Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6199B35A2ECB11F1804E32D9DAE4EC9C.roa
File:                     6199B35A2ECB11F1804E32D9DAE4EC9C.roa (raw, json)
Hash identifier:          GgHTVApU6bgHZCsIgiBify6ksmbY7RWMdaMfAcXbyh4=
Subject key identifier:   CE:EE:E1:3E:E4:E4:FD:CD:E9:D6:AF:3D:3D:A6:14:56:68:4C:8D:AC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01A975
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6199B35A2ECB11F1804E32D9DAE4EC9C.roa
Signing time:             Thu 02 Apr 2026 19:37:28 +0000
ROA not before:           Thu 02 Apr 2026 19:37:20 +0000
ROA not after:            Sun 10 May 2026 19:37:20 +0000
asID:                     138915
IP address blocks:        156.244.23.0/24 maxlen: 24
                          156.244.24.0/24 maxlen: 24
                          156.244.36.0/24 maxlen: 24
                          156.244.42.0/24 maxlen: 24
                          156.244.43.0/24 maxlen: 24
                          156.244.44.0/24 maxlen: 24
                          156.244.45.0/24 maxlen: 24
                          156.244.46.0/24 maxlen: 24
                          156.244.47.0/24 maxlen: 24
                          156.244.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108917 (0x1a975)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr  2 19:37:20 2026 GMT
            Not After : May 10 19:37:20 2026 GMT
        Subject: CN=69cec578-824b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:fa:13:89:20:32:af:eb:da:77:4e:56:11:
                    c4:5c:78:fb:85:af:01:b8:11:d9:15:df:67:5d:a4:
                    7e:1d:88:94:d9:c6:c8:18:fd:d0:07:a8:f1:dd:4c:
                    04:3a:31:5e:c7:bb:b6:50:bc:9f:c6:10:8e:e6:35:
                    74:4d:da:be:09:36:b7:d8:07:19:d8:e0:bf:e1:15:
                    1a:2b:01:3b:15:ea:78:cc:dd:b9:15:a3:fe:50:55:
                    18:d2:bc:96:73:c0:03:61:e8:28:88:74:6a:5e:23:
                    26:ad:fb:a1:83:05:89:50:47:dc:dd:f2:37:19:e1:
                    3c:59:68:79:eb:2a:8f:8c:5f:e8:36:32:44:9c:a6:
                    00:c5:16:77:5a:c0:a6:f7:63:87:72:75:93:96:0f:
                    8e:b1:38:18:ee:f0:6e:2f:ce:75:1d:42:8d:01:d8:
                    fc:12:93:54:94:ef:36:14:bb:3f:30:31:c1:21:05:
                    1b:13:c1:a2:6d:49:b2:fb:43:31:10:4a:9f:4f:6a:
                    53:5b:11:98:91:42:d4:d1:95:92:58:d1:d1:ad:a5:
                    43:73:5d:17:4d:05:a0:6d:5e:db:77:68:43:e6:8c:
                    2c:22:c6:a4:25:fe:5a:6d:95:da:27:f1:17:cc:5a:
                    e8:2b:5c:68:84:96:6d:bb:50:ed:ee:8d:08:26:6e:
                    54:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:EE:E1:3E:E4:E4:FD:CD:E9:D6:AF:3D:3D:A6:14:56:68:4C:8D:AC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6199B35A2ECB11F1804E32D9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.23.0-156.244.24.255
                  156.244.36.0/24
                  156.244.42.0-156.244.47.255
                  156.244.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:c7:9c:de:41:7c:1d:b1:6b:31:a8:7c:b3:d5:6c:d5:48:a6:
         62:4b:f0:2a:af:53:69:9b:d8:f6:64:b6:05:1a:17:23:a7:75:
         db:cd:71:04:b7:ab:ee:0a:45:0b:fd:97:db:4d:ea:d8:67:2e:
         30:7d:1a:53:54:99:e3:a1:f8:03:16:c4:e0:55:20:c1:af:8b:
         b2:87:5d:63:61:32:9c:3a:15:34:6a:3a:5e:e0:e3:d2:8a:80:
         fd:09:3d:61:51:2a:54:7f:af:84:b9:6a:eb:3f:8b:cf:e0:b0:
         0c:43:9a:ef:d1:03:ba:15:a4:bf:d7:9d:f9:df:81:62:a8:3e:
         d4:34:f9:d6:2c:7d:91:95:cf:de:2c:0a:c0:2c:c7:0d:1c:bb:
         b6:e9:85:f8:df:cc:0e:47:16:9a:f2:11:4e:99:8a:25:ca:37:
         a5:8b:5f:e1:e7:ed:fe:9d:69:06:66:2a:32:d2:bf:62:e2:c8:
         8e:71:5c:e4:9a:09:29:0c:65:a1:d5:9e:6d:be:72:b9:05:06:
         59:9d:76:85:86:d2:f6:a3:3a:e6:7d:47:b3:a5:59:9c:10:d3:
         50:c6:a6:8c:5b:8a:47:cc:a3:4b:d9:70:21:4e:d3:6d:96:dc:
         88:cd:09:b1:32:9d:86:90:b7:2f:17:67:7e:ae:07:78:8f:a4:
         29:b8:81:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:28:36 2026 by rpki-client