Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CADED07EADBB11F1B0D41DF1CE1D38B0.roa
File:                     CADED07EADBB11F1B0D41DF1CE1D38B0.roa (raw, json)
Hash identifier:          u7xSb+PEOt5kKq1FdOdPQUNYBFPIiRBBJQ4xIRfB/ss=
Subject key identifier:   22:B7:2A:DC:8B:78:F8:B2:A8:B3:B6:73:ED:BF:5D:99:F4:BF:AE:CA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D53F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CADED07EADBB11F1B0D41DF1CE1D38B0.roa
Signing time:             Fri 11 Sep 2026 08:35:50 +0000
ROA not before:           Fri 11 Sep 2026 08:35:46 +0000
ROA not after:            Tue 20 Oct 2026 08:35:46 +0000
asID:                     211265
IP address blocks:        156.231.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120127 (0x1d53f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 11 08:35:46 2026 GMT
            Not After : Oct 20 08:35:46 2026 GMT
        Subject: CN=6aa3bd66-1330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9b:ce:fb:7b:a2:be:76:ae:a0:54:25:c9:19:
                    ba:08:06:2b:e4:60:9f:00:ae:4c:ab:6e:15:89:b4:
                    58:88:f0:77:c2:97:98:6f:4b:cb:c9:b6:61:47:71:
                    8f:d7:93:71:67:7e:32:2b:31:bb:63:8f:81:76:44:
                    d9:e7:1c:64:38:40:be:95:3d:99:49:fb:05:8e:55:
                    36:d7:32:1d:92:b4:55:6a:7e:73:75:5c:de:55:de:
                    93:58:ce:a1:10:90:13:bc:8a:40:78:6d:29:b5:b5:
                    fb:6f:4a:de:8e:d9:d1:08:8f:54:79:df:64:4d:62:
                    68:b0:f5:34:72:35:1f:9c:e0:c9:d6:f7:48:a5:65:
                    bd:e8:6d:9a:87:93:e2:f0:a2:6d:b0:13:04:5f:02:
                    8d:39:4e:0f:2f:7a:a6:15:53:ad:76:fc:fa:1c:95:
                    65:54:23:19:e7:a8:51:c9:38:97:32:ee:1a:22:c9:
                    b5:60:b4:eb:53:e4:d1:4c:14:e9:aa:65:92:28:d5:
                    66:8f:e6:c0:45:f8:7e:72:c4:76:78:ca:5e:19:59:
                    f4:dd:37:c3:64:f8:da:0f:5f:e3:0c:30:b4:fe:4a:
                    e3:5f:16:fc:57:b2:02:ad:a5:26:96:5c:b3:bb:9b:
                    31:cf:6c:32:74:13:34:54:52:77:be:93:e0:30:f9:
                    04:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B7:2A:DC:8B:78:F8:B2:A8:B3:B6:73:ED:BF:5D:99:F4:BF:AE:CA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CADED07EADBB11F1B0D41DF1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.231.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:8e:24:3c:2c:34:15:0a:12:ba:ed:26:10:92:af:d9:64:0d:
         0e:2e:08:00:b3:ce:fa:61:4f:3d:1f:b2:d7:41:ab:e1:ed:37:
         cd:a5:cb:df:2a:bf:7e:b0:b7:36:f7:c1:39:df:e1:1c:ad:4e:
         56:1e:c1:44:77:f4:cb:61:1c:de:66:42:97:6b:64:00:b7:22:
         97:92:d7:8d:62:a0:91:c3:6b:e1:d9:f9:49:a9:3f:14:a9:5b:
         96:3f:be:45:a5:a7:cf:b3:75:ea:d6:95:a1:83:0a:2f:20:ee:
         c0:30:61:39:fc:be:df:31:fd:08:1c:b1:c4:76:f5:a5:c2:d0:
         70:7e:56:1c:df:2e:7b:2c:43:a6:43:18:06:4f:61:7e:92:26:
         ac:6c:36:b1:d3:e3:16:56:68:21:07:75:bd:97:a8:43:72:95:
         73:24:36:0c:0d:e2:02:a4:35:12:e4:be:ba:a1:76:48:9b:83:
         dc:d5:ed:93:94:05:08:e1:67:64:c5:51:b4:da:f1:e1:9d:d3:
         5b:eb:fb:34:34:c7:b4:a3:65:27:ae:99:85:b8:cc:78:b6:df:
         3c:a5:b9:09:eb:38:68:92:46:e5:a2:64:90:95:c3:7e:af:aa:
         09:bd:f1:f0:57:a9:0f:4e:e6:79:5a:8a:ca:6a:c9:97:b6:69:
         54:f3:52:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----