Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E0CAC60624D11F1B99E44B3CE1D38B0.roa
File:                     4E0CAC60624D11F1B99E44B3CE1D38B0.roa (raw, json)
Hash identifier:          +qp5lhxhRQEyNn99rlWgnk5U/JuzMosIYniYxmurO68=
Subject key identifier:   B3:F5:38:BB:F5:FB:70:46:EB:C6:EC:5D:6E:7F:12:77:BA:95:04:8C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BC4B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E0CAC60624D11F1B99E44B3CE1D38B0.roa
Signing time:             Sun 07 Jun 2026 08:45:59 +0000
ROA not before:           Sun 07 Jun 2026 08:45:54 +0000
ROA not after:            Thu 07 Jun 2029 08:45:54 +0000
asID:                     17561
IP address blocks:        45.199.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113739 (0x1bc4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun  7 08:45:54 2026 GMT
            Not After : Jun  7 08:45:54 2029 GMT
        Subject: CN=6a252fc7-3bea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4a:f9:3b:4b:ce:d9:4d:42:ab:3a:0a:61:61:
                    c7:07:36:d8:b8:d5:34:74:88:0f:17:8e:36:b6:ea:
                    47:91:71:22:0a:ee:06:f3:ca:3f:bb:87:1f:38:11:
                    84:48:97:8e:f1:d1:a7:12:d6:2c:58:fd:6c:d1:75:
                    64:db:fa:8f:22:20:ee:48:b4:51:bc:b9:0e:4f:8b:
                    64:9d:07:e4:73:3d:cb:e2:d3:e7:ce:f3:2e:fc:49:
                    c1:9e:b7:e1:5b:6b:f1:24:4c:0a:23:8f:4e:78:a5:
                    11:0d:08:ff:cd:a0:44:4c:22:83:17:91:54:ef:40:
                    55:df:2a:42:b4:8a:17:e3:7f:f9:d1:76:bd:bd:ef:
                    93:a6:87:fd:97:43:d0:33:e7:c2:3d:76:84:d0:f7:
                    2f:4a:5b:2d:98:7b:e3:57:e1:0e:ae:7d:1f:19:c7:
                    fa:e9:72:33:ec:d5:05:6b:c4:89:c1:3b:17:93:bb:
                    af:65:a0:5b:2d:a0:8e:a7:2a:46:74:12:38:1b:60:
                    db:1c:5d:21:50:10:48:26:97:f3:5e:c3:f8:6d:a3:
                    b1:44:e4:02:6b:18:96:29:1d:ad:57:e9:6e:9d:92:
                    ae:44:78:78:8d:af:5a:49:de:73:66:ec:14:72:80:
                    75:91:54:11:95:c9:0d:a6:38:42:c6:04:fa:71:83:
                    ad:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F5:38:BB:F5:FB:70:46:EB:C6:EC:5D:6E:7F:12:77:BA:95:04:8C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E0CAC60624D11F1B99E44B3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:57:1d:ea:2f:d7:58:25:93:4d:81:de:73:57:cc:2a:b7:e5:
         d4:27:cd:9f:fa:76:09:4b:8a:d6:b7:49:fc:0f:d4:a7:cf:11:
         33:4a:94:4e:d2:69:e4:57:cb:97:a8:3f:fc:60:e8:2d:96:16:
         95:2c:69:2f:84:73:57:39:9b:0c:00:3a:1b:7b:37:8d:c6:24:
         cc:49:b1:ef:99:65:87:43:55:6f:5b:b6:68:4f:d6:17:25:40:
         e2:72:04:56:14:4a:61:dd:71:28:0a:5d:0f:71:98:bb:46:57:
         5a:30:ab:2e:09:3e:7d:aa:34:90:d7:84:23:00:8e:6e:55:c6:
         c3:e4:a7:8e:40:98:73:dc:cb:66:0e:31:52:c7:6f:f2:37:1e:
         22:4c:d6:85:a7:5a:a5:4b:09:80:85:81:97:7d:a4:17:4d:a4:
         40:f2:c1:b6:e3:8e:5c:88:2e:15:99:86:97:f3:b0:04:a9:e7:
         97:72:a6:08:70:7c:62:90:b8:0b:90:b4:a7:d2:80:bd:00:0c:
         10:d2:aa:35:78:a6:27:d3:1f:f6:57:e9:43:31:d1:46:bd:f0:
         9b:00:02:f6:5c:73:fc:5a:d1:b5:82:15:8e:2b:12:92:11:68:
         e7:b4:0d:00:5b:b8:4a:60:be:9d:0a:8d:bf:e3:12:26:71:8a:
         eb:d1:6e:1b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbxLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjA3MDg0NTU0WhcNMjkwNjA3MDg0NTU0WjAYMRYw
FAYDVQQDEw02YTI1MmZjNy0zYmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnEr5O0vO2U1CqzoKYWHHBzbYuNU0dIgPF442tupHkXEiCu4G88o/u4cf
OBGESJeO8dGnEtYsWP1s0XVk2/qPIiDuSLRRvLkOT4tknQfkcz3L4tPnzvMu/EnB
nrfhW2vxJEwKI49OeKURDQj/zaBETCKDF5FU70BV3ypCtIoX43/50Xa9ve+Tpof9
l0PQM+fCPXaE0PcvSlstmHvjV+EOrn0fGcf66XIz7NUFa8SJwTsXk7uvZaBbLaCO
pypGdBI4G2DbHF0hUBBIJpfzXsP4baOxROQCaxiWKR2tV+lunZKuRHh4ja9aSd5z
ZuwUcoB1kVQRlckNpjhCxgT6cYOtUwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLP1
OLv1+3BG68bsXW5/Ene6lQSMMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80RTBDQUM2MDYyNEQxMUYxQjk5RTQ0QjNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcezMA0GCSqGSIb3DQEBCwUA
A4IBAQA8Vx3qL9dYJZNNgd5zV8wqt+XUJ82f+nYJS4rWt0n8D9SnzxEzSpRO0mnk
V8uXqD/8YOgtlhaVLGkvhHNXOZsMADobezeNxiTMSbHvmWWHQ1VvW7ZoT9YXJUDi
cgRWFEph3XEoCl0PcZi7RldaMKsuCT59qjSQ14QjAI5uVcbD5KeOQJhz3MtmDjFS
x2/yNx4iTNaFp1qlSwmAhYGXfaQXTaRA8sG2445ciC4VmYaX87AEqeeXcqYIcHxi
kLgLkLSn0oC9AAwQ0qo1eKYn0x/2V+lDMdFGvfCbAAL2XHP8WtG1ghWOKxKSEWjn
tA0AW7hKYL6dCo2/4xImcYrr0W4b
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:24:47 2026 by rpki-client