Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E039CE26D1311F098C328DADAE4EC9C.roa
File:                     7E039CE26D1311F098C328DADAE4EC9C.roa (raw, json)
Hash identifier:          RRGY1eWuZX04F7TMsdU1Hh5w+wrN8qUcf6vQDfqatmQ=
Subject key identifier:   7A:53:0D:8B:E5:F5:EF:E5:54:94:D1:0E:86:DD:D1:07:2F:17:E6:CC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       016813
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E039CE26D1311F098C328DADAE4EC9C.roa
Signing time:             Wed 30 Jul 2025 07:04:54 +0000
ROA not before:           Wed 30 Jul 2025 07:04:48 +0000
ROA not after:            Mon 01 Sep 2025 07:04:48 +0000
asID:                     213798
IP address blocks:        156.225.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 Aug 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92179 (0x16813)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 30 07:04:48 2025 GMT
            Not After : Sep  1 07:04:48 2025 GMT
        Subject: CN=6889c416-c1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e8:f1:46:96:45:d3:6c:6f:64:7b:6f:79:26:
                    de:33:07:0b:05:51:98:ce:78:b2:7b:ab:e7:50:26:
                    5d:27:e6:98:54:cb:a8:05:ac:c4:f8:9d:a7:47:5c:
                    22:38:73:47:61:a0:b0:3e:5c:86:2d:65:e6:21:f9:
                    c3:2d:ea:a0:33:fd:6a:46:68:b6:8c:18:98:fc:71:
                    31:1d:3e:c4:6a:87:56:ce:6c:1f:b8:e3:71:5c:bf:
                    43:4f:cc:7b:b4:a9:84:55:c6:f2:ec:d5:af:99:64:
                    df:d0:81:99:25:f8:aa:3c:ed:59:d8:32:68:33:bb:
                    ec:18:2e:eb:b1:25:9b:34:21:ef:b5:72:fa:21:77:
                    6e:db:f5:17:0a:f1:68:3f:ac:d8:ad:da:10:68:99:
                    fb:10:38:fe:a6:c7:a6:9c:56:40:3c:6b:aa:95:19:
                    9c:d8:b1:5d:1a:a5:21:76:1f:c3:ba:9b:68:8a:62:
                    87:8d:02:46:e4:ce:d6:59:d5:e4:53:41:ca:8f:0c:
                    35:a9:16:85:88:33:e4:55:ef:70:28:f3:d5:fa:2f:
                    f4:3a:a1:bc:32:6a:50:84:39:fb:82:44:e6:ae:27:
                    e2:c1:f2:f8:94:15:27:b7:35:fb:ba:d8:9b:9f:16:
                    88:86:cb:00:0f:00:42:19:46:2e:73:d4:dc:c2:b9:
                    5e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:53:0D:8B:E5:F5:EF:E5:54:94:D1:0E:86:DD:D1:07:2F:17:E6:CC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E039CE26D1311F098C328DADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:c4:bb:f3:37:ec:80:c3:ae:39:b3:a8:23:7c:4f:1b:b3:32:
         db:4b:96:b0:e1:f7:da:c6:01:fd:6f:9c:9b:50:c3:93:e3:69:
         4e:4d:bc:4f:71:68:21:73:fc:14:03:b4:52:c3:5e:19:f8:24:
         e9:ae:74:9a:0c:0e:2f:13:77:ca:a5:30:3a:9d:42:3c:5f:cc:
         8c:72:63:c7:36:23:f3:c3:82:82:78:57:e4:ef:30:4b:d0:b2:
         77:c6:f1:2f:98:2b:a4:43:7c:9c:c1:12:bf:ca:0f:08:06:28:
         f0:ac:2c:ff:85:c9:d4:de:3c:56:93:29:a4:c2:d5:a1:12:3f:
         95:bf:8e:19:07:36:f7:15:50:bf:8c:43:24:44:c3:79:18:4a:
         7c:98:a2:04:75:3e:a6:eb:08:94:f2:cb:aa:1f:f3:a9:0c:fc:
         1b:a5:e9:8d:9b:d2:ae:0a:5e:79:97:81:b2:82:5c:66:a9:ac:
         31:be:df:4b:66:f7:f8:61:27:45:24:15:41:cf:f6:b0:27:be:
         5f:39:ba:c1:d2:f6:3c:83:ee:28:8e:18:b6:c4:46:af:17:66:
         31:94:2e:e9:3b:e8:51:4d:fc:73:ca:6c:6d:39:fc:87:32:d1:
         6e:92:3b:5f:c2:99:af:a7:b1:5a:c3:da:cc:43:f1:10:97:7d:
         f4:09:91:0a
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAWgTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNzMwMDcwNDQ4WhcNMjUwOTAxMDcwNDQ4WjAYMRYw
FAYDVQQDEw02ODg5YzQxNi1jMWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7+jxRpZF02xvZHtveSbeMwcLBVGYzniye6vnUCZdJ+aYVMuoBazE+J2n
R1wiOHNHYaCwPlyGLWXmIfnDLeqgM/1qRmi2jBiY/HExHT7EaodWzmwfuONxXL9D
T8x7tKmEVcby7NWvmWTf0IGZJfiqPO1Z2DJoM7vsGC7rsSWbNCHvtXL6IXdu2/UX
CvFoP6zYrdoQaJn7EDj+psemnFZAPGuqlRmc2LFdGqUhdh/DuptoimKHjQJG5M7W
WdXkU0HKjww1qRaFiDPkVe9wKPPV+i/0OqG8MmpQhDn7gkTmrifiwfL4lBUntzX7
utibnxaIhssADwBCGUYuc9TcwrleCQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHpT
DYvl9e/lVJTRDobd0QcvF+bMMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83RTAzOUNFMjZEMTMxMUYwOThDMzI4REFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOEuMA0GCSqGSIb3DQEBCwUA
A4IBAQAMxLvzN+yAw645s6gjfE8bszLbS5aw4ffaxgH9b5ybUMOT42lOTbxPcWgh
c/wUA7RSw14Z+CTprnSaDA4vE3fKpTA6nUI8X8yMcmPHNiPzw4KCeFfk7zBL0LJ3
xvEvmCukQ3ycwRK/yg8IBijwrCz/hcnU3jxWkymkwtWhEj+Vv44ZBzb3FVC/jEMk
RMN5GEp8mKIEdT6m6wiU8suqH/OpDPwbpemNm9KuCl55l4Gyglxmqawxvt9LZvf4
YSdFJBVBz/awJ75fObrB0vY8g+4ojhi2xEavF2YxlC7pO+hRTfxzymxtOfyHMtFu
kjtfwpmvp7Faw9rMQ/EQl330CZEK
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:33:29 2025 by rpki-client