Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57DA72E6B6ED11F1993064DECE1D38B0.roa
File:                     57DA72E6B6ED11F1993064DECE1D38B0.roa (raw, json)
Hash identifier:          /7wSMsRh9ndX+hdehpoFk2bqZKSPlICr7R+ADt71YeY=
Subject key identifier:   2A:DC:EF:84:9E:20:21:3F:B5:A5:8D:92:6D:CC:B3:9A:F5:29:28:92
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D845
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57DA72E6B6ED11F1993064DECE1D38B0.roa
Signing time:             Wed 23 Sep 2026 01:23:13 +0000
ROA not before:           Wed 23 Sep 2026 01:23:08 +0000
ROA not after:            Thu 01 Oct 2026 01:23:08 +0000
asID:                     154321
IP address blocks:        156.226.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120901 (0x1d845)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 23 01:23:08 2026 GMT
            Not After : Oct  1 01:23:08 2026 GMT
        Subject: CN=6ab32a00-e3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bc:38:b2:60:10:e2:be:ed:ab:46:49:e0:ce:
                    86:92:ce:06:98:70:b9:73:97:ee:b3:2e:67:cc:ac:
                    72:7e:89:3e:b8:93:43:12:15:b6:33:48:48:6c:7d:
                    87:6a:94:cb:91:ca:7a:b4:d0:18:63:e2:76:e0:45:
                    d3:a6:52:fc:5b:54:0e:07:30:ea:f1:04:81:5d:37:
                    69:be:83:a7:6e:4c:ac:5c:df:6e:ff:9a:18:ab:de:
                    62:c2:5e:28:f0:1b:a0:fa:38:1a:12:4a:c7:70:18:
                    0b:3c:12:2f:f3:0a:68:9f:60:a3:33:40:f7:23:aa:
                    9d:7f:0e:2b:71:11:e7:6c:1c:e8:63:71:19:f7:dc:
                    b5:26:d8:4c:bd:3f:85:2e:fa:7b:bb:63:74:23:54:
                    28:66:6e:97:ec:71:6b:4c:3c:33:6d:cf:ee:77:8c:
                    a9:a7:e6:ca:ee:f7:e0:e1:98:29:56:0f:70:10:e3:
                    fa:7d:28:bd:79:3b:32:8c:ba:d9:2c:10:4a:ce:16:
                    57:0f:da:d1:5d:98:22:f6:5c:cc:39:c4:df:4a:4a:
                    84:76:3f:3f:61:54:4e:c7:8c:f6:9a:61:ef:14:98:
                    41:60:9a:e2:64:90:b1:4e:cb:85:db:7a:61:3f:6c:
                    10:a5:2b:19:8c:67:61:cd:ce:d9:83:a8:a6:c6:0b:
                    6c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DC:EF:84:9E:20:21:3F:B5:A5:8D:92:6D:CC:B3:9A:F5:29:28:92
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57DA72E6B6ED11F1993064DECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:4a:ec:0e:4e:cd:db:92:96:50:e6:de:bd:49:96:36:ed:d0:
         8f:d5:af:80:bb:75:38:80:8c:2e:b0:38:2c:02:e4:ec:cc:ac:
         9a:a4:f2:6e:5c:b5:d2:5e:8f:13:e6:64:a5:83:5b:42:45:e0:
         7a:38:0a:47:a7:e1:e9:49:45:db:98:d0:31:2a:b1:16:54:e1:
         f7:16:69:d1:70:c2:01:9e:79:9f:e9:31:42:cc:69:56:71:d9:
         e6:e6:d3:03:ab:32:69:ad:ec:be:a9:07:98:b1:2f:19:8a:c5:
         1f:fc:fd:c2:25:a0:e7:12:ca:bb:9e:1c:30:c5:ad:e7:d3:c2:
         54:9b:47:3c:0a:9d:11:b8:ec:fc:85:8e:61:c5:f8:e8:cc:d7:
         f3:3f:80:16:85:6c:4b:b5:cd:74:6b:6e:bd:09:28:7d:6d:64:
         6f:81:b0:4c:66:21:fb:4a:2f:f1:07:04:b6:f4:ca:38:2a:e8:
         00:0d:42:55:e8:aa:d3:1a:81:6b:ea:da:88:f3:b6:63:f0:1a:
         14:6f:b5:cd:9c:2a:b4:f6:df:d2:20:51:06:ca:5b:fb:b5:9a:
         c7:be:d7:61:56:a3:a2:e1:52:41:06:3c:2b:60:dc:87:d2:89:
         74:66:69:52:b5:f6:3c:95:d4:34:cf:f7:89:2c:48:25:51:d6:
         66:3c:87:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----