Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/458C4CAAB0F211F1BC7BC1E3CE1D38B0.roa
File:                     458C4CAAB0F211F1BC7BC1E3CE1D38B0.roa (raw, json)
Hash identifier:          6bcGT6ZV7IH2rvsQ8Z9ahqioOYMiWpoIzaH8ZDllP38=
Subject key identifier:   1A:B9:3B:9B:F8:DE:3B:9D:BA:4C:F2:93:21:F0:21:9E:72:C7:1D:99
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D65F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/458C4CAAB0F211F1BC7BC1E3CE1D38B0.roa
Signing time:             Tue 15 Sep 2026 10:43:22 +0000
ROA not before:           Tue 15 Sep 2026 10:43:18 +0000
ROA not after:            Mon 14 Dec 2026 10:43:18 +0000
asID:                     135097
IP address blocks:        156.254.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120415 (0x1d65f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 10:43:18 2026 GMT
            Not After : Dec 14 10:43:18 2026 GMT
        Subject: CN=6aa9214a-d71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4c:79:20:3b:a0:76:68:ba:5c:24:eb:b7:61:
                    50:7c:76:e1:5f:17:35:76:8a:fa:40:58:b2:f5:e0:
                    33:59:bc:a1:a6:ea:c4:73:9a:20:0f:b4:8b:7d:87:
                    72:ec:aa:5f:bb:bf:4d:a8:96:b1:4f:80:4d:c4:e2:
                    ff:4c:13:c7:37:d4:38:24:9f:79:ae:b2:d7:41:05:
                    39:b3:67:8b:30:1c:ec:2a:27:cd:24:e4:cb:11:2f:
                    3d:80:46:28:30:7d:4e:c2:e9:a0:f7:7b:0d:57:be:
                    da:4a:94:81:d0:e1:70:ad:8b:be:3a:d3:bf:4b:8d:
                    85:dd:b4:f0:a5:5b:c3:ac:f0:2e:09:fb:c7:81:08:
                    5b:c9:fe:93:7a:3c:8d:1c:d6:c0:34:51:e5:f1:95:
                    f7:35:c1:95:33:39:18:d7:ab:19:db:62:4d:6c:75:
                    7e:78:3c:87:57:30:5a:60:1b:d7:34:96:97:db:bf:
                    6d:7e:c0:04:38:ce:ac:8b:f8:0b:3a:bb:47:4d:d2:
                    0c:95:8c:ca:07:d4:f0:98:cb:98:fe:84:1f:d5:6c:
                    db:45:c2:1f:f1:44:32:cf:38:10:8e:6c:e2:3a:22:
                    8e:00:58:a5:80:4f:59:76:0d:3b:3a:66:74:39:c8:
                    4d:4d:6c:63:95:0d:b1:4f:04:8b:d5:50:82:a0:2b:
                    d9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B9:3B:9B:F8:DE:3B:9D:BA:4C:F2:93:21:F0:21:9E:72:C7:1D:99
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/458C4CAAB0F211F1BC7BC1E3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.254.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         27:f7:2f:30:42:42:61:04:80:19:35:d0:fc:69:00:3d:d9:17:
         9d:82:5f:a1:7d:32:da:2c:69:d0:70:b6:46:c6:a0:86:5a:95:
         14:63:12:0c:49:db:b1:a7:d6:5b:db:c8:18:e6:f0:92:4b:72:
         ee:cb:e6:1d:7e:9c:58:85:5f:c1:31:74:79:55:0f:cd:46:1b:
         cc:26:0a:dd:d9:c8:2e:90:07:49:42:0d:f2:10:65:11:cd:63:
         c5:d4:97:74:b5:a3:6a:9c:61:60:98:41:84:4b:b9:0d:d0:0e:
         f5:ee:01:8f:4f:6b:59:09:e7:ab:e8:f1:75:5a:0d:fb:f8:57:
         b6:36:96:02:36:06:8b:09:8b:12:52:d4:1b:36:6c:e2:b1:cc:
         af:28:b0:72:db:b1:1b:23:5d:d1:73:5c:01:b2:ca:12:76:7a:
         da:21:02:44:14:a5:39:c4:77:61:a8:cd:11:04:a7:dd:2b:05:
         dd:9a:27:0b:fa:29:01:45:d2:50:92:c0:44:0a:d6:71:4e:32:
         b5:2f:9c:9b:b0:79:d1:d0:3e:01:75:04:d7:98:2e:10:fe:11:
         9c:fc:f4:3b:fd:73:51:3f:79:71:ab:5d:54:62:26:6b:5a:b8:
         21:b9:1e:2f:03:96:26:fb:49:13:25:3d:5e:0d:60:12:ad:c3:
         37:28:99:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----