Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27B1A408BE4611F189B218E1CE1D38B0.roa
File:                     27B1A408BE4611F189B218E1CE1D38B0.roa (raw, json)
Hash identifier:          AMrmeEwVA5KdIszGQ62D0X4bE80he/XNHfe1WZCa9y8=
Subject key identifier:   64:09:3C:3D:15:8E:2A:2C:7D:30:B4:D0:C8:55:C8:DB:C9:D1:17:57
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DA1E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27B1A408BE4611F189B218E1CE1D38B0.roa
Signing time:             Fri 02 Oct 2026 09:46:35 +0000
ROA not before:           Fri 02 Oct 2026 09:46:31 +0000
ROA not after:            Tue 10 Nov 2026 09:46:31 +0000
asID:                     401366
IP address blocks:        45.207.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121374 (0x1da1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  2 09:46:31 2026 GMT
            Not After : Nov 10 09:46:31 2026 GMT
        Subject: CN=6abf7d7b-ba09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e5:02:74:22:33:f1:ca:67:1d:49:60:81:d8:
                    bf:23:bc:ee:cf:4b:20:19:c0:1d:98:1a:dc:f6:2d:
                    7d:aa:36:1d:db:03:f1:b9:13:83:12:bd:85:ba:63:
                    b0:f8:28:5c:c3:62:ef:67:19:59:4e:1a:55:4b:67:
                    6d:6d:d3:54:60:ca:74:70:8c:be:18:e5:b7:0a:54:
                    ed:98:73:48:4a:38:ee:3f:be:7d:67:f1:c3:aa:52:
                    dc:22:d1:df:ac:1c:02:55:24:0a:32:59:df:b9:18:
                    3e:d8:49:73:76:ac:cb:2a:03:51:06:05:e1:55:dd:
                    51:0c:25:f8:55:1d:6b:5b:17:b3:e3:dd:4b:44:ea:
                    2b:06:92:a2:ca:5c:e2:2a:9c:6c:45:2d:34:8e:f1:
                    f1:78:aa:cd:1a:35:2b:e9:b3:bb:15:39:d5:84:e0:
                    8e:47:cd:67:73:c1:29:85:0c:47:96:e1:00:fd:c7:
                    da:71:a6:3d:ad:31:c9:a6:15:cb:88:b2:19:c4:51:
                    aa:8f:3c:9a:d7:7d:82:a2:3f:4c:38:96:13:d7:ab:
                    46:d8:6c:2b:84:69:89:8b:a4:70:23:dc:d8:7a:d6:
                    bb:d8:46:8b:bd:22:c5:fc:ac:72:f8:50:fc:e9:80:
                    de:97:b3:a1:b6:b4:94:94:a8:7f:c4:32:b7:eb:50:
                    69:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:09:3C:3D:15:8E:2A:2C:7D:30:B4:D0:C8:55:C8:DB:C9:D1:17:57
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27B1A408BE4611F189B218E1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:67:ce:3d:45:a4:fb:c1:ad:e5:4f:9a:8e:72:71:62:fe:ee:
         c3:33:8c:eb:6f:09:0e:76:d0:25:05:e4:0a:3d:ad:d9:26:35:
         bc:53:76:0d:f2:93:00:8a:f5:27:30:6e:16:62:65:2c:a6:38:
         35:4b:21:29:24:6c:10:90:a3:fd:f8:8e:8c:bb:c3:05:4d:77:
         6a:44:cb:65:ff:94:e4:83:c2:c7:ab:43:84:ec:17:3f:41:db:
         96:7f:ec:3a:7a:41:1c:7f:8f:c9:31:0e:30:b5:04:60:47:a8:
         80:50:52:68:37:89:c8:51:ad:70:21:c8:dd:07:ee:5b:43:b2:
         4d:cf:e6:04:1a:17:a5:43:2e:ec:8d:9a:6b:cb:2f:8a:a0:e2:
         73:70:21:76:9c:d9:fc:69:66:86:7b:81:70:2d:45:0e:a9:6d:
         e3:e9:f2:9a:e5:85:39:3f:06:a6:ed:a0:d8:9e:a5:ae:20:7f:
         9a:2a:9a:c3:dd:79:53:94:68:3e:f1:87:d2:74:9e:c1:c8:d5:
         e9:61:9d:91:68:5f:c7:42:f8:b9:25:86:e6:05:4d:76:9b:f4:
         8d:79:cf:10:ef:6d:96:55:83:7b:7f:02:6d:7a:79:49:1b:4f:
         95:2c:3b:36:db:2a:7d:ce:b5:be:c1:c1:88:e0:b2:b3:1a:04:
         58:3f:52:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----