:5b:03:b5:b0:da:25:97:
         54:e3:c1:4e:d4:6a:d3:4d:3a:3c:19:7b:9b:3f:4d:cc:0b:88:
         ea:79:95:90:94:8d:98:40:d7:1a:40:3b:18:ac:d4:53:71:d5:
         7e:72:5e:2e:27:a8:cf:ef:d7:ce:5a:27:2e:cf:34:f2:2d:21:
         60:f9:f3:b5:94:ac:06:26:74:12:ac:4f:73:33:a1:19:30:d8:
         11:b4:42:c2:f7:ed:51:a9:31:c4:bf:93:9f:2c:44:21:61:85:
         83:f1:99:34:7c:39:82:fa:db:95:ac:13:31:4c:32:9c:4e:7f:
         c6:5f:d1:ee:f1:75:70:69:0a:ff:ec:9c:5e:b5:41:e5:4d:ea:
         31:0b:41:c6
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIDAbusMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjA0MDcyODQ5WhcNMjYwNzEwMDcyODQ5WjAYMRYw
FAYDVQQDEw02YTIxMjkzNi1lNjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5IbmXzLUfAUpZW3IaxOnX9oHIQk5AbteqMyOMXq5n8WNwmy13bodPoTB
Cvmiy8T1TS/o6tG1hPols9pLwqy1/0UUm6+LnoDArqpanu+d6zbI9TyKrVkAQYzo
h5cA8kGWjrqkGGWDqRmkpzUdUrsGq9GTwiirJPaWMhsTQSij0UgekDwA3Qf2NvdD
CXLAJnYD5X7KGCQkRL/futzLidJKR/IidTV8t/uOXwEgU0Ikr2jGFmEBgerV6VKl
lydrDwNktM6MvDGouVFobPYNFIfvloP3H/7SjVIE/zHDT+bF+e/aXcQr5obsDmT3
TzeKQrUiRE5hOt/3O8nrO9PW11adsQIDAQABo4IC0DCCAswwHQYDVR0OBBYEFFgc
ibqkgomdAX7URH18fRN9Y545MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wQTA1MzREMjVGRTcxMUYxQTFDNDczMTlDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
ME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQBnPQAMAwDBACc9AUDBACc9AYD
BACc9BwwDAMEAJz0IwMEAZz0JAMEAJz0NAMEAJz0PTANBgkqhkiG9w0BAQsFAAOC
AQEAqhRJVL/uLy/d+OcO/AdTWDtT8bhnWtGYEfTLJsJRcc+2Y/pAqZvjLd74jjpF
UHg3oomxvhJpVtDgBVTGoG1V9PxFYNNZ7GXrUYY6hAVsptJIA+nh/+2jZidAZISx
1y6Es8MrTLyfkVIEXrGbhuwSBIZc2o01n29bA7Ww2iWXVOPBTtRq0006PBl7mz9N
zAuI6nmVkJSNmEDXGkA7GKzUU3HVfnJeLieoz+/XzlonLs808i0hYPnztZSsBiZ0
EqxPczOhGTDYEbRCwvftUakxxL+TnyxEIWGFg/GZNHw5gvrblawTMUwynE5/xl/R
7vF1cGkK/+ycXrVB5U3qMQtBxg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:12:05 2026 by rpki-client