Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53DAB794850311F1B6EF1E00CF1D38B0.roa
File:                     53DAB794850311F1B6EF1E00CF1D38B0.roa (raw, json)
Hash identifier:          Mvn7CV3crzr6NDVV/wCP4BMdxVtOly7GpYSG2wNe4dc=
Subject key identifier:   92:5D:01:E7:AA:C0:C5:77:F6:07:78:D0:12:8D:B7:ED:A5:F3:CC:47
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C71C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53DAB794850311F1B6EF1E00CF1D38B0.roa
Signing time:             Tue 21 Jul 2026 12:54:37 +0000
ROA not before:           Tue 21 Jul 2026 12:54:33 +0000
ROA not after:            Tue 18 Aug 2026 12:54:33 +0000
asID:                     215925
IP address blocks:        45.194.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116508 (0x1c71c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 21 12:54:33 2026 GMT
            Not After : Aug 18 12:54:33 2026 GMT
        Subject: CN=6a5f6c0c-1598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1b:a5:64:3b:7d:2f:57:91:70:90:89:05:25:
                    c3:ab:b5:9e:1e:dd:42:95:76:11:c3:73:40:c0:c8:
                    2a:9d:bc:a1:f8:45:4a:b6:bd:15:2f:3f:83:37:38:
                    27:da:67:f3:04:ef:e5:2b:8a:c1:4f:a6:13:57:91:
                    09:f0:45:e2:10:07:72:74:b8:90:bc:a2:de:8f:87:
                    6d:4c:f2:ad:cb:4c:05:68:5a:dd:89:5e:9c:cc:d1:
                    8d:a4:df:f5:41:7c:20:6b:c8:e3:af:5b:e2:1f:32:
                    05:62:cf:67:b5:44:03:7b:a3:0f:70:f7:7d:08:49:
                    05:6e:5a:f4:08:44:0a:60:ff:d5:88:f0:f5:bf:7c:
                    64:9d:0a:c6:3a:5b:3d:a4:61:d7:c2:43:79:bc:73:
                    5f:da:bb:02:ce:1f:65:7e:11:4c:33:5a:da:10:b5:
                    ee:43:32:17:71:5d:e2:a9:85:d2:79:0b:89:b1:b6:
                    a9:37:38:54:ba:29:71:a5:2f:d9:91:65:02:81:11:
                    96:fa:58:04:1a:c8:a6:80:ef:ad:71:d6:26:8f:c2:
                    9e:10:39:f5:73:59:dc:0f:0f:37:df:74:c0:79:76:
                    a7:34:06:26:95:67:ff:d3:b7:c0:3e:a7:2e:0f:21:
                    fd:07:ce:46:04:97:1e:9e:a7:49:ce:fb:91:51:5f:
                    7c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5D:01:E7:AA:C0:C5:77:F6:07:78:D0:12:8D:B7:ED:A5:F3:CC:47
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/53DAB794850311F1B6EF1E00CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:df:2f:88:00:cb:eb:b4:ca:2b:bd:41:d5:19:04:28:86:ef:
         23:14:0c:4e:6d:6c:0c:38:8b:cb:2b:d7:b2:c5:f0:45:42:90:
         cb:d2:a2:1c:57:7e:8a:8c:aa:40:c1:16:92:3f:b5:7f:f4:8c:
         ee:04:22:a6:0c:05:7e:12:1e:91:06:81:ef:28:a6:36:03:85:
         f4:2b:5e:cb:15:d0:d4:1c:62:fb:96:31:c5:37:2c:ec:ec:fe:
         cf:eb:85:02:5e:59:a4:bb:fc:74:31:fe:b5:b6:2e:7b:07:a2:
         92:7b:81:83:5c:c6:d3:2a:2c:f7:53:6d:10:4d:6b:70:1d:74:
         38:0f:42:3e:6e:56:8e:2a:cf:4c:c7:6c:d8:28:d7:f1:c2:e3:
         52:ff:4b:f5:44:95:29:21:e8:76:4d:1e:0f:c7:f8:93:97:70:
         8b:e3:f5:16:44:d8:cb:c9:99:66:7e:e4:61:4b:d2:26:c7:81:
         f3:c6:35:c9:ee:b3:59:a6:8c:1f:1a:e5:e0:ea:99:5a:8e:02:
         cb:e3:f5:6a:3a:4c:e0:d9:40:8b:2e:ff:0d:77:10:e3:21:4a:
         65:98:3c:87:4d:fa:8a:1b:c4:1a:66:35:be:e7:4b:96:f9:e4:
         a7:5e:c9:87:06:f0:21:50:a3:3d:cb:e1:16:59:4c:ec:8a:38:
         ca:9d:52:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:41:10 2026 by rpki-client