Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/576511A80F1411F1AE3293C5DAE4EC9C.roa
File:                     576511A80F1411F1AE3293C5DAE4EC9C.roa (raw, json)
Hash identifier:          AKzWIMHL6YdwiqEzAaVY38L0bMafVkpyzPqO2yzZmQo=
Subject key identifier:   62:45:47:5D:93:2D:B3:65:36:34:2B:E5:A2:3C:0B:71:27:45:DE:0D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019F73
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/576511A80F1411F1AE3293C5DAE4EC9C.roa
Signing time:             Sat 21 Feb 2026 10:59:07 +0000
ROA not before:           Sat 21 Feb 2026 10:59:02 +0000
ROA not after:            Sat 28 Mar 2026 10:59:02 +0000
asID:                     62240
IP address blocks:        45.192.32.0/24 maxlen: 24
                          45.192.33.0/24 maxlen: 24
                          45.192.34.0/24 maxlen: 24
                          45.192.35.0/24 maxlen: 24
                          45.192.36.0/24 maxlen: 24
                          45.192.37.0/24 maxlen: 24
                          45.192.38.0/24 maxlen: 24
                          45.192.39.0/24 maxlen: 24
                          45.192.40.0/24 maxlen: 24
                          45.192.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106355 (0x19f73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 21 10:59:02 2026 GMT
            Not After : Mar 28 10:59:02 2026 GMT
        Subject: CN=69998ffa-f55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c2:eb:69:e4:ab:5c:4d:02:ba:d4:ad:6d:f7:
                    25:3f:05:79:e1:ef:9b:d3:97:92:db:c2:6b:3b:30:
                    3a:21:2b:5a:b5:ae:43:af:54:bb:58:a0:6f:15:d9:
                    14:d5:c4:69:18:94:0e:34:28:77:6f:60:34:4e:b3:
                    c3:ac:46:dc:fd:99:c8:b6:2b:b7:20:b7:e1:c0:95:
                    40:a8:4c:a8:08:3a:c7:c2:9b:25:00:69:3a:8e:a1:
                    44:f2:d4:d0:9a:9d:0f:4e:4f:2d:bc:b5:67:f3:8d:
                    97:a7:3a:8e:63:a9:da:53:78:44:b1:d3:df:7b:49:
                    09:d9:05:1e:ad:2b:a6:d4:2f:83:c4:2b:44:0f:af:
                    55:1e:1c:87:a8:f1:e6:ac:34:46:bc:c9:ed:20:d2:
                    bb:ad:f3:4b:d2:0c:79:41:4c:25:34:dc:a5:f4:fb:
                    7b:bc:5a:a9:0b:33:fb:cc:3d:d6:ba:f1:43:d8:a3:
                    4a:47:64:43:8a:fe:ff:38:94:7e:72:8c:9d:cb:02:
                    86:7b:e2:55:3d:3d:94:d3:3e:d6:5e:ee:56:b2:d7:
                    3c:ff:83:3a:9b:c0:18:9e:9a:1b:53:d2:30:a2:bc:
                    4c:f7:fd:c5:1c:ca:75:e6:db:20:09:bd:96:ce:a8:
                    7e:97:fe:72:79:08:00:2f:8f:ee:7f:0c:b3:7a:7f:
                    56:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:45:47:5D:93:2D:B3:65:36:34:2B:E5:A2:3C:0B:71:27:45:DE:0D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/576511A80F1411F1AE3293C5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.32.0-45.192.41.255

    Signature Algorithm: sha256WithRSAEncryption
         6f:60:68:ea:db:cd:f9:ad:49:c5:7f:8b:18:9d:4e:57:b5:b6:
         45:4c:ac:fa:8c:f8:33:f7:d1:31:f0:06:36:f6:a7:be:f3:c8:
         4e:95:45:39:30:59:c9:89:24:e4:72:3b:c0:91:f5:15:2a:62:
         ea:ed:0c:09:e0:b7:ea:09:4c:7e:e6:e5:b7:6b:3b:fb:20:40:
         95:ec:7d:b7:a2:14:d2:6f:52:36:a3:51:83:67:5f:5f:39:5a:
         f8:f3:aa:dc:17:29:9a:d1:d2:9c:09:6b:e6:d9:99:e4:70:5c:
         98:60:47:81:65:0b:8f:87:07:cf:1d:7e:7f:b7:3f:ca:e8:3a:
         2a:01:03:2f:bf:9a:70:c9:f8:dc:69:fb:8f:af:2f:35:f2:34:
         98:d2:64:99:9c:0e:e2:30:b4:c4:4b:cf:89:30:2a:da:23:62:
         c1:b5:4e:68:92:10:7a:d7:9a:19:ae:ed:74:61:82:4d:27:7d:
         fe:77:88:cc:3b:fc:59:fa:9b:2e:2d:14:74:df:b0:5f:cb:02:
         15:1d:69:f2:1a:7a:ba:7c:82:a0:b3:f7:ee:8c:64:35:70:27:
         4e:8c:a0:48:75:19:e3:97:7c:11:02:36:56:01:36:c9:70:da:
         00:a1:e3:a8:53:8b:f1:91:c5:68:1f:85:74:ec:09:65:d9:a4:
         0c:48:16:2e
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAZ9zMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjIxMTA1OTAyWhcNMjYwMzI4MTA1OTAyWjAYMRYw
FAYDVQQDEw02OTk5OGZmYS1mNTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxsLraeSrXE0CutStbfclPwV54e+b05eS28JrOzA6IStata5Dr1S7WKBv
FdkU1cRpGJQONCh3b2A0TrPDrEbc/ZnItiu3ILfhwJVAqEyoCDrHwpslAGk6jqFE
8tTQmp0PTk8tvLVn842XpzqOY6naU3hEsdPfe0kJ2QUerSum1C+DxCtED69VHhyH
qPHmrDRGvMntINK7rfNL0gx5QUwlNNyl9Pt7vFqpCzP7zD3WuvFD2KNKR2RDiv7/
OJR+coydywKGe+JVPT2U0z7WXu5Wstc8/4M6m8AYnpobU9IworxM9/3FHMp15tsg
Cb2Wzqh+l/5yeQgAL4/ufwyzen9WVwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFGJF
R12TLbNlNjQr5aI8C3EnRd4NMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NzY1MTFBODBGMTQxMUYxQUUzMjkzQzVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAUtwCADBAEtwCgwDQYJKoZI
hvcNAQELBQADggEBAG9gaOrbzfmtScV/ixidTle1tkVMrPqM+DP30THwBjb2p77z
yE6VRTkwWcmJJORyO8CR9RUqYurtDAngt+oJTH7m5bdrO/sgQJXsfbeiFNJvUjaj
UYNnX185WvjzqtwXKZrR0pwJa+bZmeRwXJhgR4FlC4+HB88dfn+3P8roOioBAy+/
mnDJ+Nxp+4+vLzXyNJjSZJmcDuIwtMRLz4kwKtojYsG1TmiSEHrXmhmu7XRhgk0n
ff53iMw7/Fn6my4tFHTfsF/LAhUdafIaerp8gqCz9+6MZDVwJ06MoEh1GeOXfBEC
NlYBNslw2gCh46hTi/GRxWgfhXTsCWXZpAxIFi4=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:21 2026 by rpki-client