Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6CE658813CD11F1A9969AC4DAE4EC9C.roa
File:                     F6CE658813CD11F1A9969AC4DAE4EC9C.roa (raw, json)
Hash identifier:          VyBc66UDr1BCZ6jM/NZK4eozbsTjUP23Hp20HGzCoH8=
Subject key identifier:   35:37:09:CD:BF:EB:60:0B:48:B4:12:8C:01:58:37:28:A5:33:69:92
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01A12A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6CE658813CD11F1A9969AC4DAE4EC9C.roa
Signing time:             Fri 27 Feb 2026 11:17:56 +0000
ROA not before:           Fri 27 Feb 2026 11:17:51 +0000
ROA not after:            Thu 12 Mar 2026 11:17:51 +0000
asID:                     200819
IP address blocks:        156.225.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Mar 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106794 (0x1a12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 27 11:17:51 2026 GMT
            Not After : Mar 12 11:17:51 2026 GMT
        Subject: CN=69a17d63-0529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:82:33:ed:95:9c:d3:99:e3:7c:90:c4:62:03:
                    c7:b6:9a:5c:27:96:65:8d:a7:47:e3:5e:ed:90:b4:
                    d2:7d:97:a0:69:3a:05:21:b6:aa:02:94:18:79:bc:
                    df:72:4d:53:45:0d:f2:d8:a9:00:53:9f:a7:6e:75:
                    87:b5:d9:2f:e4:40:21:0f:a4:fb:61:02:85:59:03:
                    a3:e8:fe:a8:1d:cb:6d:05:76:3d:51:7c:c8:06:38:
                    8c:00:10:fb:ed:5e:72:db:fa:ab:5b:3a:9f:38:d7:
                    3d:8a:77:f0:66:fc:ac:79:e6:3a:e1:51:4a:76:8b:
                    4f:b8:69:c4:94:1b:0d:bb:17:f1:f2:dd:9a:ac:5e:
                    7b:b5:37:4b:59:c3:b8:bd:33:b0:34:41:66:c2:65:
                    83:2f:00:6f:90:30:54:a4:01:31:eb:e6:a2:16:ce:
                    40:2d:80:26:15:80:04:0d:63:07:f9:f4:b6:72:b1:
                    22:60:dc:0d:67:9a:ea:0a:7c:b9:93:13:c4:be:95:
                    d9:87:01:41:31:09:7d:7c:f8:90:46:26:b5:b7:24:
                    d4:22:8b:ac:48:97:aa:da:0d:0a:f0:a5:f6:94:d6:
                    cc:e3:b0:9b:2e:a7:12:e2:26:2c:02:4d:a7:6d:43:
                    0a:5f:b3:00:df:19:e6:65:66:7c:d5:08:5d:75:34:
                    fd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:37:09:CD:BF:EB:60:0B:48:B4:12:8C:01:58:37:28:A5:33:69:92
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F6CE658813CD11F1A9969AC4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:42:90:68:57:34:0f:3d:93:60:35:80:5c:87:cb:f5:91:8c:
         62:9b:c4:5f:4d:6c:be:68:71:80:51:57:81:a7:00:d2:37:34:
         06:38:43:30:12:e3:c9:5d:9d:93:1b:d4:d5:97:06:9a:78:43:
         dc:86:f1:ef:dc:e6:58:0d:9a:48:bb:23:8d:c7:58:0a:34:75:
         b7:e4:91:ec:79:f3:86:b0:92:70:8d:e1:b0:35:78:12:ad:13:
         35:e2:b0:b7:6f:f8:b5:b8:ba:9b:b2:f5:29:c2:9e:c4:f5:1b:
         57:e8:66:5d:1f:c0:f6:0f:bb:4c:bb:54:22:8e:0b:ca:a9:96:
         7b:18:f4:90:ae:bb:fc:2e:34:d3:96:d7:d7:a1:2a:50:ad:8b:
         88:8a:0f:e4:78:8a:e1:e2:f7:d8:e5:d3:ac:6f:a4:52:6a:c4:
         ab:78:f1:1a:d5:54:e1:bf:32:65:05:27:30:6d:6a:00:c5:b9:
         84:ff:b6:3f:f7:d0:6f:b7:51:12:7b:8f:b8:ea:24:db:82:55:
         cf:8d:c9:d9:48:ff:83:f6:e1:e5:4c:16:60:75:a4:9a:f2:be:
         53:ca:fe:05:11:07:5b:a0:79:4f:f0:d8:fc:a7:74:43:b6:b3:
         f5:2a:e2:83:af:8a:63:db:c9:fd:66:44:5d:cf:36:db:5d:74:
         26:4d:8a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:42 2026 by rpki-client