Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2497EEE668AA11F0A6190C97DAE4EC9C.roa
File:                     2497EEE668AA11F0A6190C97DAE4EC9C.roa (raw, json)
Hash identifier:          SLZd8JYrYVyQj2OYekbA8fe2EL/n/q9zD5ZKJ9wSHR4=
Subject key identifier:   28:8E:44:84:F1:EC:FF:E6:AA:A1:97:A5:B6:E9:D1:D5:FD:B4:1E:34
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       016799
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2497EEE668AA11F0A6190C97DAE4EC9C.roa
Signing time:             Thu 24 Jul 2025 16:20:42 +0000
ROA not before:           Thu 24 Jul 2025 16:20:37 +0000
ROA not after:            Thu 09 Oct 2025 16:20:37 +0000
asID:                     142002
IP address blocks:        45.195.8.0/24 maxlen: 24
                          45.195.9.0/24 maxlen: 24
                          45.195.10.0/24 maxlen: 24
                          45.195.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 10 Aug 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92057 (0x16799)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 24 16:20:37 2025 GMT
            Not After : Oct  9 16:20:37 2025 GMT
        Subject: CN=68825d5a-eead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4c:c4:a5:28:2f:c5:b4:cf:f5:15:d8:01:cd:
                    14:2f:46:08:60:69:45:43:2a:d9:a6:d8:5c:c6:08:
                    f4:76:85:71:f3:02:9f:a1:e1:4c:90:12:04:c6:6f:
                    f3:95:41:d1:97:a7:7d:de:59:44:7e:bf:fb:11:a3:
                    a1:9e:af:e0:f5:87:d1:7a:5b:b3:7d:de:39:5d:30:
                    24:eb:a7:67:c2:43:bd:dd:5e:cf:42:07:e7:b5:55:
                    21:15:8b:18:79:dd:69:05:45:0d:7d:e5:2b:2a:e0:
                    3a:2e:98:a3:21:1e:1a:31:65:0e:93:d9:61:8c:68:
                    68:78:d3:32:13:1b:4d:2c:d1:5c:66:ad:29:45:a6:
                    8f:46:a1:af:67:fd:b5:ff:19:c4:00:b6:d1:8a:b2:
                    63:cf:45:d0:ee:a0:2b:d9:93:1b:15:01:18:a3:0b:
                    c5:78:0c:b3:d2:56:87:ae:ec:8e:70:4f:62:51:2d:
                    18:fc:a5:6d:fa:a7:ae:90:00:06:8c:42:03:a1:b1:
                    6d:93:ca:c4:7b:b6:48:e5:52:e0:91:31:2b:06:ae:
                    fe:2d:88:8e:dd:3b:2e:4f:72:47:37:3f:de:af:ed:
                    d9:c0:ee:ed:62:08:24:e6:cc:89:92:5c:bf:21:94:
                    b4:33:17:3f:89:8f:b4:ba:f5:0d:d8:57:50:20:f6:
                    72:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8E:44:84:F1:EC:FF:E6:AA:A1:97:A5:B6:E9:D1:D5:FD:B4:1E:34
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2497EEE668AA11F0A6190C97DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:2d:ed:b2:a6:8f:c2:93:c9:5a:b9:96:89:c3:8b:30:ba:61:
         38:72:23:ea:b9:23:c6:94:77:97:e8:ea:4b:18:0d:94:a9:6a:
         b7:d1:bc:e9:95:d6:ac:cf:6d:4c:a9:18:61:64:32:8c:a8:9a:
         f2:6e:1a:0d:fe:23:88:d8:ab:44:a6:d2:ee:58:11:f7:cd:fa:
         7e:01:fe:24:ef:c3:aa:d9:24:cf:b3:73:67:85:28:7d:e6:fb:
         b0:b8:98:2f:96:91:5c:58:09:a2:12:99:08:18:a2:1e:f7:10:
         4f:51:82:97:4d:49:26:f3:7d:3f:85:24:0d:41:ee:7b:98:91:
         ce:9f:a9:fa:50:dc:4b:39:e5:9d:ad:98:83:d3:c9:71:b4:a7:
         ea:10:03:63:c7:21:69:65:e3:ce:63:b4:ec:8e:b5:f7:ff:b3:
         0e:bb:19:20:ea:90:91:d7:05:37:1e:aa:2e:3b:fc:fe:81:b6:
         63:cc:7b:b9:5c:c6:ac:bf:a5:c1:7f:fd:5c:8e:4a:d2:3a:f7:
         80:3b:f1:2d:08:90:50:ad:96:b8:03:d0:c3:1b:6b:67:eb:f3:
         09:64:22:f7:1c:ff:82:60:28:95:9e:b8:73:27:8c:61:4b:42:
         6d:d5:01:c4:f6:2a:f8:d6:86:68:aa:d6:4b:a7:a9:aa:7d:f9:
         77:20:f6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:08:30 2025 by rpki-client