Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54A1DEDA85EB11F19BF29501CF1D38B0.roa
File:                     54A1DEDA85EB11F19BF29501CF1D38B0.roa (raw, json)
Hash identifier:          vhGLRJpqhlINW3rZ8IEKBxcttKrPGHq996BI4sV10/8=
Subject key identifier:   B1:85:3F:6D:64:3A:DB:C5:E1:6F:62:59:EB:82:DF:46:04:E3:D7:DC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01C77B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54A1DEDA85EB11F19BF29501CF1D38B0.roa
Signing time:             Wed 22 Jul 2026 16:35:21 +0000
ROA not before:           Wed 22 Jul 2026 16:35:17 +0000
ROA not after:            Wed 09 Sep 2026 16:35:17 +0000
asID:                     25160
IP address blocks:        156.225.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116603 (0x1c77b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 22 16:35:17 2026 GMT
            Not After : Sep  9 16:35:17 2026 GMT
        Subject: CN=6a60f149-62d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a7:c8:90:e9:41:24:c0:08:c8:15:d8:c4:7f:
                    c3:da:e1:75:5b:27:9c:28:ef:9a:9f:7c:37:f5:4d:
                    a0:fe:b0:f6:f9:57:fa:d6:b8:11:ca:77:ab:a7:ba:
                    5d:2a:77:7d:3e:9c:6b:38:01:e0:c8:88:97:58:e9:
                    a5:b6:c5:49:7f:04:b4:d4:64:69:62:d9:92:62:1e:
                    e1:25:be:42:43:cb:e3:85:4a:82:de:cf:02:f2:f1:
                    43:8c:1f:c4:a3:49:da:f6:7a:12:06:95:c6:aa:c0:
                    46:f5:a7:98:5b:ba:56:aa:b4:0a:05:b9:8c:21:d3:
                    df:20:05:c1:40:85:f6:fb:ae:ce:db:28:3d:29:de:
                    34:bd:3a:f7:df:8f:b1:a3:ae:a2:2a:7e:51:c2:28:
                    0d:54:bb:49:7b:6f:21:31:16:ec:b8:58:c4:a8:f9:
                    d0:64:ca:43:a0:1e:1e:3d:73:8d:04:87:08:15:4d:
                    24:8e:ee:11:49:19:c6:d8:b3:96:fb:9b:58:df:00:
                    ab:70:2b:35:75:42:27:c0:43:13:62:f0:b4:e5:7d:
                    a3:5e:94:59:34:50:d6:06:fe:1b:fc:21:89:ca:6a:
                    68:81:c9:94:93:05:31:70:51:a0:eb:7a:52:3f:2c:
                    6c:c2:d7:21:23:97:9a:c5:15:8a:c0:e2:1a:0a:61:
                    e1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:85:3F:6D:64:3A:DB:C5:E1:6F:62:59:EB:82:DF:46:04:E3:D7:DC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54A1DEDA85EB11F19BF29501CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:02:dd:9e:f7:37:de:2c:0d:41:41:05:b6:11:f6:85:2e:88:
         29:5b:02:ab:bf:f0:ba:6f:61:b2:dd:76:57:93:4e:9c:76:63:
         31:ff:21:d5:99:81:9d:86:0b:01:05:2f:d3:c8:7e:8e:98:71:
         22:1b:3d:95:6d:11:20:ab:d9:fb:aa:dc:d8:b4:dc:8e:6c:5b:
         65:09:d6:67:26:2b:73:34:6f:38:3d:07:58:5a:d6:05:4c:d4:
         61:52:68:db:76:30:10:83:00:16:66:51:fa:9a:7b:cd:4b:0f:
         2e:ff:65:f9:d2:1e:30:8d:82:ff:f3:2c:71:d4:b3:08:17:65:
         e8:31:1c:82:a4:7b:2b:98:9b:4b:5c:d1:62:b5:31:f2:9f:f6:
         af:29:86:51:05:ea:cb:e5:7e:79:9b:b9:d7:25:6d:de:87:09:
         23:07:70:20:95:7f:73:c5:a6:b4:25:9a:c9:6c:2c:df:b8:3e:
         8e:99:e3:60:f1:34:85:40:8e:39:90:b8:d3:b0:a4:95:8e:05:
         0d:07:e1:4e:2d:0b:a5:07:19:1b:12:2b:0b:fe:90:00:d1:38:
         55:ce:43:b7:78:83:57:db:bd:3a:26:5c:8c:98:a2:d5:56:e9:
         82:8e:ae:7f:91:49:89:c4:1a:0a:d6:1a:44:e0:0c:77:b9:f0:
         fb:a4:f0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:06:02 2026 by rpki-client