Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FCA1120449E11F1A3C09B19CF1D38B0.roa
File:                     6FCA1120449E11F1A3C09B19CF1D38B0.roa (raw, json)
Hash identifier:          6uBC9lkWiCTl7AEqvPr8rLKotZKHvmrTbvlTKfKFQQU=
Subject key identifier:   73:AC:AB:C7:18:3D:CF:80:4D:40:5D:C7:C2:AC:3F:7B:D1:47:2E:67
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01B03A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FCA1120449E11F1A3C09B19CF1D38B0.roa
Signing time:             Thu 30 Apr 2026 14:11:10 +0000
ROA not before:           Thu 30 Apr 2026 14:11:05 +0000
ROA not after:            Sat 30 May 2026 14:11:05 +0000
asID:                     13335
IP address blocks:        45.198.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110650 (0x1b03a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 30 14:11:05 2026 GMT
            Not After : May 30 14:11:05 2026 GMT
        Subject: CN=69f362fe-2663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:87:17:c5:a5:c8:bd:12:dc:59:63:b3:44:26:
                    2c:2d:45:dc:fe:74:7e:3c:0d:32:5b:df:53:3c:ba:
                    07:c2:7d:b0:b5:47:82:2e:17:36:a3:11:a7:9a:20:
                    0a:78:08:4a:6c:a4:eb:ce:4b:24:2e:3a:b2:3e:ae:
                    51:5a:cb:de:83:84:0c:62:54:c0:6f:f9:ec:6a:14:
                    97:5d:36:79:6c:c5:55:fd:3a:fb:2d:4f:1f:89:e2:
                    9a:ec:dc:71:03:1c:43:03:7a:2d:63:8e:4d:a1:14:
                    60:9f:1b:06:d3:f1:39:16:d1:db:65:9e:f7:a0:ed:
                    83:91:39:89:83:1d:38:67:06:01:55:8a:b6:7c:97:
                    f6:e8:86:62:89:1b:9b:03:7f:55:5d:5d:18:55:ed:
                    62:61:ba:98:6d:6c:aa:dd:24:03:f9:ac:dd:39:2e:
                    fc:0d:b2:df:b8:b1:ac:dd:b2:94:48:42:32:ad:0a:
                    2a:0d:77:31:b0:ec:52:99:b5:96:f8:1a:53:74:73:
                    25:2e:cb:57:2c:7a:7d:4d:87:8b:0e:4d:48:5e:bf:
                    e8:8a:3f:8d:75:ac:18:d9:c1:d8:3e:d4:d1:cd:44:
                    4a:09:a0:5c:73:62:2a:74:88:67:c6:3b:36:a8:ef:
                    d4:b1:e7:4b:01:f0:fe:c4:4f:50:e9:db:82:69:39:
                    77:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AC:AB:C7:18:3D:CF:80:4D:40:5D:C7:C2:AC:3F:7B:D1:47:2E:67
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6FCA1120449E11F1A3C09B19CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:89:ad:89:37:9a:75:cd:03:7f:e3:e2:3b:7a:cb:2a:ec:55:
         58:f4:93:f4:89:c4:8c:9d:94:be:b7:ce:6e:cd:b4:53:19:f4:
         11:35:81:2f:9d:07:37:75:10:df:67:35:2a:fe:49:d8:b6:86:
         0a:2f:07:90:30:1c:d9:d7:6a:3c:e3:e9:13:d6:d3:d7:2d:02:
         8b:8b:1f:89:bb:46:52:dc:13:f9:5a:9b:30:7e:de:de:0c:01:
         0e:14:a3:7f:5a:75:16:df:bd:1f:99:e6:64:65:d4:08:82:a8:
         e6:50:9c:4f:b5:9d:68:ca:86:d9:0e:9c:61:4c:e7:5d:38:e1:
         e9:38:2a:60:c6:00:57:d9:28:c0:a6:7a:81:98:c2:79:b3:02:
         f1:66:10:c3:75:de:56:e8:15:43:92:6a:80:fa:35:26:31:c8:
         81:47:16:02:a4:a8:7a:6d:ff:f0:f6:81:6c:f5:d6:25:4c:1d:
         c1:cb:84:9d:4a:ee:f1:be:be:f6:d1:28:92:58:b2:73:4b:11:
         a5:2c:df:d8:bb:9e:e2:ee:2b:65:2d:30:e1:a6:60:e2:f1:8f:
         2e:09:91:cd:3e:69:d0:53:9f:d6:dd:77:91:86:bb:44:d7:ac:
         c0:69:6d:6b:62:08:d6:01:5a:1f:54:b0:1c:b9:e3:34:a5:b6:
         75:be:e1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:44:05 2026 by rpki-client