Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A3264B25FEB11F18CB5ADB3CE1D38B0.roa
File:                     5A3264B25FEB11F18CB5ADB3CE1D38B0.roa (raw, json)
Hash identifier:          R0weq3VNcR0jOG96Wv4Cx724Fqv/JHoESt+XvXsk/vQ=
Subject key identifier:   D4:F0:90:DB:14:BB:C1:66:6A:0F:53:0F:40:CF:EA:81:90:D9:3E:CC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BBAE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A3264B25FEB11F18CB5ADB3CE1D38B0.roa
Signing time:             Thu 04 Jun 2026 07:59:46 +0000
ROA not before:           Thu 04 Jun 2026 07:59:41 +0000
ROA not after:            Fri 10 Jul 2026 07:59:41 +0000
asID:                     63139
IP address blocks:        45.197.75.0/24 maxlen: 24
                          45.197.76.0/24 maxlen: 24
                          45.197.77.0/24 maxlen: 24
                          45.197.78.0/24 maxlen: 24
                          45.197.79.0/24 maxlen: 24
                          45.197.80.0/24 maxlen: 24
                          45.197.81.0/24 maxlen: 24
                          45.197.82.0/24 maxlen: 24
                          45.197.83.0/24 maxlen: 24
                          45.197.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113582 (0x1bbae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun  4 07:59:41 2026 GMT
            Not After : Jul 10 07:59:41 2026 GMT
        Subject: CN=6a213072-c48c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bc:fc:02:05:f9:a7:09:b4:26:d8:79:bb:d1:
                    ce:3b:de:90:66:c9:c3:7d:2b:cd:02:4d:9c:ed:96:
                    85:ef:d4:ef:fb:d5:57:27:83:29:5e:95:25:a2:27:
                    51:c0:c7:08:18:bc:77:50:f1:ba:a4:b3:55:25:10:
                    fb:0e:99:9a:1f:a7:f0:01:3f:3f:a5:3d:17:a1:be:
                    29:1c:86:77:22:01:a6:70:34:27:b3:0e:d0:73:08:
                    df:b5:f3:45:c2:b6:45:a2:3e:c7:ef:0a:c6:7b:67:
                    4e:ac:01:11:dd:69:b5:e1:81:57:70:17:0e:3a:26:
                    27:48:a1:a4:f3:b0:5b:56:c9:00:98:4c:13:a2:a7:
                    32:bb:62:af:ca:0f:f0:f8:17:97:97:72:b7:bc:2e:
                    8c:be:70:4f:7f:fc:a6:88:33:13:06:e1:9f:9e:d2:
                    29:cf:ea:42:64:74:b1:ee:47:9a:5c:21:bc:dd:6e:
                    e6:99:38:59:2d:e3:f0:e2:c6:6f:d1:db:cc:58:6d:
                    06:f1:b9:ea:23:b9:13:f7:72:73:fa:f0:d2:b2:67:
                    cd:3f:c0:4a:25:54:a2:5d:c0:0b:50:50:5b:8e:9c:
                    20:23:fb:ef:02:5b:73:18:f4:46:25:35:69:b6:0e:
                    1d:3b:0c:0e:af:4e:b2:de:ae:d2:6c:2f:7e:6d:04:
                    5a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F0:90:DB:14:BB:C1:66:6A:0F:53:0F:40:CF:EA:81:90:D9:3E:CC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A3264B25FEB11F18CB5ADB3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.75.0-45.197.84.255

    Signature Algorithm: sha256WithRSAEncryption
         3a:54:f8:1b:25:ec:82:a6:85:45:76:5a:df:ab:35:00:b0:a8:
         74:fb:e7:b9:f3:7b:62:80:7c:19:af:14:b7:7f:19:6f:00:89:
         9a:1f:00:2c:bc:c8:f9:54:90:8f:c3:a4:7e:fe:c5:32:a9:76:
         19:1a:aa:43:48:6b:fe:43:d2:d0:d8:9a:ed:44:02:7e:e7:78:
         00:58:ce:7f:fb:2e:7e:f1:92:57:a7:c1:75:dd:96:47:0b:81:
         f1:9a:9c:d7:b5:38:8d:62:5b:85:3b:45:f7:ae:de:2b:2c:55:
         15:31:05:56:2b:ba:52:0b:75:6d:ab:ed:e5:2d:8f:94:f6:7c:
         1c:26:c1:f3:2c:ae:bf:d1:e8:4c:a5:b3:7c:a8:f1:df:73:a6:
         79:5d:c3:f6:f5:ad:59:96:b8:71:dd:61:e0:87:cd:2d:c4:f3:
         ce:51:66:5c:fe:5f:94:c6:a1:a2:ca:42:1d:eb:88:14:b8:46:
         13:1d:43:5b:64:95:39:99:99:be:93:1f:de:4e:6b:21:dd:66:
         9f:81:2e:63:d4:21:6b:9c:32:d8:10:5a:01:f9:3f:6b:4a:b3:
         b4:8e:ed:aa:e5:55:cf:58:97:c8:68:3b:5d:d8:51:d5:78:e9:
         9b:11:64:bc:c7:4a:d7:e5:c7:28:2a:3c:7b:a2:36:31:bf:be:
         74:bd:9b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:34:03 2026 by rpki-client