Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0F37410898E11F1B61B7EC0CE1D38B0.roa
File:                     E0F37410898E11F1B61B7EC0CE1D38B0.roa (raw, json)
Hash identifier:          7lyenpVkcmfjR6Gk2HeOLigVQgBm+sL929GjFFa3EdY=
Subject key identifier:   F4:B5:78:50:A0:5C:B0:17:C8:1B:63:B5:B3:CA:5A:C4:1A:DE:12:06
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C81F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0F37410898E11F1B61B7EC0CE1D38B0.roa
Signing time:             Mon 27 Jul 2026 07:43:38 +0000
ROA not before:           Mon 27 Jul 2026 07:43:34 +0000
ROA not after:            Tue 25 Aug 2026 07:43:34 +0000
asID:                     273155
IP address blocks:        156.236.192.0/19 maxlen: 24
                          156.236.224.0/19 maxlen: 24
                          156.236.224.0/24 maxlen: 24
                          156.236.225.0/24 maxlen: 24
                          156.236.226.0/24 maxlen: 24
                          156.236.227.0/24 maxlen: 24
                          156.236.228.0/24 maxlen: 24
                          156.236.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116767 (0x1c81f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 27 07:43:34 2026 GMT
            Not After : Aug 25 07:43:34 2026 GMT
        Subject: CN=6a670c2a-f51b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:40:96:d6:87:cf:38:d4:69:64:46:eb:00:
                    86:5a:42:1f:2b:a9:7e:51:28:56:2f:65:29:15:81:
                    0f:0e:70:b4:01:eb:b8:aa:64:75:8d:d0:ca:93:29:
                    c3:30:16:73:03:77:e1:7d:81:f6:9b:25:03:8b:a4:
                    42:1e:ef:fd:ce:f4:e7:7f:cb:1d:e4:29:84:f5:8c:
                    04:1b:1e:f5:b1:36:37:1e:00:da:67:6a:0f:02:4b:
                    4b:de:87:1a:ca:6a:a8:2f:86:7e:3e:c8:10:c7:80:
                    a1:b2:6d:23:28:58:da:03:f8:24:40:cd:15:e5:04:
                    d0:f4:f1:ca:2c:23:ef:2a:26:c6:ad:11:42:bf:2e:
                    65:e5:12:a2:dc:bc:f4:60:81:44:1c:ba:79:62:71:
                    6b:93:29:5f:01:5a:eb:0b:24:ae:9c:d5:31:bd:7a:
                    f6:80:f4:5a:02:ed:89:1d:14:87:2a:6c:c8:33:0f:
                    3e:69:0a:95:42:75:c8:55:58:c6:ec:32:88:7e:ef:
                    5b:fd:a9:b1:e5:c4:03:ca:a0:87:96:e4:e7:d8:8e:
                    46:7c:51:a1:ed:41:66:ed:19:7c:77:af:3f:eb:9f:
                    e8:55:52:db:ca:b3:e1:c3:37:07:5a:81:e1:6e:d5:
                    df:27:7f:ae:20:5a:79:78:6f:0c:01:3f:e2:59:8c:
                    09:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B5:78:50:A0:5C:B0:17:C8:1B:63:B5:B3:CA:5A:C4:1A:DE:12:06
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0F37410898E11F1B61B7EC0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4c:00:9a:5b:38:c4:39:63:f1:98:e7:f0:0e:5d:e0:aa:84:59:
         0c:4e:09:42:ed:3e:b5:57:6d:98:ab:2f:47:31:67:d8:2b:49:
         76:6b:4f:50:7d:49:58:4e:d3:72:f3:3e:b6:39:e8:a6:45:6b:
         b6:95:e2:47:c5:33:ea:6d:78:29:ac:f8:6c:99:74:19:e3:b1:
         5a:68:b7:ab:d4:2e:ad:6f:e6:92:a2:39:36:21:eb:32:6d:8b:
         2f:de:2e:40:44:e3:69:bc:bc:ee:59:1a:0a:73:cf:fc:33:79:
         a3:78:1a:a3:37:ba:e4:19:a1:a5:2f:3c:d8:44:c0:2e:19:56:
         64:01:bb:4f:dd:e9:f8:7b:b1:63:d2:8c:82:d2:32:bb:41:a1:
         f2:a1:ba:7b:a0:98:7c:af:7f:0f:db:0f:b5:64:64:15:f4:5f:
         91:f4:85:7c:f0:be:e3:ce:7b:55:50:53:dd:b7:0a:95:70:c4:
         59:45:ea:cf:6c:8a:53:24:1f:01:6f:c2:00:6a:ac:6f:73:0c:
         0c:27:a3:64:ba:85:96:89:90:a3:1d:98:05:02:f3:9d:f2:30:
         af:42:1e:26:fc:b3:8f:47:66:3b:05:85:67:f5:59:57:87:92:
         45:88:9a:1c:e8:09:2b:45:ba:b5:c5:04:e5:c8:1c:6c:37:df:
         8f:9b:8a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:07:58 2026 by rpki-client