Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/151E53AA33EE11F1A97F97B7CE1D38B0.roa
File:                     151E53AA33EE11F1A97F97B7CE1D38B0.roa (raw, json)
Hash identifier:          zVkvqkHAt55jogxMSIchguhx9VDRFSZlz4m+Zhe+RLQ=
Subject key identifier:   E2:CF:12:3A:AE:F3:71:2E:E9:D2:15:94:D7:E0:9F:DF:B4:96:C5:DB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01AB26
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/151E53AA33EE11F1A97F97B7CE1D38B0.roa
Signing time:             Thu 09 Apr 2026 08:28:28 +0000
ROA not before:           Thu 09 Apr 2026 08:28:23 +0000
ROA not after:            Sat 16 May 2026 08:28:23 +0000
asID:                     32167
IP address blocks:        45.192.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 20 Apr 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109350 (0x1ab26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr  9 08:28:23 2026 GMT
            Not After : May 16 08:28:23 2026 GMT
        Subject: CN=69d7632c-481b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ff:72:e1:25:d8:31:7f:28:52:59:50:aa:d4:
                    a5:45:10:ce:ce:79:a0:41:94:5c:d8:62:7d:dc:db:
                    a7:cb:7c:95:f9:92:92:88:f8:0b:7a:ab:b3:6e:c1:
                    86:f6:cb:e8:65:35:e7:16:02:cb:8a:c5:e1:70:30:
                    2e:19:27:f6:21:4b:f8:8b:07:af:9c:16:0d:e6:6d:
                    12:e5:92:b7:df:ba:61:e2:2b:d6:20:41:9e:21:f4:
                    4e:38:41:cd:7d:fe:2a:6c:7f:2f:28:32:df:3a:44:
                    31:f1:bd:47:5c:69:12:cb:73:14:41:e7:29:e9:b7:
                    f6:f1:ac:fb:62:f8:55:85:d6:3d:0a:0b:d8:6b:93:
                    c7:25:36:80:2c:86:f9:c2:14:3c:c4:67:8f:68:e3:
                    00:c3:aa:ad:6e:dd:24:bf:0e:00:9e:71:20:9f:54:
                    a0:a6:57:e3:cb:db:0d:3c:16:42:b9:8d:eb:9a:b7:
                    41:c6:4f:13:8f:75:c2:d9:e6:b7:ee:5a:92:ec:10:
                    87:b7:0f:c3:24:42:73:8c:ae:3e:58:69:7a:a1:37:
                    b9:97:5b:bb:cd:76:21:d3:37:bd:c9:c6:e7:ab:e5:
                    6b:1c:b7:d9:6a:3b:ea:d8:be:f5:13:e4:9b:39:b7:
                    ac:69:1b:a0:bb:3e:6e:47:d4:c7:1c:21:b7:ed:fc:
                    1e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CF:12:3A:AE:F3:71:2E:E9:D2:15:94:D7:E0:9F:DF:B4:96:C5:DB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/151E53AA33EE11F1A97F97B7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:0d:74:30:35:cf:6f:6b:46:0d:4c:fe:10:d8:d8:c9:94:fc:
         99:61:ca:64:a7:56:e0:87:55:72:8c:2e:eb:6d:3d:00:52:a0:
         3e:0a:21:a6:1e:70:05:c2:71:c1:5a:14:32:fc:cd:40:3e:ab:
         c7:66:b1:94:4c:0c:2b:ec:0b:4a:48:f7:b0:d5:c8:59:45:41:
         6b:7d:7d:35:48:d3:d4:1a:a9:9d:e9:39:2e:4c:a5:f5:88:50:
         be:f2:98:0b:d7:63:85:2d:bb:fe:ab:05:bc:8d:06:99:46:f7:
         e7:d3:be:65:c2:fd:01:d7:08:a3:e4:a2:fb:df:31:e1:d9:47:
         cb:17:4a:3f:3f:26:e0:bc:13:2b:3a:90:91:91:c2:3a:ac:02:
         71:8e:5b:c5:85:46:51:be:61:fa:73:76:a9:68:1c:78:6e:7a:
         9b:ec:09:cb:89:9c:9e:c0:cd:ff:eb:93:29:e9:e3:25:08:89:
         23:4c:2b:01:3c:6c:c2:cc:7c:a0:23:b7:b9:31:ba:fe:fa:a3:
         0f:87:8a:73:2c:0c:3d:7b:62:79:2c:92:66:9c:18:c4:90:32:
         20:7b:71:ee:d8:b0:9f:52:09:3a:65:2e:87:71:1b:f6:81:19:
         c6:cc:0a:45:7e:e8:ce:ff:2e:de:c1:95:bb:8c:c8:64:0c:9c:
         30:2d:ba:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:14:46 2026 by rpki-client