Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E66AA7A0618511F1ADFC54F6CE1D38B0.roa
File:                     E66AA7A0618511F1ADFC54F6CE1D38B0.roa (raw, json)
Hash identifier:          6+DocPQqTKSfe4g01bSOxEIpPLPofUG83RY51FTFKEs=
Subject key identifier:   72:28:32:EC:B5:64:4F:98:B4:FE:2C:69:8D:A3:5E:30:08:AE:D1:7D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BC2A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E66AA7A0618511F1ADFC54F6CE1D38B0.roa
Signing time:             Sat 06 Jun 2026 08:58:35 +0000
ROA not before:           Sat 06 Jun 2026 08:58:30 +0000
ROA not after:            Sun 12 Jul 2026 08:58:30 +0000
asID:                     212513
IP address blocks:        45.196.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113706 (0x1bc2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun  6 08:58:30 2026 GMT
            Not After : Jul 12 08:58:30 2026 GMT
        Subject: CN=6a23e13b-df1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:49:4a:9f:37:fc:85:5b:79:14:38:87:4e:cd:
                    ce:cf:f9:78:63:b9:85:b2:f5:56:bf:ef:a7:c0:e4:
                    ea:15:ba:1f:7f:55:ac:43:45:28:db:04:d7:ab:6a:
                    ef:cd:cc:56:fc:12:7a:fc:8a:9a:e7:4c:cf:68:75:
                    ac:5c:75:16:28:ec:fc:ad:15:0b:b4:00:0a:5b:74:
                    ef:aa:67:99:a1:17:3a:72:ee:41:c7:42:f1:3f:11:
                    57:28:9d:af:68:79:b7:c2:35:c7:19:3f:74:e3:7a:
                    12:83:46:72:41:70:fd:c1:b0:d7:0c:0e:3a:94:18:
                    61:f0:88:9c:93:3f:28:64:1a:f3:f4:ed:b1:c5:b6:
                    d5:00:c3:0c:a9:db:c8:53:6e:8f:40:a9:fe:fd:37:
                    a7:e9:e3:96:07:30:c2:e6:00:e5:06:a4:94:71:6c:
                    b6:15:25:3a:63:5d:19:bb:e9:58:1f:2d:79:16:fe:
                    b9:b6:74:c0:5c:3d:e4:92:8c:8b:70:19:5c:8d:97:
                    f9:4a:47:ee:2e:1e:c0:96:f6:bb:a5:2a:92:bc:82:
                    c4:00:22:24:de:5b:4d:bf:69:de:84:cd:ac:ed:47:
                    2c:e1:51:a6:23:7b:61:37:a9:d0:fb:fc:f8:a3:f9:
                    e2:a1:96:47:4d:a8:95:c8:2a:ff:63:f3:f2:12:b8:
                    6e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:28:32:EC:B5:64:4F:98:B4:FE:2C:69:8D:A3:5E:30:08:AE:D1:7D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E66AA7A0618511F1ADFC54F6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:03:c4:ac:7f:1c:51:0a:11:b7:fd:09:b5:01:5b:88:a5:f0:
         e8:f7:7d:b4:54:ae:2e:c5:7c:58:d7:79:77:a5:00:a0:24:21:
         22:65:b2:25:e0:21:6d:bd:83:e3:22:af:0d:d9:88:04:cf:f9:
         42:b3:71:a7:ab:c6:4b:2a:83:d7:be:5c:97:ef:fa:00:23:b2:
         27:b5:13:55:da:d0:14:d4:46:38:6e:60:d7:0b:a7:5d:86:74:
         b7:7d:a3:c5:7b:54:da:45:f0:2c:cc:39:34:7b:5d:63:56:b4:
         93:c0:8d:4f:ef:a0:e8:e1:c9:7c:d9:ac:61:57:4f:de:bf:f0:
         93:f0:91:f0:f8:0f:12:d6:ca:84:0e:b3:5d:1b:d4:48:0f:5f:
         c4:5b:c0:17:69:f3:c3:ec:f3:0d:86:f0:e0:c6:9c:0c:44:1b:
         ad:71:be:7b:e6:f2:76:59:2f:f5:02:f5:96:72:fd:43:56:37:
         c3:64:9c:f3:69:9d:d4:60:70:f5:bf:b1:37:9d:06:78:5c:d3:
         85:14:29:3e:91:39:32:f0:48:f5:a1:7a:73:23:d3:18:fa:94:
         1c:8e:51:8c:fa:19:be:28:fa:76:0a:6b:1c:8f:31:43:73:eb:
         27:8c:a1:da:4d:61:c9:27:1c:a6:34:06:d5:c6:dc:01:52:a8:
         2b:3c:ef:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:41:03 2026 by rpki-client