Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A3D5F2CAC1F11F1B3B24DAFCE1D38B0.roa
File:                     5A3D5F2CAC1F11F1B3B24DAFCE1D38B0.roa (raw, json)
Hash identifier:          g2rog7V6kEQ0Q02N2LGQ5cQcQa2EbfPJlnb0qyikAPc=
Subject key identifier:   44:4F:C5:C1:6D:15:24:59:77:15:BC:D1:64:97:04:24:BF:37:FB:FF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D445
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A3D5F2CAC1F11F1B3B24DAFCE1D38B0.roa
Signing time:             Wed 09 Sep 2026 07:23:28 +0000
ROA not before:           Wed 09 Sep 2026 07:23:24 +0000
ROA not after:            Tue 13 Oct 2026 07:23:24 +0000
asID:                     154383
IP address blocks:        45.201.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119877 (0x1d445)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  9 07:23:24 2026 GMT
            Not After : Oct 13 07:23:24 2026 GMT
        Subject: CN=6aa10970-c223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:4e:56:43:76:53:2c:89:1a:31:68:ee:4f:
                    5a:c6:8a:c0:32:bc:e2:3c:14:29:94:38:3d:40:c3:
                    e0:08:31:44:99:0e:d9:8d:59:f6:18:7b:b8:04:a6:
                    34:12:13:33:80:4a:de:22:e1:94:9a:49:c5:3b:2b:
                    8a:bc:b5:81:f4:e4:4c:78:38:66:7e:c6:cb:dd:79:
                    d6:8a:1d:6e:2a:b0:a8:33:19:84:c1:5a:84:32:b1:
                    cb:63:83:53:e7:86:bc:66:58:c0:ab:e2:02:76:ee:
                    4f:ec:e2:5a:ac:dd:66:36:4a:cd:99:de:f8:96:fe:
                    7a:6e:23:38:c7:60:6f:ec:a3:e6:30:ca:2a:52:e4:
                    b1:47:0d:d0:57:cc:4c:93:ee:0d:5a:d6:d3:c5:46:
                    41:5d:37:03:9a:74:47:30:53:63:58:39:24:24:7e:
                    33:0a:66:be:65:68:7f:fd:83:86:1d:b0:85:82:a5:
                    f1:48:16:68:0d:f6:31:03:e3:5c:ae:0a:1d:6d:50:
                    24:6b:db:02:a0:7d:54:a9:64:af:43:fe:b4:a1:bf:
                    ba:4e:9b:69:ca:ae:7d:86:40:4c:6b:b1:09:dd:9d:
                    80:0e:b2:c2:8a:3d:fc:78:10:0b:0a:f6:da:0b:f3:
                    40:3c:fe:30:f1:a7:b6:66:eb:a3:fe:47:5b:41:04:
                    e6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4F:C5:C1:6D:15:24:59:77:15:BC:D1:64:97:04:24:BF:37:FB:FF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A3D5F2CAC1F11F1B3B24DAFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:4a:e7:8c:4b:5b:49:97:b2:2d:88:24:60:49:bc:56:6f:b3:
         f4:07:76:e9:45:cd:71:dd:ac:d8:04:43:4a:ae:94:72:32:6e:
         1f:89:73:26:df:50:2d:f3:0f:e5:09:cb:13:91:3b:1e:69:c5:
         a4:99:61:3c:34:c0:1d:4f:89:e0:a5:84:bd:1b:1c:fd:a4:be:
         61:48:de:92:8e:aa:ff:f1:73:1c:e1:ac:9d:16:6a:b6:03:4f:
         9f:8e:29:b9:0c:38:e3:9f:84:6f:e4:a6:49:09:f4:66:68:5f:
         fe:c4:a9:0b:27:47:0c:91:69:db:d6:7e:99:4e:a9:58:e8:f4:
         42:c1:74:06:87:f0:f6:4c:c2:0c:9d:be:e7:9e:35:0b:24:f9:
         6c:7a:9e:ad:1e:f8:4f:95:ce:72:e6:9b:32:24:f9:59:c7:3a:
         43:79:73:6a:c4:79:f5:ee:28:4f:99:a3:18:8e:48:9c:7b:30:
         6b:b6:84:44:d8:43:5a:b2:bd:40:5e:ca:e6:a1:49:f9:c1:5e:
         d6:4d:32:f2:09:02:e3:f6:ae:5e:b0:6e:74:18:6a:2a:a3:be:
         dd:f3:7f:43:1e:96:d2:ff:f9:06:bb:0c:d3:90:7b:f4:28:eb:
         be:d3:1c:8b:17:9f:33:3f:84:1f:df:58:65:58:ab:0b:56:40:
         21:5d:62:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----