Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAF28EFAAFFA11F09DD9027ADAE4EC9C.roa
File:                     FAF28EFAAFFA11F09DD9027ADAE4EC9C.roa (raw, json)
Hash identifier:          itOe2TBrI1EbVEM2V9/lQgiWEDpryZl2/5F49KZY9lU=
Subject key identifier:   4E:9A:66:59:AC:42:CA:BB:45:5A:CB:B6:D4:13:E7:58:7A:74:4C:DD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018235
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAF28EFAAFFA11F09DD9027ADAE4EC9C.roa
Signing time:             Thu 23 Oct 2025 10:28:14 +0000
ROA not before:           Thu 23 Oct 2025 10:28:09 +0000
ROA not after:            Fri 28 Nov 2025 10:28:09 +0000
asID:                     202656
IP address blocks:        45.192.48.0/24 maxlen: 24
                          45.192.49.0/24 maxlen: 24
                          45.192.50.0/24 maxlen: 24
                          45.192.51.0/24 maxlen: 24
                          45.192.54.0/24 maxlen: 24
                          45.192.55.0/24 maxlen: 24
                          45.192.56.0/24 maxlen: 24
                          45.192.57.0/24 maxlen: 24
                          45.192.58.0/24 maxlen: 24
                          45.192.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98869 (0x18235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 23 10:28:09 2025 GMT
            Not After : Nov 28 10:28:09 2025 GMT
        Subject: CN=68fa033e-6ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:4b:3e:46:59:68:c3:35:07:db:14:ee:96:
                    fe:2b:d6:c9:57:2e:f1:19:a6:24:a6:1e:ef:cb:04:
                    2a:c0:0c:82:8a:af:25:19:d7:ce:02:83:01:61:de:
                    90:63:a1:3f:60:d5:fb:ae:55:c4:70:73:8d:12:f0:
                    07:d5:d9:a6:2d:4a:c7:39:c0:e4:8e:7e:f5:cf:ef:
                    73:53:1f:0e:ee:ea:5b:5c:97:ca:9b:10:3e:3f:9c:
                    2d:01:ce:1a:d2:6d:ad:1a:c3:4f:0c:23:cf:c1:df:
                    52:7b:c1:d1:f7:68:f4:a3:6f:5d:c7:ed:b2:6f:b4:
                    48:22:c4:a9:dd:5e:f1:5d:91:da:8a:ef:61:ca:5d:
                    6c:49:50:ad:ed:a0:f9:aa:e7:78:a8:eb:e1:ae:b4:
                    4a:78:69:b5:4b:e9:66:b8:4d:cc:09:44:4b:32:27:
                    38:0b:a9:aa:4a:a5:2d:4a:77:17:51:30:31:ce:86:
                    15:21:14:98:c1:89:7c:92:4f:8d:1a:82:6f:cd:43:
                    48:df:a6:65:e5:a6:61:f1:4b:b8:e0:78:05:b2:ed:
                    12:af:28:71:d9:39:44:0e:0e:36:f6:81:b5:5a:96:
                    7f:ec:a0:59:05:54:78:c3:59:13:30:1d:0d:51:48:
                    54:3a:f3:3e:f3:0f:3d:0c:6c:21:af:26:7e:ed:e6:
                    cf:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9A:66:59:AC:42:CA:BB:45:5A:CB:B6:D4:13:E7:58:7A:74:4C:DD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FAF28EFAAFFA11F09DD9027ADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.48.0/22
                  45.192.54.0-45.192.58.255
                  45.192.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:e0:bf:45:8f:7c:14:2e:36:ec:a0:48:fa:44:f7:79:06:70:
         83:ab:38:24:00:5e:71:f3:38:c3:26:7a:71:f0:12:36:87:70:
         b0:09:bc:cb:be:55:51:fe:fc:87:07:fd:a6:d2:5d:5e:2b:ec:
         fe:73:67:2b:d0:b4:d3:90:31:22:77:7a:53:a7:34:53:2e:f3:
         d5:6e:18:3b:d7:58:1c:9a:22:c5:07:d3:6b:06:97:76:fd:69:
         57:01:31:2c:35:e1:9d:78:10:c2:a7:21:81:b7:1e:ea:ab:b2:
         81:15:b1:73:c6:f8:61:dc:26:e9:30:94:c8:82:18:9f:4f:f3:
         ac:59:6b:75:a6:ad:fd:4a:45:f1:b9:58:c2:72:8c:8e:5f:fa:
         6e:e9:c4:ce:e6:d6:71:01:3c:12:ac:9f:45:8f:9e:cb:ed:5e:
         e8:5b:9a:97:3a:c1:81:79:8d:00:c8:2a:fc:20:96:ef:92:ae:
         20:c7:ae:62:83:9b:9a:30:05:0d:9a:a3:8a:e7:d0:15:f4:df:
         ba:00:eb:ee:b3:25:06:9c:3f:80:b7:05:a1:d3:57:1b:63:ff:
         96:e9:5c:ba:ff:6b:0a:cb:8e:8d:7d:e9:a0:31:e7:92:09:62:
         4a:01:0a:7b:e5:d6:1e:eb:19:6f:a3:cc:7d:02:45:8b:96:d2:
         53:87:3d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:58:52 2025 by rpki-client