Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8B46D66618F11F1B8B2C1B1CE1D38B0.roa
File:                     E8B46D66618F11F1B8B2C1B1CE1D38B0.roa (raw, json)
Hash identifier:          /gZ0To2raFp71EZ5euNoglEub9bGlQrJo/tJoe5OQZg=
Subject key identifier:   6C:5E:61:AE:A0:65:66:00:B7:D3:6D:AD:BB:63:44:92:BB:39:37:A6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01BC36
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8B46D66618F11F1B8B2C1B1CE1D38B0.roa
Signing time:             Sat 06 Jun 2026 10:10:14 +0000
ROA not before:           Sat 06 Jun 2026 10:10:09 +0000
ROA not after:            Fri 24 Jul 2026 10:10:09 +0000
asID:                     9009
IP address blocks:        45.198.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113718 (0x1bc36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun  6 10:10:09 2026 GMT
            Not After : Jul 24 10:10:09 2026 GMT
        Subject: CN=6a23f206-3d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:66:74:87:33:0d:fe:1c:fe:6f:47:25:fb:ac:
                    0b:16:4a:c3:4a:b7:c6:0d:88:bf:c4:6c:72:e0:92:
                    26:f3:26:41:f7:0b:96:29:d9:d6:5d:3e:f3:19:f4:
                    7a:5f:8a:91:76:75:0b:d3:ed:74:25:1c:9d:0d:d1:
                    b5:2a:e5:9f:d7:0c:c5:f5:4b:c5:82:7a:48:5e:f0:
                    ff:dd:a2:7f:7c:01:76:25:1c:e8:c6:d8:36:73:35:
                    21:74:69:4c:31:cf:44:e2:a3:b8:f9:a4:89:e1:23:
                    56:f9:61:00:c8:1d:48:7c:1e:3e:2c:24:6c:08:61:
                    b0:9c:7b:fb:a2:03:2f:5b:63:f0:f3:4e:c2:48:e6:
                    e1:02:2a:c6:fe:2a:6a:a6:49:14:06:b3:c6:43:c7:
                    2b:68:6e:94:10:57:75:d1:32:55:d6:42:b9:c2:29:
                    43:d2:69:c7:8a:64:15:f4:49:60:ed:2b:c7:d8:3b:
                    30:36:1d:a5:68:08:84:fb:68:e6:ce:86:99:2a:e1:
                    18:f2:c0:cc:62:d2:1b:08:d8:0a:42:04:76:10:92:
                    e4:a8:ec:67:d1:a1:14:f1:d1:37:3d:f9:ef:de:c4:
                    ea:ff:3c:09:20:1c:dd:95:86:a3:8b:e2:59:74:41:
                    4f:07:e0:31:99:b6:c1:c6:06:65:fb:57:d2:a4:e4:
                    6a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5E:61:AE:A0:65:66:00:B7:D3:6D:AD:BB:63:44:92:BB:39:37:A6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8B46D66618F11F1B8B2C1B1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:44:06:4b:75:ee:41:5f:d7:f9:8b:77:1d:c1:10:79:da:cb:
         68:de:6b:9c:76:4f:ab:4a:d8:3e:94:5d:42:2e:06:72:7e:1d:
         15:ae:24:58:57:cb:6b:e6:7c:3b:1d:46:06:5e:b1:8b:3b:82:
         a5:f2:d6:e9:ec:3a:ee:67:c1:26:55:bf:05:61:06:77:fd:a4:
         f0:70:ac:26:a8:25:e8:9a:70:c1:e3:ed:44:d1:78:f6:04:6e:
         e3:75:34:2d:78:62:19:fe:9d:d4:ca:fb:08:f8:a1:a3:0b:aa:
         9e:b6:83:ff:d6:ca:09:0b:6c:bb:f5:2c:bf:d2:c8:5d:03:a0:
         46:ba:4f:16:ec:37:a1:1a:c6:62:76:de:dd:8e:8d:ce:e5:3e:
         0b:95:56:cb:41:40:42:6f:88:14:ae:4d:61:97:44:9f:d8:15:
         34:69:9c:8a:2f:ab:67:79:8a:23:4c:5f:2b:f9:29:2a:54:39:
         0c:56:82:62:aa:62:b5:5e:2a:83:ee:06:73:77:09:71:7a:1d:
         ce:1d:e4:26:55:4f:c8:b0:6f:06:a4:35:b8:d0:3c:b3:fb:7f:
         f2:4d:41:4f:bb:e9:1b:8c:96:0b:0a:8e:4c:8c:e8:8d:fd:69:
         05:7c:b4:d3:46:08:eb:c2:00:b5:e1:7d:54:4d:bb:ed:d3:2b:
         e8:0d:ff:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:18:23 2026 by rpki-client