Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE39F058AF4511F19B21BDC4CE1D38B0.roa
File:                     FE39F058AF4511F19B21BDC4CE1D38B0.roa (raw, json)
Hash identifier:          VUF6TkZL3s+cVCAw2UTeVnyfNJOUwPCP2f7eIu8sc0Q=
Subject key identifier:   66:DE:CD:2C:ED:96:FA:B6:71:BF:14:82:F9:01:9B:3C:3E:70:B6:E6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D5C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE39F058AF4511F19B21BDC4CE1D38B0.roa
Signing time:             Sun 13 Sep 2026 07:37:38 +0000
ROA not before:           Sun 13 Sep 2026 07:37:34 +0000
ROA not after:            Wed 23 Sep 2026 07:37:34 +0000
asID:                     154376
IP address blocks:        156.254.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120261 (0x1d5c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 13 07:37:34 2026 GMT
            Not After : Sep 23 07:37:34 2026 GMT
        Subject: CN=6aa652c2-075f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:7f:22:a6:98:1b:be:08:04:35:65:24:d1:
                    4d:62:81:bc:ae:73:fd:e1:8e:2e:63:44:92:1b:ae:
                    93:d7:c1:f9:41:26:a1:62:0f:39:08:a8:b4:ad:4c:
                    bc:42:b0:c7:5b:84:3a:1f:75:fe:4c:39:c5:0d:cb:
                    21:8b:73:0c:ce:98:a2:f4:43:3e:dc:3d:c2:ee:45:
                    ee:b3:a3:9e:6a:55:8a:ee:0e:52:49:68:cb:b0:38:
                    8e:90:eb:c7:f9:95:05:00:f6:55:71:f3:0c:68:c2:
                    f4:cd:01:3c:68:a1:fb:23:f3:94:98:d0:b4:d7:66:
                    72:1a:e6:b2:30:2d:70:8a:44:1b:53:cd:7a:87:34:
                    b8:ac:b9:95:00:3b:cc:5b:05:a8:0d:1f:12:e6:39:
                    11:cc:81:ea:35:42:06:76:55:ba:d5:ca:b0:ba:28:
                    e2:ae:76:bb:37:05:86:10:d6:d6:cc:b7:bd:6a:ff:
                    b8:99:9f:f8:df:cd:e1:67:db:a4:0b:05:2a:16:c1:
                    9f:60:8b:c4:8a:04:a4:c2:44:5a:a2:94:54:a8:bf:
                    c1:15:20:83:f0:28:c8:c2:dd:97:59:15:f1:a1:3a:
                    cf:51:52:cb:d3:cb:2d:a4:94:20:08:22:dc:57:ff:
                    ad:04:4b:b4:6a:64:80:5c:9e:96:ee:0a:97:bf:fc:
                    2a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DE:CD:2C:ED:96:FA:B6:71:BF:14:82:F9:01:9B:3C:3E:70:B6:E6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FE39F058AF4511F19B21BDC4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:52:9e:bb:46:59:de:72:00:53:c5:b2:e8:e9:0d:1c:cc:40:
         c3:6f:72:52:3a:02:c3:ab:a3:50:1d:9a:d3:af:5b:e0:bc:43:
         9c:d3:c1:67:60:a0:7a:3e:0b:b4:08:3c:9c:2f:61:b4:f6:bf:
         84:f1:14:68:3d:06:d8:a3:89:e3:6b:eb:49:20:92:b5:26:e3:
         86:0d:d6:01:d0:5b:4e:99:37:76:c3:87:55:79:b4:f5:31:51:
         e3:1c:a2:f1:4b:3e:72:47:d3:20:76:ed:62:d1:1e:55:09:ca:
         de:88:fa:5a:c4:fa:22:a5:40:3e:88:9e:a9:5f:f0:5b:87:f9:
         17:45:21:55:3f:1a:7a:91:8b:49:ec:98:f6:54:c6:1d:2f:3b:
         fd:70:c9:7f:d6:b3:b1:0e:27:4e:6b:d4:af:96:97:45:59:44:
         f6:49:d5:eb:00:7c:9a:69:e6:77:fe:33:7a:b1:99:13:72:c6:
         cb:b3:3b:4d:d1:9d:54:a0:e9:f1:33:9f:eb:71:f6:97:a4:e6:
         da:1d:f3:31:c7:34:33:84:0b:1b:90:dc:0b:32:51:68:b9:25:
         c4:fd:26:c1:69:84:3f:be:87:00:f8:97:5f:e1:45:54:a3:49:
         65:88:82:14:ad:06:35:63:7a:f2:7e:5f:c4:c5:b0:ea:78:9c:
         08:fa:8e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----