Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5345C56A86311F18BDD8E0DCF1D38B0.roa
File:                     B5345C56A86311F18BDD8E0DCF1D38B0.roa (raw, json)
Hash identifier:          A0ZVekuE7ieDbppEZxilgAtUSWJDCyugKfBbVvTv/2Y=
Subject key identifier:   12:9E:7E:DD:83:25:47:10:47:C9:2E:5B:A9:B7:20:70:7E:1E:FA:2A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D34C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5345C56A86311F18BDD8E0DCF1D38B0.roa
Signing time:             Fri 04 Sep 2026 13:22:42 +0000
ROA not before:           Fri 04 Sep 2026 13:22:38 +0000
ROA not after:            Sat 03 Oct 2026 13:22:38 +0000
asID:                     401366
IP address blocks:        45.202.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119628 (0x1d34c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  4 13:22:38 2026 GMT
            Not After : Oct  3 13:22:38 2026 GMT
        Subject: CN=6a9ac622-f12b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:2f:7b:6c:c4:b5:0d:bd:ce:a6:b5:c2:91:10:
                    a2:37:f3:54:77:5a:c2:73:3f:86:b3:50:6b:8f:93:
                    0f:05:04:85:af:b7:77:2e:c2:70:88:ca:a9:02:64:
                    27:44:71:1e:8d:db:d3:cf:60:1c:dd:55:17:93:e2:
                    35:97:3a:87:d9:6e:f9:87:c2:77:c1:b4:b0:11:da:
                    9c:25:2f:c4:b4:e0:13:b0:1f:e4:31:a1:32:48:2c:
                    06:e1:dc:0c:6e:a3:dd:0e:7b:f1:0f:63:c0:17:eb:
                    56:e5:7b:ad:4c:1c:18:f1:56:50:e0:fe:14:09:bc:
                    07:37:45:5c:88:1b:f5:50:ec:d2:e7:25:4f:ec:68:
                    ad:43:d1:4e:0d:84:00:1b:b3:20:11:ce:71:53:b1:
                    fb:4e:65:9a:41:af:db:4c:e5:97:70:1b:d2:f1:17:
                    a0:5b:58:b8:20:b3:a2:31:83:23:cb:ee:79:c5:29:
                    d8:c2:ee:42:5b:5c:2f:15:26:7c:50:3e:b7:19:f2:
                    4d:b8:51:8f:ce:cb:31:f6:de:af:0c:17:24:35:65:
                    a8:93:3b:9a:28:1b:0a:46:9a:a0:f5:46:d2:40:8f:
                    6f:5a:c4:8e:0e:3f:f2:c2:b4:27:51:f2:55:31:71:
                    33:a4:32:ff:75:4a:6b:c8:f7:01:a5:08:ea:0f:42:
                    db:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9E:7E:DD:83:25:47:10:47:C9:2E:5B:A9:B7:20:70:7E:1E:FA:2A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5345C56A86311F18BDD8E0DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:28:32:11:22:35:d3:0c:10:9a:b9:95:4a:8e:46:df:a9:05:
         75:97:06:fd:34:e5:ee:a8:f6:d3:4a:f5:f1:9a:ec:48:66:ee:
         e6:5b:32:b6:19:ed:db:f2:8f:8f:0e:86:ca:75:e4:c2:3f:f0:
         4c:26:03:23:8b:b4:2c:77:30:22:53:ba:9e:e2:61:d2:f5:08:
         61:65:f3:b4:b1:06:a8:2e:50:a1:33:28:f5:28:81:f4:05:cb:
         15:34:c2:ea:b9:92:bf:42:d7:24:a5:1e:e7:a4:2c:de:e4:cb:
         c4:bc:c5:73:53:27:4e:d6:38:b2:1e:20:51:55:cf:f5:51:58:
         a1:2c:d4:e4:51:eb:be:3e:21:93:10:91:8d:8c:de:6c:77:31:
         1c:c2:d1:8a:54:f4:f1:b6:a6:86:ae:41:75:ac:c4:b0:5c:1d:
         a4:81:a4:3d:e9:45:48:a9:62:77:0a:7d:02:e5:b8:a5:42:61:
         94:c9:02:2e:32:2f:5f:5b:66:0e:a8:d5:42:11:42:d1:19:1a:
         39:45:c1:2a:a8:e6:a9:4e:25:5a:f0:d7:6e:14:04:b9:af:90:
         27:5b:0e:b4:a7:94:f2:9f:93:be:36:4c:ab:a6:6d:63:59:b8:
         0b:12:e6:ea:1c:03:b2:64:0f:1b:40:53:52:14:48:50:b3:1c:
         a5:96:97:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----