Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EAFA008098011F1B3FB50F6DAE4EC9C.roa
File:                     4EAFA008098011F1B3FB50F6DAE4EC9C.roa (raw, json)
Hash identifier:          J6ur7TidiYPnn13xzDKMRm7/rMgnbnYb/YeKhThaJmM=
Subject key identifier:   AF:39:E8:7D:48:D8:6E:E4:6A:0F:54:83:CA:1D:4B:96:5F:66:42:98
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019D92
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EAFA008098011F1B3FB50F6DAE4EC9C.roa
Signing time:             Sat 14 Feb 2026 08:36:51 +0000
ROA not before:           Sat 14 Feb 2026 08:36:46 +0000
ROA not after:            Mon 16 Mar 2026 08:36:46 +0000
asID:                     271916
IP address blocks:        45.207.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105874 (0x19d92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 14 08:36:46 2026 GMT
            Not After : Mar 16 08:36:46 2026 GMT
        Subject: CN=69903423-c30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:63:45:bf:f3:93:aa:bd:61:0c:2f:bf:cb:fc:
                    80:f9:fb:6e:1d:6d:c8:9d:45:33:37:b0:16:af:a6:
                    6c:d5:8e:80:cb:5c:93:17:34:4a:6d:d8:75:c3:89:
                    42:ba:c7:65:8d:74:90:85:33:0b:bf:42:33:19:df:
                    48:12:4e:d4:21:d5:87:0e:93:03:31:72:57:e7:48:
                    5e:ba:cc:af:b2:41:14:6e:46:0f:1c:5f:c3:b7:30:
                    89:c7:80:a9:ee:1e:ff:30:63:07:8b:90:d6:e7:66:
                    5a:8b:04:31:05:a8:f1:5d:15:0b:ff:08:6a:42:a4:
                    2f:42:f5:11:73:9a:50:7a:02:54:25:b1:d7:35:c3:
                    4d:ad:64:6f:d2:a9:6b:37:71:36:dc:cd:bc:dc:e1:
                    cc:79:49:3e:cd:a2:e0:cf:5f:b0:5a:25:26:45:f8:
                    ef:ca:a5:c0:78:f1:5f:bf:3c:c2:e5:17:4f:df:17:
                    1b:2b:2e:e4:a9:fc:6d:f7:59:08:50:01:b1:46:9f:
                    eb:08:32:2d:5d:31:75:12:66:73:f2:e3:f0:23:75:
                    8e:b0:f9:4f:a1:d7:67:f7:c2:1e:ec:f2:5d:6f:d4:
                    9f:2a:c2:8c:ee:b9:0f:9c:f1:ea:b1:2e:24:d8:d9:
                    ee:20:d4:04:2b:7b:ef:59:87:b4:23:83:2f:0f:07:
                    45:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:39:E8:7D:48:D8:6E:E4:6A:0F:54:83:CA:1D:4B:96:5F:66:42:98
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EAFA008098011F1B3FB50F6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:44:13:9f:8f:5c:ff:88:fe:35:d8:5b:42:c3:58:44:02:a0:
         72:09:6f:05:48:26:fd:0c:49:bf:ca:0f:ab:9f:5a:b0:e5:2c:
         85:4e:e3:0c:7d:e5:4a:4e:a1:dc:7c:3a:cf:25:99:2d:0f:7b:
         8c:e9:eb:5d:f1:e5:0f:ae:84:88:6b:72:7a:50:84:f5:40:91:
         f7:d0:b1:a8:22:58:6c:7c:99:b9:a5:ff:ba:31:77:c2:dc:48:
         f3:c5:e8:a0:f8:b5:9e:c7:31:b9:48:3c:db:bc:f0:d2:2d:32:
         d6:51:ed:dd:81:61:f7:5e:ab:2e:b2:7c:87:94:38:c3:92:fb:
         60:60:a7:43:8e:d3:99:fd:ba:76:64:0b:8b:e9:10:af:81:1d:
         d5:e3:57:73:99:97:e6:b0:a7:fd:ef:04:be:61:72:6c:4c:bb:
         61:f9:84:f3:a7:b1:66:94:ad:92:1f:6a:78:de:a7:ff:6a:cf:
         0d:fa:44:68:82:a2:dd:cf:04:72:61:d4:e0:20:eb:dd:1b:2c:
         3e:de:3a:20:f9:12:35:b1:56:27:e8:02:dc:38:da:f1:aa:84:
         de:0d:96:bb:a2:70:f4:1f:cc:36:9a:11:22:94:79:8a:d7:06:
         8e:82:61:45:1d:4b:c1:90:38:e0:12:c8:21:df:8d:1e:61:86:
         5d:d3:77:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:41:45 2026 by rpki-client