Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/345530BAAF4311F19CB4A8B4CE1D38B0.roa
File:                     345530BAAF4311F19CB4A8B4CE1D38B0.roa (raw, json)
Hash identifier:          a+hz1qRMKweLSav9/o2kAlXc7G31KixOT0vJfsf/Cbc=
Subject key identifier:   0E:CA:A7:D9:47:48:71:A1:69:6D:9F:C8:2C:7F:3B:B8:63:E9:D1:AD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D5C1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/345530BAAF4311F19CB4A8B4CE1D38B0.roa
Signing time:             Sun 13 Sep 2026 07:17:40 +0000
ROA not before:           Sun 13 Sep 2026 07:17:36 +0000
ROA not after:            Sun 18 Oct 2026 07:17:36 +0000
asID:                     197574
IP address blocks:        45.198.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120257 (0x1d5c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 13 07:17:36 2026 GMT
            Not After : Oct 18 07:17:36 2026 GMT
        Subject: CN=6aa64e14-107e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:6f:5f:70:f0:42:a8:6d:fb:25:de:4b:d7:fe:
                    b6:97:fe:4d:44:e2:b1:ac:08:02:66:90:c9:cf:cd:
                    2a:3f:e6:48:ba:cb:b4:91:56:b8:b8:05:f8:de:dd:
                    8b:98:a3:d6:8b:f2:2c:e8:c9:ce:a2:1a:b6:4c:24:
                    30:5f:b8:27:ef:47:67:ef:a4:a8:fe:4c:c9:8a:8b:
                    ab:55:c5:7e:cb:32:67:f8:50:c0:24:f4:4a:68:41:
                    1f:56:8b:01:6a:37:37:d5:87:17:77:6a:99:e1:7f:
                    e5:30:07:b6:94:f4:27:37:24:0f:39:50:47:72:11:
                    c6:04:83:06:d4:36:92:29:40:7e:d9:e9:d3:9e:d1:
                    ca:ca:09:4b:7c:d2:b6:9a:2c:e7:09:a2:08:30:49:
                    7c:e2:19:a7:a3:cc:1f:3d:ba:65:2b:c6:3d:03:df:
                    b9:00:03:43:40:0c:69:8f:09:6b:ce:2b:3b:9e:e3:
                    a0:7e:69:3c:55:ed:b8:d8:f5:cc:ed:02:cc:ee:a8:
                    77:68:51:a5:e5:7c:a5:ab:9a:79:95:bc:72:9e:e0:
                    b5:e2:66:a9:42:cb:b3:51:e6:dc:f0:26:6d:de:a9:
                    fb:2b:b3:2d:49:c7:a7:85:55:23:cf:10:35:cd:d5:
                    9c:f2:cd:2c:f2:09:92:95:59:26:25:fa:6c:7e:ab:
                    15:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CA:A7:D9:47:48:71:A1:69:6D:9F:C8:2C:7F:3B:B8:63:E9:D1:AD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/345530BAAF4311F19CB4A8B4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:73:62:52:24:ee:94:cc:40:98:39:0e:72:05:e5:1c:8e:5b:
         13:1b:0c:ec:5d:47:c4:9e:a0:5d:62:c7:b6:0c:b2:34:50:e2:
         07:53:bf:57:44:9c:9d:01:b7:03:ea:a9:d5:3b:08:d4:18:2e:
         8c:da:83:2b:33:3d:f8:de:7b:dd:e9:94:e6:24:a5:09:94:83:
         c9:81:44:f3:51:3f:aa:51:15:e9:6c:ed:bd:26:18:2d:ca:c5:
         c9:7a:f4:3b:29:6e:ef:67:ca:2d:98:f9:42:83:6b:b0:e1:a0:
         d2:18:08:c8:c8:49:11:74:df:de:cd:bf:4a:b5:52:a0:95:d4:
         0c:38:e1:73:ce:2a:d9:b2:94:2f:e3:57:a2:25:9a:9b:e3:1f:
         5d:7f:a3:21:fc:fb:2c:17:b8:35:a9:c0:db:96:00:f2:d1:97:
         08:54:58:fa:52:8c:b8:14:2f:46:c5:12:2a:54:f4:46:ee:38:
         3e:b5:5d:35:84:07:ca:bc:dd:86:7a:72:1e:44:fb:7e:c3:f8:
         4e:3b:ec:f6:ac:53:be:ea:b0:50:23:9c:13:92:bf:88:c2:b4:
         c2:db:bb:56:08:eb:e3:a0:89:99:9c:34:6a:b8:54:e1:d9:f1:
         4c:f8:e5:57:64:bb:7f:4d:51:f9:ba:79:ca:8a:18:20:ef:ab:
         bf:c1:5c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----