Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6D48266A77011F19B78F8D4CE1D38B0.roa
File:                     E6D48266A77011F19B78F8D4CE1D38B0.roa (raw, json)
Hash identifier:          CkofXlX3Icd2lo6GYAvQw78Y4tiuOfyuDbQcv25eBQ0=
Subject key identifier:   EF:6B:AC:4F:86:FB:2A:CE:49:19:57:DB:48:CE:FA:A6:80:21:1C:72
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D2CE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6D48266A77011F19B78F8D4CE1D38B0.roa
Signing time:             Thu 03 Sep 2026 08:24:38 +0000
ROA not before:           Thu 03 Sep 2026 08:24:34 +0000
ROA not after:            Fri 09 Oct 2026 08:24:34 +0000
asID:                     20326
IP address blocks:        156.245.216.0/22 maxlen: 24
                          156.245.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119502 (0x1d2ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  3 08:24:34 2026 GMT
            Not After : Oct  9 08:24:34 2026 GMT
        Subject: CN=6a992ec6-55c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4c:73:95:2b:8f:06:52:17:07:e4:94:d9:8a:
                    a5:29:3d:38:81:c0:f0:1a:d0:45:eb:62:4a:72:18:
                    46:9b:87:17:6a:f5:d8:18:91:43:15:9e:b0:b7:f4:
                    e4:b1:81:59:e7:06:46:f7:40:02:0b:ac:19:91:ec:
                    c2:ba:94:74:e0:60:f4:f3:0e:ca:07:d0:7e:7e:89:
                    46:8e:8d:5b:69:9e:21:f9:dc:9e:16:f5:e3:e0:76:
                    9f:29:09:a8:3a:34:8c:81:d4:3f:89:d7:f6:6f:59:
                    21:53:c5:a1:26:ad:fe:34:40:d5:f8:b8:f2:df:7c:
                    dc:f3:ac:ce:32:fd:24:70:1c:59:c9:9a:bb:50:4b:
                    0f:e6:0c:0f:87:a0:8d:34:3e:00:7f:15:2b:0a:33:
                    2f:6c:d8:fd:9b:45:1b:67:99:a2:3f:57:89:f7:70:
                    e8:7c:93:d5:e0:48:0f:ec:58:23:d5:6b:a5:f5:18:
                    ec:dc:91:d4:13:b9:c8:18:18:dd:7e:f4:e2:e1:25:
                    f8:32:62:cd:e7:be:10:99:7c:ad:17:5f:98:c1:55:
                    d0:21:f2:0a:e2:e2:d9:44:08:a4:0a:ef:8f:13:4f:
                    ac:56:77:bf:4f:17:22:b2:b4:a3:8a:5d:75:7c:c3:
                    18:07:70:b3:38:e2:86:fb:18:d4:de:36:bd:a7:cd:
                    4b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6B:AC:4F:86:FB:2A:CE:49:19:57:DB:48:CE:FA:A6:80:21:1C:72
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E6D48266A77011F19B78F8D4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.216.0/22
                  156.245.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:bd:62:a8:ee:ad:8e:f8:0a:5d:0b:cf:b6:b8:b3:91:8b:55:
         18:2f:62:d4:80:40:83:c8:2a:ed:f6:98:fb:8f:48:c1:85:e1:
         8c:17:b4:44:01:b0:12:a8:f1:6a:98:0e:b9:bd:22:4c:6d:61:
         db:6f:ab:b2:26:ea:1b:c0:12:aa:6e:c3:e1:0b:57:4c:11:ba:
         a1:86:bb:4a:af:29:87:a4:d6:58:fc:e4:1e:3f:9d:d7:d7:de:
         e6:3d:91:4c:72:39:c0:46:0b:27:15:41:5e:6c:46:d2:e8:9f:
         6b:29:4c:85:6c:1f:7b:d3:8d:5f:a8:3f:15:31:f8:98:b8:8f:
         2f:0c:74:2e:0a:49:d5:de:0d:ff:4e:f9:fe:c7:19:fe:72:f2:
         28:76:6f:62:03:2d:8e:fc:13:59:1f:e3:ed:76:73:89:13:60:
         39:ef:ee:85:76:82:f1:75:13:c6:c5:21:fb:64:4c:ad:7a:8a:
         1c:95:5b:cd:72:43:5a:c9:70:98:29:0a:34:bb:d3:a0:c6:91:
         d4:06:63:5e:19:cf:ec:4d:37:fd:18:4f:08:0f:6d:f4:21:f5:
         a5:b6:c2:b3:2f:8f:71:f5:d6:df:45:08:93:5c:3a:ec:f2:fe:
         98:b3:1a:91:9d:87:7b:3d:ef:c1:d3:d6:00:96:69:e3:a3:e8:
         0f:49:bc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----